Effective as of 2026-05-09
This privacy policy applies to the Nomad Crew app (hereby referred to as "Application") for mobile devices that was created by Naqeebali Shamsi (hereby referred to as "Service Provider") as an Open Source service. This service is intended for use "AS IS".
Data Controller: Naqeebali Shamsi, operating as NomadCrew. Contact: nomadcrew5 [at] gmail [dot] com or use our feedback form.
The Application collects the following information when you create an account and use it:
The Application does not embed any third-party advertising or behavioral analytics SDK, and does not track which screens you visit, how long you spend on them, or what you do inside the app for advertising or profiling purposes.
The Application collects your device's location only when you actively choose to share it with a trip you are a member of, by enabling live-location sharing in that trip's map view. Location is not collected in the background and is not collected when no trip's map is open.
Your shared location is used for the following purposes only:
Your location is not sold or transferred to third-party advertisers, data brokers, or analytics services. It is not used to build behavioral profiles, target advertising, or recommend products. You can stop location sharing at any time from within a trip's map view, or by revoking the Application's location permission in your device's system settings.
The Application provides a "Wallet" feature that allows you to store travel-related documents for your convenience. The types of documents you may upload include:
Purpose: Document storage is provided solely for your travel convenience and organization. The Service Provider does not access, analyze, or process the contents of your uploaded documents for any purpose other than storing and displaying them to authorized users.
How documents are stored: All uploaded documents are stored in Cloudflare R2 object storage with server-side encryption at rest. Documents are transmitted between your device and our servers over encrypted connections (HTTPS/TLS).
Retention: Documents are retained for as long as you choose to keep them. When you delete a document, it is soft-deleted and permanently purged from our servers after 30 days. You may delete individual documents or all of your documents at any time through the Application.
Access controls: Documents uploaded to your personal wallet are accessible only to you. Documents uploaded to a trip's group wallet are accessible to all current members of that trip. When you share a document with a group, all trip members can view it.
Certain documents you may upload contain sensitive personal data that receives special protection under applicable data protection laws, including the EU General Data Protection Regulation (GDPR):
The Application will request your explicit consent before you upload these types of documents. You are not required to upload any sensitive documents to use the Application.
Important: You should not use the Application as the sole storage location for any important document. Always retain the original copies of your identity and travel documents. The Service Provider is not responsible for data loss.
When you upload a document to a trip's group wallet, all members of that trip can view the document. Please exercise caution when sharing identity documents (such as passports or visas) with group members. You should only share sensitive documents with people you trust.
The Service Provider does not control how other trip members may use, screenshot, or share documents that you make available through the group wallet. Once a document is shared with a group, other members may have viewed or saved it before you remove it.
The Service Provider does not sell your personal data and does not share your personal data with third-party advertisers, data brokers, or behavioral analytics providers.
The Application does, however, rely on a small set of essential service providers ("processors") to operate. These processors only receive the data necessary to perform their function, and only act on instructions from the Service Provider:
In addition, the Service Provider may disclose User Provided and Automatically Collected Information:
You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at nomadcrew5 [at] gmail [dot] com or use the feedback form, and they will respond in a reasonable time.
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.
The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider at nomadcrew5 [at] gmail [dot] com or through the feedback form so that they will be able to take the necessary actions.
The Service Provider is concerned about safeguarding the confidentiality of your information and implements the following security measures:
While the Service Provider takes reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. The Service Provider cannot guarantee absolute security of your information.
We process your personal data on the following legal bases under the GDPR:
Under applicable data protection laws, including the GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, you may use the in-app controls or contact the Service Provider at nomadcrew5 [at] gmail [dot] com or through the feedback form. We will respond to your request within 30 days.
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
This privacy policy is effective as of 2026-05-09.
The Application's backend, authentication, document storage, and notification delivery providers operate globally and may process or store your data outside your country of residence, including in the United States, the European Union, and other regions where these providers maintain infrastructure:
Where your personal data is transferred outside the UK or the European Economic Area, the Service Provider relies on appropriate safeguards as required by applicable data protection law, including Standard Contractual Clauses (SCCs) or reliance on adequacy decisions by the UK Secretary of State or European Commission, in addition to the safeguards each processor has in place under its own privacy program.
The Application relies on the following third-party services, each of which has its own privacy policy:
If you have any questions regarding privacy while using the Application, contact the Service Provider at nomadcrew5 [at] gmail [dot] com or through the feedback form.