Privacy policy

In short

• No advertising, and we never sell your data.
• Documents in your personal wallet are visible only to you, not to the other members of your trip.
• NomadCrew never touches money. It records who paid and who owes; you settle up in your own payment apps.
• Your location is collected only while you have location sharing turned on and the app is open on your screen, and your trip members see it at the precision you choose.
• To get a copy of your data or request account deletion, email [email protected]. When version 0.2.5 is available for your device, you can also request account deletion from Profile in the app. The account deletion page explains the confirmation steps and what is removed or retained.
• You can check whether the service is up on the status page.

Information collection and use

The app collects the following information when you create an account and use it:

• Account information: email address, name, username, and (optionally) profile picture, provided by you directly or via your Apple ID or Google account when you sign in.
• Profile and settings: the travel archetype you get from the short quiz when you sign up, your answers to that quiz, and settings you save, such as your notification choices and location precision.
• Trip data: trip names, dates, destinations, members, chat messages, to-do items, polls, and expenses that you and your trip members create in the app.
• Travel documents: documents you choose to upload to the Wallet feature (e.g. passports, visas, insurance cards, vaccination records, flight bookings, hotel reservations, receipts, loyalty cards) and their metadata (document type, name, upload date).
• Push notification token: an opaque device identifier issued by Apple Push Notification service (APNs) on iOS or Firebase Cloud Messaging (FCM) on Android, used solely to deliver notifications you have opted into.
• Device and request metadata: your device's Internet Protocol (IP) address, mobile operating system and version, app version, and device model. This data appears in standard server request logs and is used for service operation, security, and debugging.
• Error and crash reports: when the app hits an error or crashes, it sends a report to Sentry, our error monitoring provider, so we can fix the bug. A report contains the stack trace, the app version and build, your device model and operating system version, and a short record of what happened just before the error: which parts of the app you tapped, the addresses and results of recent requests to our server, and any warnings the app logged. A request address can include a name or username you typed when searching for someone to invite. While you are signed in, reports are linked to your NomadCrew account ID, a random identifier, not to your name or email address. Sentry's option to send default personal information is turned off in the app, and the app does not add the contents of your messages, documents or location to reports. Like any server, Sentry sees the IP address a report is sent from.

The app does not include any advertising or analytics SDK. Sentry is the only diagnostics service it sends data to. Besides error and crash reports, it sends Sentry performance timings for a random 20% of app activity: how long the app took to start, how long requests to our server took and their addresses, and whether the screen stuttered or froze. Sentry's screen and navigation tracking is not set up in the app, so this data does not name the screens you open. Sentry also records when each app session starts and ends and whether it ended in a crash. The website uses cookieless page analytics, described under This website.

Location data

Location sharing is off until you turn it on. The app collects your device's location only while you have location sharing turned on and the app is open in the foreground on your phone. It is not collected in the background. Collection stops when you close or background the app, or when you turn sharing off.

Your location is shared with the members of your trips at the precision you choose in Profile:

• Precise: your exact location.
• Approximate: city level only.
• Hidden: your location is not shown to anyone.

Your shared location is used for the following purposes only:

• Live trip map: to display your position to other current members of your trips while you have sharing turned on, so your group can find each other and coordinate meetups.
• Service operation: transmitted to NomadCrew's backend over an encrypted connection (HTTPS/TLS), then relayed to authorised trip members.

Your location is not sold or transferred to advertisers, data brokers, or analytics services. It is not used to build behavioural profiles, target advertising, or recommend products. You can stop sharing at any time with the sharing switch on a trip's map, by setting your location to Hidden in Profile, or by revoking the app's location permission in your device's system settings.

Document storage

The app has a “Wallet” feature where you can store travel-related documents. The types of documents you may upload include:

• Passports and visas
• Travel insurance cards
• Vaccination records
• Flight bookings and hotel reservations
• Receipts and loyalty cards

Purpose: Document storage is provided solely so you have your travel documents to hand. We do not access, analyse, or process the contents of your uploaded documents for any purpose other than storing them and showing them to you.

How documents are stored: All uploaded documents are stored in Cloudflare R2 object storage with server-side encryption at rest. Documents are transmitted between your device and our servers over encrypted connections (HTTPS/TLS).

Retention: Documents are kept for as long as you choose to keep them. When you delete a document, it is soft-deleted and permanently purged from our servers after 30 days. You can delete individual documents at any time in the app.

Access controls: The wallet is personal. Documents you upload to it are accessible only to you. The app does not currently offer a way to share wallet documents with trip members.

Sensitive personal data

Certain documents you may upload contain sensitive personal data that receives special protection under data protection law, including the UK GDPR and the EU General Data Protection Regulation (GDPR):

• Health data: Vaccination records and medical certificates are special category data under Article 9 of the GDPR.
• Government-issued identity information: Passports, visas, and national ID documents contain identity numbers and biometric data.

Passports, visas, insurance documents and vaccination records are uploaded only if you choose to upload them. The app does not show a separate consent step for these documents; choosing a file and uploading it is your decision. You are not required to upload any sensitive documents to use the app, and you can delete any document at any time.

Important: Do not use the app as the only place you keep an important document. Always keep the originals of your identity and travel documents. We are not responsible for the loss of a document stored in the app.

This website

The nomadcrew.uk website handles a small amount of data of its own:

• Email list: if you join the email list, your email address is stored in Supabase and used to send you a welcome email, through Resend, and occasional NomadCrew updates. To come off the list, email [email protected].
• Feedback form: your name, email address and message are sent to NomadCrew's backend at api.nomadcrew.uk.
• Page analytics: the website uses Umami, a cookieless analytics tool that we host ourselves on Fly.io. It counts page views and a few button clicks, and records the referring site, browser, device type and country. It does not set cookies or store your IP address, and it does not follow you across other websites.
• Free AI tools: what you type into the trip cost, trip budget and packing list tools is sent to Groq, an AI provider, to generate the result. Do not enter personal details into these tools.
• Expense splitter: the trip expense split calculator keeps your names and amounts in your browser. They are not sent to us.
• Fonts: pages load the Work Sans and Source Serif 4 typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which receives your IP address when the fonts are downloaded.
• Map image: the homepage product tour loads a static map image from Google Maps, which receives your IP address when the image is downloaded.
• Google preferred sources button: when you scroll near the end of a guide, the page loads a script and a frame from Google News (news.google.com). Google receives your IP address and the page address, and may read its own cookies, which can identify your Google account. If you choose the button, Google records NomadCrew as a preferred source in your Google account. We do not receive that choice.

Third party access

We do not sell your personal data and do not share it with advertisers, data brokers, or behavioural analytics providers.

The app does rely on a small set of essential service providers (“processors”) to operate. They receive only the data they need to do their job, and act only on our instructions:

• Hosting: our API server and main database, which hold your account, trips, chat and expenses and relay shared locations, run on a server we manage on Oracle Cloud Infrastructure.
• Authentication: Firebase Authentication handles sign-in via email/password, Apple Sign-in, and Google Sign-in, and issues your session token.
• Document storage: Cloudflare R2 stores the documents you upload to your wallet, encrypted at rest.
• Push notification delivery: Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android relay push messages from our backend to your device. Expo Application Services (EAS) acts as the relay between our backend and APNs/FCM.
• Error monitoring: Sentry receives the app's crash and error reports and performance timings, described under Information collection and use, so we can diagnose and fix bugs. They are linked to your account ID, not your name or email address, and the app does not add the contents of your messages, documents or location to them.
• Website: Supabase stores email-list sign-ups, Resend sends the welcome email, Groq processes what you type into the website's free AI tools, and Fly.io hosts our Umami analytics.

We may also disclose personal data:

• when the law requires it, such as to comply with a court order or similar legal process;
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a lawful government request;
• if the NomadCrew business itself is sold or merged, in which case the new owner will be bound by this Privacy Policy. This is not selling your data: your data would only move with the whole business.

Uninstalling the app

Uninstalling the app stops it collecting anything from your device. It does not delete your account or the data stored on our servers. To request account deletion and see which shared trip records remain, follow the steps on the account deletion page.

Data retention policy

• While your account exists: we keep your account, trip data and wallet documents so the app can show them to you and your trip members.
• Items you delete in the app: wallet documents, expenses, itinerary items, polls and to-dos you delete are purged from our servers within 30 days.
• When you delete your account: we act on the request within 30 days of confirming it. Deletion removes your NomadCrew sign-in account, profile, location data and private wallet files linked to your account. Some account or file cleanup may continue after your request is accepted, with unfinished work retried in the background. Deleted data is purged from backups within 30 days. The account deletion page explains the process.
• In-app confirmation: in version 0.2.5, once available for your device, you confirm your identity again before submitting the deletion request. The app signs you out after the request is accepted and tells you whether deletion is complete or still in progress.
• Shared trip records: trips with other members, and their itinerary items, polls, to-dos, expenses, recorded payments, messages and confirmed shared receipts, remain available to those members. Retained records identify your deleted account as “Former member”. Trips with no remaining members are deleted.
• Diagnostics: crash and error reports and performance timings already sent to Sentry stay there until Sentry's retention period ends. They carry your account ID, not your name or email address.

Children

NomadCrew is not meant for children under 13, and we do not knowingly collect personal data from them or market to them. If we find out that a child under 13 has given us personal data, we will delete it.

If you are a parent or guardian and think your child has given us personal data, email [email protected] or use the feedback form and we will remove it.

Data security

We protect your information with the following measures:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
• Encryption at rest: Uploaded documents are encrypted at rest in Cloudflare R2 using server-side encryption. The application database storing your account, trip, and chat data runs on Oracle Cloud Infrastructure, whose storage volumes are encrypted at rest.
• Access controls and authentication: Access to your data is protected by authentication (Firebase Authentication with email/password, Google, and Apple Sign-in) and role-based access controls.
• Audit logging: Server-side access to stored documents is logged for security monitoring purposes.
• Automatic purge: Soft-deleted data is permanently purged from our servers after 30 days.

No method of electronic storage or transmission is completely secure, so we cannot guarantee the absolute security of your information.

Lawful basis for processing

We process your personal data on the following legal bases under the UK GDPR and the EU GDPR:

• Contract performance (Article 6(1)(b)): Processing necessary to provide the app's core features, including trip management, group chat, and location sharing.
• Legitimate interests (Article 6(1)(f)): Crash, error and performance reporting in the app, cookieless page analytics on the website, security monitoring, and fraud prevention. Our legitimate interest is to maintain and improve the app and website while protecting our users.
• Consent (Article 6(1)(a)): Document storage in the wallet feature. You consent to this processing when you choose to upload documents. You may withdraw consent at any time by deleting your documents.

Your data rights

Under data protection law, including the UK GDPR and the EU GDPR, you have the following rights regarding your personal data:

• Right of access: You can see most of what we hold about you in the app: your profile, trips, messages, expenses and wallet documents. For a copy of all the personal data we hold about you, including records the app does not show, such as server request logs and your push notification token, email [email protected].
• Right to erasure: You can delete individual documents, expenses, itinerary items, polls and to-dos in the app. To request account deletion and review what stays in shared trips, see the account deletion page, or contact us at [email protected] or through the feedback form.
• Right to data portability: The app lets you open and view the documents in your wallet, but it has no export for your trips, messages or expenses. To get a copy of the data you have given us in a machine-readable format, email [email protected].
• Right to withdraw consent: You can withdraw consent for document storage by deleting your documents at any time. This does not affect the lawfulness of processing carried out before withdrawal.
• Right to rectification: You can update or replace any document you have uploaded. To correct anything else we hold about you, email [email protected].
• Right to restriction of processing: You may ask us to restrict processing of your personal data by contacting us at [email protected] or through the feedback form.
• Right to object: You have the right to object to processing based on legitimate interests. Contact us at [email protected] or through the feedback form.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. For UK users, this is the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113. For EU users, you may contact your local data protection authority.

To exercise any of these rights, use the in-app controls or email [email protected] or use the feedback form. We will respond to your request within 30 days.

Changes

When this policy changes, we update this page and the date at the top. If a change affects how we use personal data you have already given us, we will email you about it before it takes effect.

This privacy policy was last updated on 14 October 2026.

International data transfers

The providers below may process or store your data outside your country of residence, including in the United States, the European Union, and other regions where they maintain infrastructure:

• Oracle Cloud Infrastructure: hosts our API server and main database.
• Cloudflare R2: distributes object storage across Cloudflare's global network.
• Firebase Authentication: processes authentication data on Google's infrastructure under Google's privacy policy.
• Apple Push Notification service / Firebase Cloud Messaging: route push notifications through Apple and Google infrastructure.
• Sentry: processes the app's error, crash and performance reports on its own infrastructure under its privacy policy.
• Supabase: stores the website's email-list sign-ups.
• Resend: sends the website's welcome email.
• Groq: processes what you type into the website's free AI tools.
• Fly.io: hosts our self-hosted Umami website analytics.
• Google Fonts and Google Maps: receive your IP address when the website loads its typefaces and the homepage map image.
• Google News: receives your IP address and the page address when a guide loads the preferred sources button.

Where your personal data is transferred outside the UK or the European Economic Area, we rely on appropriate safeguards as required by data protection law, including Standard Contractual Clauses (SCCs) or adequacy decisions by the UK Secretary of State or European Commission, in addition to the safeguards each processor has in place under its own privacy programme.

Third party services

The app relies on the following third-party services, each of which has its own privacy policy:

• Oracle Cloud Infrastructure — hosting for our API server and main database.
• Supabase — the website's email list.
• Cloudflare — document storage (R2 object storage), edge networking, and hosting for this website (Cloudflare Pages).
• Expo Application Services (EAS) — mobile app delivery and push-notification relay.
• Apple Push Notification service (APNs) — push delivery on iOS, and Apple Sign-in identity.
• Firebase Authentication, Firebase Cloud Messaging (FCM) and Google Sign-in — app authentication, push delivery on Android, and Google Sign-in identity.
• Sentry — crash, error and performance monitoring for the app.
• Resend — the website's welcome email.
• Groq — the website's free AI trip tools.
• Umami — cookieless website analytics, self-hosted by NomadCrew on Fly.io.
• Google Fonts — the website's typefaces.
• Google Maps — the static map image on the homepage.
• Google News — the preferred sources button at the end of each guide.

Contact us

If you have any questions about privacy while using the app, email [email protected] or use the feedback form.