Privacy Policy.

Information we collect.

The app works without any account. If you sign in to enable cross-device sync and community reviews, we additionally collect a small set of account data. Categories:

• Authentication identifiers (signed-in users only) — your email address and a Supabase user id. If you sign in with Apple and do not opt to hide your email, we receive your email; if you choose to hide it, we receive Apple's private relay address.
• Display name (signed-in users only) — captured from Apple Sign In's full name on first sign-in (formatted as "First L."), or derived from your email if you used email/password. Used to attribute community reviews. You can change it later.
• Location data — your approximate device coordinates, used only to find nearby campsites and to anchor weather lookups. Location data is sent to our servers only as part of a search query and is not stored linked to your account. The system-level CoreLocation permission can be revoked at any time in iOS Settings.
• Usage data (signed-in users) — saved campsites, visited spots, trip routes, your reviews (rating + note + visit date), and personal notes. Synced to your account so they appear on every device you sign into.
• Profile photo (signed-in users only) — if you upload an avatar, the image is stored in Supabase Storage and associated with your account. You can replace or remove it at any time in Account.
• Search session state — chat history and last search results, kept in memory for the lifetime of your search session and not transmitted to our servers as a separate record.
• Voice input (when you tap the microphone) — speech is processed via Apple's SFSpeechRecognizer framework, which may transmit audio to Apple's servers for transcription. We do not store or transmit the audio ourselves; we only receive the transcribed text, which is then handled like any other typed query.
• Feedback and bug reports — when you send a bug report or feature request via the in-app Help screen, we collect the body text you wrote, an optional contact email if you provided one, and basic diagnostic context (app version, iOS version, device model, your user id when signed in) to help us reproduce issues.
• Diagnostic and analytics events — we collect crash reports and a small number of non-fatal error events for debugging (via Sentry), and product-interaction events such as which features you use and how you move through the search-to-save funnel (via PostHog). See "Third-Party Services" below for what's stripped before sending.

How we use your information.

• To provide AI-assisted campsite search and recommendations.
• To sync your saved spots, trips, reviews, and preferences across your devices.
• To display your reviews to other users in the community-review feature, attributed to your display name.
• To moderate content (process flagged reviews, enforce blocks).
• To deliver weather, park alerts, and place photos through the providers below.

Data storage.

Account data is stored using Supabase. Data is encrypted in transit (TLS) and at rest. Per-user data is protected by row-level security so only you can write to your records and most reads are restricted to you. Community reviews are explicitly stored in a public-read table — by leaving a review you publish your display name, star rating, note text, and the campsite it relates to.

Third-party services.

NomadAI sends limited data to a small number of third-party services to deliver core features and to help us debug and improve the app. We use first-party product analytics (PostHog) and crash reporting (Sentry) — neither shares your data with advertisers or data brokers. We do not use third-party advertising or cross-app trackers.

• Supabase — hosts the database, authentication, edge functions, and avatar storage. Receives all account data described above. Supabase Privacy.
• Anthropic (Claude) — receives your AI search query text along with anonymous coordinates. We send queries through our own server proxy; queries are not stored by us. Anthropic Privacy.
• Sentry — receives crash reports and a small number of non-fatal error events (e.g. a sync failure) so we can debug the app. We strip your email address, IP address, and any URL query strings before sending. We do attach an opaque user identifier (your Supabase user id) when you're signed in so we can correlate errors per user. Used only for diagnostics. Sentry Privacy.
• PostHog — receives product-interaction events (which features you use, how you move through the search-to-save funnel, when you submit feedback). When signed in, events are tied to your opaque Supabase user id; otherwise anonymous. We never send raw search text, campsite names or identifiers, your email, or precise coordinates. Used only for our own first-party analytics — never shared with anyone or used for advertising. PostHog Privacy.
• Open-Meteo — receives campsite coordinates only (no account info) for weather lookups. Open-Meteo Terms.
• Google Places (via our proxy) — receives campsite names and coordinates to retrieve photos. We never send your account info. Google Privacy.
• National Park Service — public alerts API; receives only US state codes. NPS Privacy.
• Recreation.gov (RIDB) — receives only coordinates + radius to retrieve federal campsite listings.
• Apple — Sign in with Apple authentication, plus on-device speech recognition for voice search (see Voice Input above). Apple Privacy.
• Vercel — hosts this static marketing site. Receives standard web logs (IP, user agent) for the marketing pages only. The iOS app does not use Vercel.

NomadAI does not sell your personal data and does not use it for advertising.

Community reviews.

When you submit a review, your display name, star rating, note text, and the campsite identifier are made publicly readable by all users of NomadAI. You can edit or delete your reviews at any time. If three or more users report a review, it is automatically hidden from public view; the author can still see it. We may permanently remove reviews that violate our community guidelines.

Reporting and blocking.

Reports submitted via the Report flow are stored privately and used only for moderation. Blocking another user hides their reviews from your view; we do not notify the blocked user. The list of users you have blocked is private to you.

Shared spot links.

When you create a share link (Saved → Share trip), a snapshot of the trip's stops (name, coordinates, fees, description) is stored to generate a shareable link. The snapshot is publicly accessible to anyone with the link.

Your rights.

You have the right to:

• Access the personal data we hold about you.
• Delete your account and all associated data. From the app: Settings → Account → Delete account. This permanently removes your reviews, profile, saved spots, and trips. The action cannot be undone.
• Export the data you have stored with us (currently via emailed request — automated export is in development).
• Withdraw consent at any time by signing out and uninstalling the app. Sign-out alone keeps cloud data; deleting your account purges it.
• Revoke Sign in with Apple at any time in iOS Settings → Apple ID → Sign-In & Security → Apps Using Apple ID.

For data-access or export requests, contact us at hello@nomadai.us.

Children's privacy.

NomadAI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

Data retention.

We retain account data for as long as your account is active. When you delete your account, we permanently remove your account and personal data within 30 days. Backups containing residual copies may persist for an additional 30 days before being overwritten.

Changes to this policy.

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change.

Contact us.

If you have questions about this privacy policy, contact us at hello@nomadai.us.