Privacy Policy

1. Information We Collect

Account information. When you create an account, we collect your name, email address, and (if you sign up with a password) a securely hashed version of your password. We never store your password in plain text.

Usage data. We record your daily AI question count, your selected traveler persona, and the date of your last question. This is used solely to enforce free-tier limits and personalise your experience.

Payment information. If you upgrade to Pro, payment is handled entirely by Dodo Payments. We store only your Dodo customer ID and subscription ID — we never see or store your card number, expiry date, or CVV.

Traveler tips. If you submit a community tip, we store your name, city, health condition, and tip text. These may be published publicly after review.

Destination ratings. If you submit a star rating, we store your user ID, the destination slug, your rating, and an optional comment.

Log data. Our servers automatically record standard web log data including IP addresses, browser type, pages visited, and timestamps. This data is used for security and to diagnose technical issues.

2. How We Use Your Information

• To provide and improve the NomadVital service
• To enforce daily question limits for free-tier users
• To personalise AI responses based on your selected traveler persona
• To process subscription payments via Dodo Payments
• To send password reset emails when you request them
• To publish approved community traveler tips
• To monitor for abuse, spam, and security threats
• To comply with applicable laws and regulations

We do not sell your personal data. We do not use your data to train AI models. We do not send marketing emails unless you have explicitly opted in.

3. AI Conversations

Your questions to the NomadVital AI advisor are sent to Anthropic's Claude API for processing. We do not store the full text of your AI conversations in our database — only your question count and the date are recorded. Anthropic's use of your data is governed by their own privacy policy and API terms of service. We recommend you do not share sensitive personal health information (such as specific medication names or medical history) in your AI questions.

4. Cookies and Tracking

NomadVital uses a session cookie to keep you logged in. This is a functional cookie required for the service to work — it is not used for advertising tracking. We do not currently use third-party analytics cookies, advertising pixels, or cross-site trackers.

5. Data Sharing

We share your data only in the following limited circumstances:

• Dodo Payments — to process subscription payments. They receive your email and name to create a customer record.
• Anthropic — the text of your AI questions is processed via their API.
• MongoDB Atlas — our database provider stores your account data on encrypted servers.
• Legal compliance — we may disclose data if required by law or to protect the rights, property, or safety of NomadVital, our users, or the public.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons. Approved community tips may remain published after account deletion (attributed to your name as originally submitted).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request that we delete your account and associated data
• Portability — receive your data in a machine-readable format
• Objection — object to certain types of data processing

To exercise any of these rights, email us at contact@nomadvital.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including HTTPS encryption for all data in transit, bcrypt password hashing, and access controls on our database. No method of internet transmission is 100% secure — if you believe your account has been compromised, please contact us immediately.

9. Children's Privacy

NomadVital is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email (if you have an account) or by posting a notice on the website. Your continued use of NomadVital after changes take effect constitutes your acceptance of the updated policy.

Questions? Contact us at contact@nomadvital.com