Privacy Policy

Last updated: 2026-05-22

Nomafii ("we", "our", "us") provides a social application for digital nomads and travelers. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

1. Information We Collect

We collect the following categories of information:

Account data — email address, password hash, display name, date of birth (used only for age verification and age-range matching), and an optional profile photo.
Profile data — languages, work / job categories, interests, bio, and optional social links you choose to add.
Location data — an approximate (city-level) location used to show events and people in your current city. Precise coordinates are not stored on our servers.
Activity data — events you created or joined, conversations you had inside the app, and travel-log entries you saved.
Device data — device model, OS version, language, time zone, crash logs, and a push-notification token (only if you grant notification permission).
Age verification data — if you are required to verify that you are 18 or older (Japan), a document image you submit. Document images are stored with restricted access and a retention limit; details are below.

2. How We Use Your Information

To create and maintain your account.
To show you events, people, and content relevant to your current city.
To deliver messages and notifications you opt into.
To verify age where required by law.
To detect and prevent abuse, fraud, and policy violations.
To improve and debug the product (crash reports, anonymized analytics).

3. Photo Quality Check (On-Device)

Profile photos may pass through an on-device quality check that uses Google ML Kit's Face Detection to confirm a clearly visible face. This check runs entirely on your device. We do not receive face embeddings, bounding boxes, or any biometric data. Only the verdict (approved / rejected with a generic reason) is sent to our servers.

4. How We Share Your Information

With other users — your profile, events, and messages are visible to other Nomafii users as part of the product's intended function.
With service providers — we use third parties to host the service, deliver email, store photos, and verify in-app purchases. Each is bound by a data-processing agreement.
For legal reasons — when required by law, court order, or to protect users from harm.

We do not sell your personal information.

5. Third-Party Services We Use

Cloudflare R2 — profile photo and age-verification document storage.
RevenueCat — subscription and entitlement management on top of App Store StoreKit.
Resend — transactional email (verification, password reset).
Expo Push — push notifications.
Google Cloud Vision — server-side OCR for the age-verification document flow only.
Sentry — crash and error reporting.

6. Data Retention

Account data is kept while your account is active.
On account deletion, your profile and content are removed, profile photos are deleted from object storage, and identifying fields are cleared. Some de-identified records (e.g., audit logs, abuse reports) may be retained for compliance and safety.
Age-verification documents are retained only as long as needed to verify and re-verify in case of dispute, and are deleted on a defined schedule.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information. You can delete your account at any time from Profile → Account → Delete account inside the app. To request a copy of your data or exercise other rights, contact us at [email protected].

8. Children

Nomafii is restricted to users 18 years of age or older. If we learn that an account belongs to someone under 18, we will remove the account.

9. International Data Transfers

We process data primarily in regions chosen for reliability and proximity to our users. Data may be transferred internationally subject to safeguards required by applicable law.

10. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will indicate the new effective date at the top of this page and, where appropriate, notify you in-app or by email.

11. Contact

Questions about this Privacy Policy or your data: [email protected]