[{"data":1,"prerenderedAt":369},["ShallowReactive",2],{"legal-privacy":3,"i-lucide:hash":364},{"id":4,"title":5,"body":6,"description":353,"extension":354,"meta":355,"navigation":356,"path":357,"seo":358,"seoDescription":359,"seoPath":360,"seoTitle":361,"stem":362,"__hash__":363},"legal\u002Flegal\u002Fprivacy.md","Privacy Policy",{"type":7,"value":8,"toc":330},"minimark",[9,14,26,30,35,38,42,45,49,52,56,59,63,72,76,83,87,90,94,117,121,124,191,194,198,219,223,248,252,255,290,298,302,305,309,312,316,318],[10,11,13],"h2",{"id":12},"_1-who-we-are","1. Who we are",[15,16,17,18,21,22,25],"p",{},"NomadKit Starter is operated by ",[19,20],"legal-company-name",{}," (\"we\", \"us\"). For questions about this policy or your data, contact us at ",[23,24],"legal-email",{},".",[10,27,29],{"id":28},"_2-what-data-we-collect","2. What data we collect",[31,32,34],"h3",{"id":33},"account-data","Account data",[15,36,37],{},"When you create an account we collect your name, email address, and (if you use email\u002Fpassword sign-up) a hashed password. If you sign in with Google, we receive your Google profile information (name, email, profile picture) as provided by Google.",[31,39,41],{"id":40},"goals-and-plans","Goals and plans",[15,43,44],{},"NomadKit Starter stores the goals, constraints, and step plans you create. This content is free text and may include personal details you choose to enter. Please avoid entering special-category data (e.g. health, religion) unless necessary for your goal.",[31,46,48],{"id":47},"preferences","Preferences",[15,50,51],{},"We store appearance settings (light\u002Fdark\u002Fsystem theme) in your account. The web app may also cache them in browser storage for offline use.",[31,53,55],{"id":54},"technical-data","Technical data",[15,57,58],{},"When you sign in we store session metadata including IP address and browser user agent for security and fraud prevention. On the web, authentication uses an HttpOnly session cookie scoped to our domain. On the native mobile app, we use a bearer token stored in your device's secure storage.",[31,60,62],{"id":61},"analytics-with-your-consent-only","Analytics (with your consent only)",[15,64,65,66,71],{},"If you accept analytics cookies on our websites, we collect product usage events (e.g. plan created, step completed), page views, and JavaScript errors. We use an internal user ID — not your email or name — in analytics. See our ",[67,68,70],"a",{"href":69},"\u002Fcookies","Cookie Policy"," for details. The native mobile app does not load PostHog or the web analytics beacon.",[31,73,75],{"id":74},"offline-storage-web-app-pwa","Offline storage (web app \u002F PWA)",[15,77,78,79,82],{},"The NomadKit Starter web app at ",[80,81],"legal-app-url",{}," caches your plans and settings in your browser's local storage so you can use the app offline. This data is cleared when you sign out.",[31,84,86],{"id":85},"native-mobile-app","Native mobile app",[15,88,89],{},"The iOS and Android app stores your session token in secure storage and loads plans from our API when online. It does not use the web app's offline plan cache or PWA service worker.",[10,91,93],{"id":92},"_3-why-we-use-your-data-legal-bases","3. Why we use your data (legal bases)",[95,96,97,105,111],"ul",{},[98,99,100,104],"li",{},[101,102,103],"strong",{},"Contract (Art. 6(1)(b) GDPR):"," providing your account, storing plans, sending account emails (verification, welcome, password reset, referral notifications), and delivering the service you signed up for.",[98,106,107,110],{},[101,108,109],{},"Consent (Art. 6(1)(a) GDPR):"," analytics and optional tracking cookies on our websites. You can withdraw consent at any time via Cookie settings.",[98,112,113,116],{},[101,114,115],{},"Legitimate interest (Art. 6(1)(f) GDPR):"," session security (IP address, user agent) and abuse prevention, balanced against your rights.",[10,118,120],{"id":119},"_4-processors-and-subprocessors","4. Processors and subprocessors",[15,122,123],{},"We use the following service providers to run NomadKit Starter:",[125,126,127,143],"table",{},[128,129,130],"thead",{},[131,132,133,137,140],"tr",{},[134,135,136],"th",{},"Provider",[134,138,139],{},"Purpose",[134,141,142],{},"Location",[144,145,146,158,169,180],"tbody",{},[131,147,148,152,155],{},[149,150,151],"td",{},"Cloudflare",[149,153,154],{},"Hosting, database (D1), API Workers, Workers AI (plan generation), optional web analytics",[149,156,157],{},"Global \u002F EU edge",[131,159,160,163,166],{},[149,161,162],{},"PostHog EU",[149,164,165],{},"Product analytics on web (consent required)",[149,167,168],{},"EU (Frankfurt)",[131,170,171,174,177],{},[149,172,173],{},"Resend",[149,175,176],{},"Transactional email (verification, welcome, password reset, referral notifications)",[149,178,179],{},"United States",[131,181,182,185,188],{},[149,183,184],{},"Google",[149,186,187],{},"OAuth sign-in only",[149,189,190],{},"Global \u002F United States",[15,192,193],{},"Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses where applicable.",[10,195,197],{"id":196},"_5-ai-plan-generation","5. AI plan generation",[15,199,200,201,207,208,213,214,25],{},"When you create or adjust a plan, text you enter as goals or instructions may be processed by Google's Gemma model via ",[67,202,206],{"href":203,"rel":204},"https:\u002F\u002Fwww.cloudflare.com\u002Fcloudflare-workers-ai\u002F",[205],"nofollow","Cloudflare Workers AI"," to generate or update your steps. We process this data to provide the feature you request (contract basis). Generation metadata may be stored in our database for debugging and quality. Cloudflare's and Google's privacy policies apply to their processing: ",[67,209,212],{"href":210,"rel":211},"https:\u002F\u002Fwww.cloudflare.com\u002Fprivacypolicy\u002F",[205],"cloudflare.com\u002Fprivacypolicy",", ",[67,215,218],{"href":216,"rel":217},"https:\u002F\u002Fpolicies.google.com\u002Fprivacy",[205],"policies.google.com\u002Fprivacy",[10,220,222],{"id":221},"_6-retention","6. Retention",[95,224,225,228,239,242,245],{},[98,226,227],{},"Account and plan data: until you delete your account or individual plans.",[98,229,230,231,234,235,238],{},"Sessions: up to ",[101,232,233],{},"7 days",", with session activity refreshed at least every ",[101,236,237],{},"24 hours"," while you remain signed in.",[98,240,241],{},"Verification tokens: until used or expired.",[98,243,244],{},"Analytics: per PostHog and Cloudflare retention settings (typically up to 90 days).",[98,246,247],{},"Web browser cache (offline): until sign-out or manual browser clear.",[10,249,251],{"id":250},"_7-your-rights","7. Your rights",[15,253,254],{},"Under GDPR you have the right to:",[95,256,257,267,270,276,281,284,287],{},[98,258,259,260,263,264,266],{},"Access your data (export from ",[101,261,262],{},"Profile"," in the web app at ",[80,265],{},")",[98,268,269],{},"Rectify inaccurate data (edit profile in the app)",[98,271,272,273,275],{},"Erasure (\"right to be forgotten\") — delete your account from ",[101,274,262],{}," in the web app",[98,277,278,279,275],{},"Data portability — export your data from ",[101,280,262],{},[98,282,283],{},"Restrict or object to processing where applicable",[98,285,286],{},"Withdraw consent for analytics at any time (Cookie settings on our websites)",[98,288,289],{},"Lodge a complaint with your local supervisory authority",[15,291,292,293,295,296,25],{},"On the native mobile app, use the web app at ",[80,294],{}," for export and account deletion, or email ",[23,297],{},[10,299,301],{"id":300},"_8-children","8. Children",[15,303,304],{},"NomadKit Starter is not directed at children under 16. We do not knowingly collect data from children. Contact us if you believe a child has provided personal data.",[10,306,308],{"id":307},"_9-changes","9. Changes",[15,310,311],{},"We may update this policy. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance where permitted by law.",[10,313,315],{"id":314},"_10-contact","10. Contact",[19,317],{},[15,319,320,321,323,326,327],{},"Email: ",[23,322],{},[324,325],"br",{},"\nWebsite: ",[328,329],"legal-landing-url",{},{"title":331,"searchDepth":332,"depth":332,"links":333},"",2,[334,335,345,346,347,348,349,350,351,352],{"id":12,"depth":332,"text":13},{"id":28,"depth":332,"text":29,"children":336},[337,339,340,341,342,343,344],{"id":33,"depth":338,"text":34},3,{"id":40,"depth":338,"text":41},{"id":47,"depth":338,"text":48},{"id":54,"depth":338,"text":55},{"id":61,"depth":338,"text":62},{"id":74,"depth":338,"text":75},{"id":85,"depth":338,"text":86},{"id":92,"depth":332,"text":93},{"id":119,"depth":332,"text":120},{"id":196,"depth":332,"text":197},{"id":221,"depth":332,"text":222},{"id":250,"depth":332,"text":251},{"id":300,"depth":332,"text":301},{"id":307,"depth":332,"text":308},{"id":314,"depth":332,"text":315},"This policy explains how NomadKit Starter handles your personal data when you use our website and app.","md",{},true,"\u002Flegal\u002Fprivacy",{"title":5,"description":353},"How NomadKit Starter collects, uses, and protects your personal data.","\u002Fprivacy","NomadKit Starter — Privacy Policy","legal\u002Fprivacy","BS0vNoitM5s9g6lk3KmA1zVxZzXAzozgB2UIBldZ8FE",{"left":365,"top":365,"width":366,"height":366,"rotate":365,"vFlip":367,"hFlip":367,"body":368},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 9h16M4 15h16M10 3L8 21m8-18l-2 18\"\u002F>",1779967412696]