Privacy Policy
Effective date: 2026-10-06
Last updated: 2026-10-06
Nomad Check is operated by CHEN HSING KAI, an individual operator based in Japan ("Nomad Check," "we," "us" or "our"). This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use the Nomad Check mobile application and related support pages.
Nomad Check is currently offered only through the United States, Japan and Taiwan mobile-app storefronts. This policy applies to that version of the service.
1. Information We Collect
1.1 Account and authentication information
We may collect:
- A unique Nomad Check account identifier when you create an account. Guest mode creates no account and no identifier on our systems
- Your email address when you use email authentication, Sign in with Apple or Google sign-in
- Your name or account display name if you choose a sign-in provider that shares it
- Authentication-provider information and authentication timestamps
- Session and authentication-token data needed to keep you signed in
Nomad Check does not use account passwords. Email authentication uses a sign-in link sent from [email protected].
1.2 Profile, travel and eligibility information
If you use Nomad Check without an account, the information in this section is stored only on your device and is not transmitted to us. When you create an account, it is uploaded to your account and kept in sync while you stay signed in.
Depending on the features you use, we may collect information you enter or select, including:
- Passport-issuing country and optional passport-expiration date
- Age range, but not your full date of birth
- Current city or country selected by you and the related time zone
- Planned destinations, arrival dates, departure dates and intended stay length
- Current and historical stays, including countries, cities and travel dates
- Visitor, citizen, resident, visa or permit route selected by you
- Visa or permit status and expiration date
- Digital-nomad-visa application status
- Employment or work type
- Employer, client or business location by country
- Work activities and destination-related work circumstances
- Income range, but not your exact salary, bank balance or bank-account details
- Travel-document checklist completion
- Schedule, sleep and work-time preferences used by app features
We do not collect your passport number or a copy or image of your passport.
1.3 Subscription and purchase information
The app store through which you purchase Nomad Check processes the payment. We do not receive your full payment-card number.
Nomad Check uses RevenueCat to manage subscription entitlement across the store billing systems. We may receive and retain limited purchase information such as:
- Subscription product
- Purchase or transaction identifier
- Store and storefront
- Subscription and entitlement status
- Start, renewal and expiration dates
- Trial, cancellation, billing-retry or refund status
The store and RevenueCat may process additional information under their own privacy terms.
1.4 Feedback and support information
If you choose to provide deletion feedback or contact support, we may collect:
- Your selected feedback category
- Optional free-text feedback
- Your email address and the contents of support or privacy correspondence
- Information you voluntarily provide so we can investigate your request
A deletion reason and written feedback are optional and never block account deletion.
Do not include passport numbers, immigration-document numbers, financial-account details, medical information or other highly sensitive information in a free-text field or support message.
1.5 Analytics
This version of Nomad Check contains no analytics or tracking SDK. The app sends no analytics events, collects no advertising identifiers and derives no location from your IP address for analytics. In guest mode the app sends no requests to our systems at all.
If we add product analytics in a future version, we will update this Privacy Policy first, describe exactly what is collected, and provide the controls described in the updated policy before any collection begins.
1.6 Technical, delivery and security information
Our infrastructure, authentication and email-delivery providers may process technical data generated when your device communicates with the service, including:
- IP address
- Device, operating-system and browser type
- Authentication, request, delivery and error timestamps
- Security, server and email-delivery logs
- Session and authentication tokens
- Email-delivery metadata for sign-in links and account messages
Resend routes and sends Nomad Check authentication email from Tokyo, ap-northeast-1. Resend states that its account data, including email metadata, logs and API records, is stored in the United States regardless of the selected sending region.
1.7 Information stored only on your device
Some preferences may remain only on your device and are not uploaded to Nomad Check, including certain reminder settings, local health-document checklist states, saved city clocks, body-clock simulations and interface preferences.
Information stored only on your device may be removed when you reset the app, delete your account from that device or uninstall the app. Uninstalling the app does not delete information already stored in cloud systems and does not cancel a store subscription.
If you use Nomad Check without an account, all information described in Sections 1.1–1.2 is likewise stored only on your device.
1.8 Information we do not intentionally collect
Nomad Check does not intentionally collect:
- Precise GPS location
- Contacts, photographs, videos, microphone recordings or uploaded files
- Passport numbers or passport images
- Full payment-card numbers
- Android Advertising ID
- iOS IDFA
- Cross-app activity for advertising
Nomad Check does not integrate an advertising or analytics SDK in the release version (see Section 1.5).
2. How We Use Information
We use personal information to:
- Create and authenticate your account
- Send sign-in links and account messages
- Save, synchronize and restore your profile, travel plans and stay records
- Calculate and personalize planning results based on the information you provide
- Display visitor-entry, stay-limit, visa, work, registration, tax-warning, insurance and related planning information
- Maintain subscription access and restore purchases
- Respond to support, privacy and security requests
- Protect the service, prevent misuse and troubleshoot technical problems
- Maintain legal, accounting and security records where required
- Evaluate product interactions and improve feature design through the restricted analytics described above
- Improve the service using feedback voluntarily provided by users
We do not use your information to make an official government, immigration, employment, tax, medical or insurance determination.
3. How We Obtain Information
We obtain information:
- Directly from you when you enter or select information
- From an authentication provider when you choose that sign-in method
- From the app store and RevenueCat when you purchase or restore a subscription
- Automatically from service infrastructure for authentication, security, email delivery and operation
The country-law and immigration source materials displayed by the app are not personal information about you. They are compiled separately as described in the Information Sources and Review Method page.
4. When We Disclose Information
We disclose personal information only as reasonably necessary for the purposes described in this policy.
Service providers and subprocessors
| Provider | Purpose | Information involved | Processing or storage location |
|---|---|---|---|
| Supabase | Authentication, database, cloud synchronization and related infrastructure | Account identifier, authentication data, profile, travel and eligibility information, feedback and technical logs | South Korea (Seoul region) and provider-subprocessor locations |
| Apple / Google Play | App distribution, platform sign-in where selected, subscription billing and purchase administration | Store-account information selected by the user, transaction and subscription information | Provider infrastructure locations under the applicable store terms |
| Google Sign-In | Authentication only when selected by the user | Name, email and authentication identifier permitted by the user | Google infrastructure locations |
| Resend | Delivery of email sign-in links and account messages from [email protected] | Email address, message-routing information and delivery metadata | Message routing and sending: Tokyo, ap-northeast-1. Resend account data, email metadata, logs and API records: United States |
| RevenueCat | Subscription-entitlement and purchase-status management | App or subscriber identifier, transaction identifier, product, store and entitlement status | [ACTION REQUIRED: Confirm from the production contract, DPA and subprocessor list after integration.] |
These providers process information under their own terms, privacy commitments and applicable contractual obligations.
Legal, safety and business reasons
We may disclose information when reasonably necessary to:
- Comply with a valid legal obligation or enforceable government request
- Protect the rights, safety and security of users, Nomad Check or others
- Investigate fraud, abuse or a security incident
- Complete a future reorganization, transfer or sale of the service, subject to appropriate notice and protection
5. No Sale, Behavioral Advertising or Cross-App Tracking
We do not sell or rent personal information.
We do not share personal information for cross-context behavioral advertising, use advertising identifiers, or track users across apps or websites owned by other companies for advertising purposes.
We do not use travel, passport-country, work or income-range information for advertising.
6. Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this policy, subject to the following rules:
| Information | Retention approach |
|---|---|
| Active account, profile and travel information | Until the account is deleted or the information is replaced, unless a shorter period is implemented |
| Guest mode | Stored only on your device; nothing is retained on our servers (accounts predating 2026-09-26 are removed in a one-time cleanup) |
| Optional deletion feedback | 12 months, stored without email, user ID, plan ID or another direct account identifier |
| Support and privacy correspondence | 24 months after the matter is resolved, unless longer retention is legally required |
| Authentication, database and security logs | Security-related records are the provider's infrastructure logs (authentication, database and request logs); we keep no separate operator-maintained security log. Retained up to 1 day under the provider's current plan [VERIFY AT SUBMISSION: Supabase plan documentation] |
| Database backups | The current hosting plan includes no provider-managed database backups, so no retained backup copy exists. If backups are added under a later plan, this row will state the verified window before publication |
| Resend email metadata, logs and API records | 30 days |
| Subscription and transaction records | For the period necessary to administer access, resolve billing issues and meet applicable accounting or legal duties |
7. Account and Data Deletion
You can initiate deletion in the app through:
Settings > Login and Security > Delete Account
Account deletion removes your Nomad Check account and associated profile, cloud-synchronized travel and stay information from active systems, except information that must be retained for a legal, accounting, fraud-prevention or security reason.
Optional deletion feedback may be retained separately only if it is stored without your email address, user ID, plan ID or another direct account identifier. Each feedback record is kept for a maximum of 12 months from submission. If free-text feedback is found to contain information that could identify a person, we remove it when found rather than waiting for the retention period to end. We keep only aggregate statistics with no personal correspondence for long-term trends.
Residual copies may remain temporarily in provider logs until they are overwritten under the retention schedule above. The current hosting plan includes no provider-managed database backups.
Deleting your Nomad Check account does not cancel a subscription purchased through an app store. See the Account and Data Deletion page for the platform-specific management link.
For other privacy requests, contact [email protected].
8. Your Choices and Privacy Rights
Depending on where you live and the law that applies, you may have the right to request that we:
- Confirm whether we process personal information about you
- Provide access to or a copy of that information
- Correct inaccurate information
- Delete information
- Provide certain information in a portable format
- Explain categories of information, sources, purposes and recipients
- Review a decision concerning a privacy request where applicable
You may exercise available rights through in-app controls or by contacting [email protected].
We may need to verify that you control the relevant Nomad Check account. Verification may occur through your active authenticated session, an email sign-in link sent to the registered address, or other information reasonably necessary to locate and protect the account. We will not request your password.
We will not discriminate against you for exercising a privacy right available under applicable law.
9. California and Other U.S. State Disclosures
For purposes of U.S. state privacy disclosures, the categories of personal information we may process include:
- Identifiers, such as email address and Nomad Check user ID
- Internet or other electronic activity generated for authentication and security
- Commercial information, such as subscription status and transaction identifiers
- Professional or employment-related information, such as work type and employer or client country
- Financial-related information limited to the income range you choose to provide
- User-provided travel, location, immigration and stay information
- Inferences or personalized results generated from the information you provide
- Support messages and optional feedback
We obtain these categories from the sources and use them for the purposes described above. We may disclose them to the service-provider categories described in Section 4. We do not sell them or share them for cross-context behavioral advertising.
Nomad Check does not respond differently to browser Do Not Track signals because the app does not engage in cross-site or cross-app behavioral advertising. We also do not use third parties to collect personally identifiable information through Nomad Check over time and across unrelated online services for advertising purposes.
Nothing in this section states that a particular state privacy statute applies where its legal thresholds are not met. We nevertheless provide the request methods described above.
10. International Processing
Nomad Check is operated by an individual currently based in Japan. Providers may process information in Japan, the United States, South Korea, and other countries where they or their subprocessors operate.
Resend routes and sends authentication email through Tokyo, ap-northeast-1, while its account data, email metadata, logs and API records are stored in the United States. Google and the app stores may process data through their global infrastructure.
Privacy and data-protection laws may differ between countries. Where required, we will use appropriate contractual or legal safeguards.
11. Security
We use reasonable technical and organizational measures designed to protect information, including encrypted network transport, authenticated access controls and database access rules. No service or storage method can provide absolute security.
You are responsible for maintaining control of the email and platform account used for authentication. Contact [email protected] if you believe your Nomad Check account has been accessed without authorization.
12. Children
Nomad Check is intended only for people aged 18 or older. We do not knowingly permit a person under 18 to create an account or provide personal information. If you believe a person under 18 has provided personal information, contact [email protected] so we can investigate and delete it where appropriate.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in the service, providers or law. We will post the updated policy with a new Last updated date. If a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent where required.
14. Contact
Operator: CHEN HSING KAI, an individual
Service: Nomad Check
Current operating country: Japan
Privacy: [email protected]
Support: [email protected]
Legal notices: [email protected]
Correspondence address: Postal address available on request to [email protected]