Privacy Policy

Nomad Echo by enzla · Last updated: March 2026

Privacy is not a feature we added — it is the reason we built Nomad Echo in the first place. This policy explains exactly what data we collect, why, how long we keep it, and what we never do with it.

1. Who we are

Nomad Echo is a product of enzla. If you have questions about this policy, contact us at nomadecho.support@enzla.co.

2. What data we collect

Location data

When you share your location, Nomad Echo sends GPS coordinates (latitude, longitude, accuracy, speed, and heading) to our servers. This data is visible only to members of your circle within the app. We do not use your location for advertising, analytics, or any purpose other than delivering the app's features to your circle members.

Account and circle data

We store a display name and an internal identifier for each circle member. We do not collect email addresses, phone numbers, or any government-issued identifiers.

Device tokens

To deliver push notifications (geofence alerts, SOS, etc.) we store your device's Expo push token. This token is used exclusively to send notifications you have opted into.

Usage and error data

We do not integrate any third-party analytics SDKs. We may log server-side errors (e.g., failed API requests) without any personally identifiable information, solely for the purpose of fixing bugs.

3. What we do NOT collect

  • Email addresses or phone numbers
  • Contacts or address book data
  • Photos, camera, or microphone access
  • Browsing history or cross-app tracking data
  • Advertising identifiers (IDFA)

4. How long we keep your data

Location pings are retained for up to 24 hours on the free plan, and up to 7 days on the Family plan. A nightly cleanup process permanently deletes expired location data from our servers. Alert and event history (geofence crossings, speed alerts, SOS) is deleted after 30 days.

If you leave or are removed from a circle, your location history associated with that circle is deleted. If you delete your account, all associated data is permanently removed.

5. Data sharing

We do not sell your data. We do not share your data with advertisers, data brokers, or any third party for commercial purposes.

We use the following third-party services to operate the app:

  • Cloudflare — infrastructure and DDoS protection. Cloudflare may process request metadata (IP addresses) in accordance with their own privacy policy.
  • Expo / Apple Push Notification Service (APNs) — delivery of push notifications.
  • RevenueCat — subscription management. RevenueCat does not receive your location data. They process payment-related metadata through the App Store.

We may disclose data if required by law or to protect the safety of our users, but we will always notify you of any such request where legally permitted.

6. Background location

Nomad Echo requests "Always On" location permission to enable background location sharing. This permission is used solely to send your location to your circle. You can revoke this permission at any time in iOS Settings → Privacy → Location Services. Revoking location permission will pause your location sharing.

7. Ghost Mode

Ghost Mode pauses location sharing for a defined period. While in Ghost Mode, no location data is transmitted to our servers. Your circle members will see your last known location and a ghost indicator.

8. Children's privacy

Nomad Echo is designed for family use and may be used by minors under parental supervision. We do not knowingly collect data from children under 13 independently. All child data in Nomad Echo is managed within a family circle administered by a guardian.

9. Data security

All data in transit is encrypted via HTTPS/TLS. Data at rest is stored in Cloudflare's D1 managed database infrastructure. We use secret-based authentication for all circle operations. We do not store plain-text secrets.

As the operator of this service, Enzla has technical access to the infrastructure that stores your data. We maintain a strict internal policy of not accessing user data except when required to diagnose a reported technical issue, and only with the minimum access necessary. We do not browse, export, or analyse user location data for any other purpose.

10. Your rights

You may request deletion of your data at any time by contacting us at nomadecho.support@enzla.co. We will permanently delete all data associated with your account within 30 days.

If you are located in the European Economic Area (EEA) or California, you may have additional rights under GDPR or CCPA. Contact us to exercise those rights.

11. Changes to this policy

We may update this policy as the app evolves. Significant changes will be communicated via in-app notice. Continued use of Nomad Echo after changes constitutes acceptance of the updated policy.

12. Contact

Questions, concerns, or data requests:
nomadecho.support@enzla.co