Privacy Policy
Effective Date: September 27, 2026
This Privacy Policy explains how Nowah Inc., a Delaware corporation ("Nowah," "we," "us"), collects, uses and shares personal information when you use the Nowah iOS app, the web app at app.nowah.xyz, our website nowah.xyz and related services (the "Services"). It forms part of our Terms of Service.
The short version: we use your information to plan and book your travel. Your chats go to AI providers so Nowah can answer you. Your booking details go to the suppliers who provide your trip. We do not sell your personal information, we do not show ads, and we do not track you across other companies' apps or websites.
1. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email address, phone number, sign-in identity (Apple, Google or email code) | You, through sign-up |
| Traveller profile | Date of birth, gender, nationality, passport or national ID number, issuing country and expiry, loyalty numbers, travel preferences | You, when you add travellers or book |
| Emergency Info | Optional blood type, allergies, medicines, medical conditions, emergency contact name and phone number, and insurance details | You, when you save Emergency Info |
| Bookings and payments | Flights, hotels and eSIMs you book, prices, booking references, payment status. Card details go straight to Stripe; we never store your full card number | You, Stripe and travel suppliers |
| Chats and voice | Messages you send to Nowah, its replies, voice audio and transcripts, and the preferences Nowah remembers about you | You |
| Photos, files and links | Passport and ID photos, receipts, screenshots, videos, documents and links you share with Nowah | You |
| Location | Precise location while you use the app, if you allow it; your last saved location; approximate country from your IP address. Saved location is linked to your account | Your device and IP address |
| Subscription | Nowah Pro plan, renewal status and purchase receipts | Apple, Google or our web billing provider, through RevenueCat |
| Support | Conversations with our support team and the account details shown to them | You, through Intercom |
| Device and usage | App version, device model, device or installation identifiers, IP address, features used, crash reports, and a sample of app screen recordings used to find and fix bugs. Analytics and diagnostics can include your account ID | Collected automatically |
Location: the app asks for your precise location after your first conversation, and uses it while the app is open to find places near you and to plan around where you are. You can say no or turn it off in iOS Settings. We don't collect location in the background.
Sensitive information: passport and national ID numbers are needed to book flights. Emergency Info lets you choose to save blood type, allergies, medicines and medical conditions in your account. You can also save an emergency contact and insurance details. We use these fields to show your emergency information and create a card when you request it. You can edit or remove them. Dietary or accessibility needs you share can help us plan your trip. We don't use your photos or voice to identify you.
2. How We Use Your Information
To provide the Services
- Create and secure your account
- Answer your chats and voice conversations, and plan trips
- Search, book, ticket and change flights, hotels and eSIMs, and take payment
- Send confirmations, e-tickets, receipts, price alerts and trip updates
- Run Nowah Pro, message balances and quests
- Help you when you contact support
- Save and show the Emergency Info you choose to provide
To keep Nowah safe and working
- Prevent fraud, payment abuse and misuse
- Find and fix bugs and crashes
- Meet legal, tax, accounting and airline requirements
To improve Nowah
- Understand which features people use, through product analytics you can turn off
- Review conversations, including voice transcripts, to check and improve the quality of Nowah's answers and bookings
- Remember your preferences so later trips take less effort
Analytics and recordings: product events and crash reports can be linked to your account ID. Screen recordings help us see navigation, controls and loading states. We mask private message text, drafts, attachments, identity and payment fields, and Emergency Info. Product analytics can be turned off in Privacy & Data; essential error reporting may still run.
What we don't do: we don't sell your personal information, share it for advertising, or use it to show you ads.
Legal bases (EEA/UK): performing our contract with you; our legitimate interests in running, securing and improving Nowah; your consent where we ask for it (for example precise location and website analytics cookies); and our legal obligations.
3. AI Processing and Live Voice
Nowah is an AI travel agent. To answer you, we send third-party AI providers the information each request needs:
- Chats go to Anthropic (Claude), with the relevant parts of your profile, trips, recent conversation and location. When you ask Nowah to book, it can see the traveller details you saved so it can fill in the booking.
- Live voice streams your voice to OpenAI, with recent chat context, so Nowah can talk back in real time. The transcript is saved in your chat.
- Voice notes and read-aloud go through OpenRouter to speech providers such as Deepgram and Fish Audio.
- Passport and ID photos are read by an AI model through OpenRouter, and by Claude if needed, to fill in your traveller details.
- Receipts, screenshots, videos and translations go to Google (Gemini) or Alibaba Cloud (Qwen).
These providers process the data to produce the answer, under their own terms for business customers. AI answers can be wrong. Nowah never books or charges you without your confirmation, and you should check important details such as visa and entry rules with official sources.
4. Who We Share It With
We do not sell your personal information. We share it only as described here.
Travel suppliers
When you book, the airline, hotel or eSIM provider receives the traveller and contact details needed for your booking, through the suppliers listed below. They handle it under their own privacy policies. Airlines may share passenger data with border authorities as the law requires.
Companies that process data for us
AI
Travel
Maps and places
Account, payments and messages
Hosting
Analytics and diagnostics
Links to restaurant and ride apps (such as OpenTable or Uber) carry only the place details in the link, and only when you tap them.
Legal and business reasons
When the law, a court order or a valid government request requires it; to protect people, our users or Nowah from fraud or harm; or to a buyer if Nowah is merged or sold, who must honour this Policy.
5. Where Your Data Is Processed
Nowah is based in the United States, and our main servers are in the United States. Our monitoring systems run in Germany, and some providers, such as AI and travel suppliers, process data in other countries. Data protection laws there may differ from yours.
For transfers from the EEA or UK we rely on the European Commission's Standard Contractual Clauses and the UK addendum, or on adequacy decisions. Some transfers are necessary to provide what you ask for, such as sending your details to an airline abroad when you book a flight there.
6. How Long We Keep It
| Account, profile, Emergency Info, chats, voice transcripts, photos and documents | Until you delete them in the app or delete your account |
| Search history and activity used for suggestions | 90 to 365 days, then deleted automatically |
| Booking, payment and tax records | As long as the law requires, usually up to 7 years, including after account deletion |
| Crash reports | 30 days |
| Support conversations | Until your account is deleted |
| Backups | Overwritten on a rolling schedule |
Once we accept an account deletion request, we remove account access and start background cleanup of your data and records with Stripe, Intercom, RevenueCat and Clerk. The app keeps a secure deletion receipt on your device so you can check progress after sign-out. A pending step means cleanup is still in progress; failed steps are retried. Contact support@nowah.xyz with the request number if you need help. We keep only what we must for open bookings, refunds, fraud prevention or the law. Suppliers and AI providers that already received data keep it under their own policies. Deleting your Nowah account does not cancel a Nowah Pro subscription; cancel it separately in your App Store or Google Play subscription settings.
7. Your Choices and Rights
In the app
Go to You → Privacy & Data to download a copy of your data, clear your chats, memory or search history, turn off product analytics, or delete your account. Location and notifications can be turned off in iOS Settings.
Everyone
- Access and portability: get a copy of your data
- Correction: fix inaccurate data
- Deletion: delete your data, subject to legal exceptions
- Marketing: unsubscribe at any time
EEA and UK residents (GDPR)
- Restrict or object to processing based on our legitimate interests
- Withdraw consent at any time, without affecting earlier processing
- Complain to your local data protection authority
US state residents (including California)
- Know what we collect and why, delete it, and correct it
- Limit use of sensitive information: we use it only to provide the Services
- We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of
- We won't treat you differently for using these rights
Some quests give you free messages for actions such as completing your traveller profile. They are optional, and skipping them doesn't limit your access to Nowah.
Email privacy@nowah.xyz, or use the in-app controls above. We'll verify your identity and reply within 30 days (45 for complex requests). An authorised agent can act for you with proof of authority.
8. Children
Nowah accounts are for people aged 18 or older. If we learn that someone under 18 has an account, we will delete it. Adults can add children as travellers on a booking; we use their details only for that booking. Parents can contact privacy@nowah.xyz.
9. Security
- Encryption for all data in transit, and encrypted storage for files and documents
- Sign-in through Clerk, with Sign in with Apple and Google
- Card data handled by Stripe and never stored on our servers
- Passport numbers, card details and passwords removed from logs and AI traces
- Access to production systems limited to the people who need it
No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.
10. Emails and Notifications
- Booking and account: confirmations, e-tickets, receipts and security messages
- Trip and price alerts: the ones you set up
- Marketing: only if you opt in; unsubscribe from any email
- Push notifications: turn them off in iOS Settings or in the app
11. Cookies and Other Sites
See our Cookie Policy for cookies and similar tools. Nowah does not respond to browser "Do Not Track" signals, because we don't do cross-site tracking. Airline, hotel and other sites you open from Nowah have their own privacy policies.
12. Changes to This Policy
We'll update the Effective Date when this Policy changes, and tell you by email or in the app before a material change takes effect. If you don't agree with a change, you can delete your account at any time.
13. Contact Us
Privacy: privacy@nowah.xyz
Support: support@nowah.xyz
Mail: Nowah Inc., Attn: Privacy, 8 The Green, Suite R, Dover, DE 19901, United States