Privacy Policy

1. Introduction

This Privacy Policy describes how Nakay Flow ("we", "our", "the application") collects, uses, stores, and protects your personal information when you use our mobile trip planning application.

Nakay Flow is a trip planning application that allows you to create, organize, and share your trips with your travel companions. The application offers real-time synchronization, offline mode, and collaborative features.

By using Nakay Flow, you accept the practices described in this policy.

2. Information We Collect

2.1 Registration and Authentication Information

• Email address (via Google Sign-In)
• Name and profile picture (provided by Google)
• Unique Google identifier
• Secure authentication tokens

2.2 Trip Data

• Trip name and description
• Travel dates
• Destinations and visited places
• Notes and descriptions for each stage
• Planned and spent budget per day
• Accommodation information (name, address, price)
• Transportation details (type, duration, distance, price)

2.3 Sharing and Collaboration Data

• Trip sharing settings (public or private)
• Email addresses of invited collaborators
• Access permissions (read-only or edit)
• Trip protection passwords (encrypted)
• Collaborative edit history

2.4 Usage Data

• Interactions with the application
• Actions performed (create, edit, delete)
• User preferences (language, currency, theme)
• Undo/redo history

3. How We Use Your Information

3.1 Core Features

• Create and manage custom trips
• Plan itineraries with days, stages, and transportation
• Manage budget per day and for entire trip
• Track accommodations and reservations
• Real-time synchronization between devices
• Collaborative sharing with granular permissions
• Offline mode with local storage
• Complete history with undo/redo
• Export and import trips

3.2 Service Improvement

• Analyze interactions to optimize experience
• Develop new features
• Improve performance and stability
• Fix bugs and technical issues

4. Data Storage and Security

4.1 Storage Infrastructure

• Cloud database: Secure storage for real-time synchronization
• Local storage: Secure local storage for offline functionality
• Authentication: Secure account management

4.2 Security Measures

• Data encryption in transit (HTTPS/TLS)
• Data encryption at rest
• Secure authentication via Google
• Strict Firestore security rules
• Optional password protection for shared trips
• Automatic backup and redundancy

4.3 Data Retention

• Your data is retained as long as your account is active
• Deleted trips are permanently erased
• Upon account deletion, all your data is deleted within 30 days

5. Third-Party Services and Integrations

5.1 External Services

• Authentication: Google Sign-In for secure authentication
• Cloud services: Secure cloud infrastructure for data and storage
• Payments: Secure payment processing for Premium subscription
• These third-party services comply with high security standards

6. Information Sharing

We do not sell, rent, or disclose your personal information to third parties, except in the following cases:

6.1 Sharing Between Users

• Trips shared with other users according to your settings
• Collaborators invited by you with specific permissions

6.2 Legal Obligations

• Compliance with laws and regulations
• Response to legal requests from authorities
• Protection of our rights and security

7. Your Rights

7.1 Access and Portability

• Access to all your data via the application
• Download your personal data upon request

7.2 Modification and Deletion

• Modify your profile information
• Delete individual trips
• Complete account deletion via settings
• Revoke collaborator access

7.3 How to Exercise Your Rights

To exercise these rights, contact us at: contact@tranonakay.com

8. Offline Mode and Synchronization

• Data is stored locally for offline functionality
• Automatic synchronization when connected to the internet
• Your changes are synchronized with the cloud

9. Payment Information

• Payment information is processed by secure third-party payment processors
• We never store your credit card information
• All payment transactions are encrypted and secure

10. Protection of Minors

Nakay Flow is intended for adults (18 years and older). We do not knowingly collect personal information from children under 18.

11. GDPR Compliance

For European users, Nakay Flow complies with the General Data Protection Regulation (GDPR).

11.1 Legal Basis for Processing

• Consent: Voluntary use of the application
• Contract execution: Provision of trip planning services
• Legitimate interests: Application improvement and security

12. Cookies and Similar Technologies

Nakay Flow uses local storage technologies for:

• User preferences (theme, language, currency)
• Session data and authentication
• Data caching for performance

No third-party tracking cookies are used.

13. Policy Changes

• Email notification of significant changes
• Update of "last modified" date
• Publication of changes in the application

---

Last revision: October 26, 2025 | Version: 1.0 | Status: In effect