Privacy Notice

• Account data — email address and login credentials (stored as salted hashes by our authentication provider), and Google account identifiers if you use Google sign-in.
• Planning data you create — relocation assessment and readiness answers, saved countries and cities, checklists, timelines, budgets, notes, and saved resources.
• Support and communications — messages you send us and email preferences.
• AI feature inputs — prompts and content you submit to the assistant or budget suggestions.
• Usage and device data — pages viewed, features used, approximate location derived from IP address, device and browser identifiers, and error logs.
• Billing identifiers — the customer and subscription identifiers returned to us by Paddle. We never receive or store your full card details.

• Creating and securing your account, and providing the features you request — performance of a contract.
• Managing your subscription and entitlements — performance of a contract.
• Providing customer support — performance of a contract and legitimate interests.
• Product analytics, debugging, and improving our research and scoring — legitimate interests in operating and improving the service.
• Security, abuse prevention, and fraud detection — legitimate interests and legal obligation.
• Marketing emails and newsletters — consent, withdrawable at any time via the unsubscribe link.
• Keeping records required by law (for example tax and accounting) — legal obligation.

We share personal data only with the categories of recipients below:

• Merchant of Record — Paddle.com, which sells our subscriptions and handles payments, subscription management, tax compliance, invoicing, and refunds.
• Service providers and subprocessors — our managed hosting, database, authentication and storage platform; transactional email delivery; product analytics; and AI model providers used to generate assistant responses.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect our rights.

Each recipient receives only the data needed for its function. We do not sell personal data. A current list of the platforms we rely on is kept on our trust page.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses with the recipient.

We keep account and planning data while your account is active. If you delete your account or ask us to delete your data, we remove or anonymise it within 30 days, except where we must retain records for legal, tax, or fraud-prevention purposes. Analytics data is retained in aggregated or pseudonymised form.

Depending on where you live, you have rights to access, correct, delete, restrict, or object to our processing of your personal data, to receive a portable copy, and to withdraw consent at any time. Email hello@nextlatitude.app and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

We apply appropriate technical and organisational measures, including HTTPS/TLS in transit, encryption at rest by our platform provider, row-level database security scoping records to their owner, hashed passwords, and restricted internal access. No system is perfectly secure, but we work to protect your data and will notify you of any breach affecting you as required by law.

We use strictly necessary first-party cookies and local storage to keep you signed in and remember preferences such as saved cities. We also use analytics cookies to understand aggregate feature usage. You can clear or block cookies in your browser settings; blocking essential cookies will prevent sign-in from working. We do not use advertising or cross-site tracking cookies.

We will update this notice as our processing changes and post the new version on this page. For any privacy question or request, contact hello@nextlatitude.app. See also our terms and refund policy.