Privacy Policy

Last updated: March 20, 2026

1. Data Controller

NomadBalance is operated by Gabriele Sedda, based in Sardinia, Italy. For any privacy-related questions, you can contact us at: privacy@nomadbalance.app.

2. What data we collect

When you use NomadBalance, we may collect the following categories of data:

Account data: Email address and authentication credentials (managed through Supabase Auth). We do not store passwords directly — authentication is handled by Supabase's secure infrastructure.

App usage data: Focus sessions, fasting windows, exercise completions, tasks, and preferences you enter into the app. This data is stored in your personal account and is necessary for the app to function.

Technical data: Browser type, device type, and general location (country-level) for analytics and performance monitoring. We do not track precise geolocation.

Advertising data: Google AdSense may collect data through cookies and similar technologies to serve personalized or non-personalized ads. See section 5 (Cookies) and our Cookie Policy for details.

3. How we use your data

We use the collected data for the following purposes:

— To provide and maintain the NomadBalance service (focus timer, fasting tracker, exercise scheduling, task planning).

— To authenticate your account and keep your data secure.

— To improve the app's performance and user experience.

— To serve advertisements through Google AdSense, which supports the free availability of the service.

4. Legal basis for processing (GDPR)

We process your personal data on the following legal bases under the GDPR:

Contractual necessity (Art. 6(1)(b)): Account data and app usage data are processed to provide you with the NomadBalance service.

Consent (Art. 6(1)(a)): Advertising cookies and analytics cookies are only activated after you provide consent through our cookie banner.

Legitimate interest (Art. 6(1)(f)): Basic technical data for security, fraud prevention, and service stability.

5. Cookies and advertising

NomadBalance uses cookies for authentication (essential) and for advertising through Google AdSense (non-essential). Non-essential cookies are only loaded after you give consent through our cookie banner.

Google AdSense may use cookies to serve ads based on your prior visits to this or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to NomadBalance and/or other sites on the Internet.

You can opt out of personalized advertising by visiting Google Ads Settings. For more details, please read our Cookie Policy.

6. Data storage and security

Your data is stored on Supabase's infrastructure with row-level security (RLS) enabled — only you can access your own sessions, tasks, and settings. Supabase servers are located in the EU (Frankfurt, Germany).

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

7. Third-party services

NomadBalance uses the following third-party services:

Supabase — Authentication and data storage (EU servers). Supabase Privacy Policy.

Google AdSense — Advertising. Google Privacy Policy.

Vercel — Hosting and deployment. Vercel Privacy Policy.

8. Your rights under GDPR

As an EU resident, you have the following rights:

— Right of access: Request a copy of your personal data.

— Right to rectification: Correct inaccurate data.

— Right to erasure: Request deletion of your data ("right to be forgotten").

— Right to restrict processing: Limit how we use your data.

— Right to data portability: Receive your data in a structured, machine-readable format.

— Right to object: Object to processing based on legitimate interest.

— Right to withdraw consent: Withdraw cookie consent at any time via the cookie settings.

To exercise any of these rights, email us at privacy@nomadbalance.app. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at garanteprivacy.it.

9. Data retention

We retain your personal data for as long as your account is active. If you delete your account, all associated data (sessions, tasks, settings) is permanently removed within 30 days. Anonymized analytics data may be retained for longer for service improvement purposes.

10. Children's privacy

NomadBalance is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will delete that information.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of NomadBalance after changes constitutes acceptance of the updated policy.