Privacy Policy

1. Introduction

Nautir ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

Information You Provide

• Account information (name, email, date of birth)
• Profile information (photos, bio, travel preferences)
• Sailing information (cruise ship, dates, ports)
• Messages and communications with other users
• Verification data (government ID and liveness check, required for all users)
• Optional external handles (SLS, SDC, Fetlife, Kik, Snapchat) for the Crew feature. Handles are stored privately, never displayed on your profile, never sent to other users, and never shared with those networks.

Information Collected Automatically

• Device information (device type, operating system)
• Device identifiers (Advertising ID on Android, IDFA on iOS, subject to your device settings and consent)
• Usage data (features used, interactions)
• Log data (access times, app crashes)
• Privacy protection events (screenshot/recording attempts on protected screens)

3. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Match you with other users on your sailing
• Send you notifications about matches and messages
• Improve and personalize your experience
• Ensure safety and prevent fraud
• Moderate content using AI-powered scanning
• Protect user privacy through screenshot/recording detection
• Comply with legal obligations

4. Automated Content Moderation

To keep Nautir safe for everyone, all uploaded photos are automatically scanned using AI-powered content moderation before they become visible to other users.

What We Scan For

• Explicit content: Nudity, sexual activity, or graphic material
• Violence: Gore, weapons in threatening contexts, or disturbing imagery
• Hate symbols: Imagery promoting hate or terrorism
• Minor safety: Any content that may involve minors (zero tolerance)

How It Works

• Photos are analyzed instantly when you upload them
• Approved photos appear on your profile immediately
• Rejected photos are automatically deleted and never shown to other users
• You'll receive a clear explanation if a photo is rejected

What's Allowed

Since Nautir is designed for cruise travelers, we understand beach and pool photos are common. Swimwear, casual vacation attire, and tasteful photos are welcome. We only block explicit content that violates community standards.

Third-Party Processing

Content moderation is powered by industry-leading AI services (Hive AI for visual moderation; Anthropic and OpenAI for text-based moderation of reported messages and community room requests). Your photos and message content are processed securely, and moderation results (pass/fail) are stored to improve our systems. These providers do not retain your content after processing and do not train models on Nautir user data.

4a. AI Concierge (Kai the Skipper)

Nautir includes an in-app AI concierge called Kai the Skipper. When you send Kai a message, the text of that message plus context about your sailing (ship, cruise line, dates) is transmitted to OpenAI so Kai can generate a grounded answer. OpenAI processes the request and returns a response; no data is retained by OpenAI after the response is delivered, and Nautir user data is not used to train OpenAI models.

Questions Kai cannot answer (booking, pricing, escalations) may be forwarded to a verified human Travel Advisor. The forwarded context includes the text of your conversation with Kai so the advisor can help.

Your Consent

Before any message or content is sent to our AI providers (OpenAI, Anthropic, Hive), you are shown an in-app AI disclosure and must tap "Agree & Continue." New users see this during onboarding. Existing users see a one-time consent sheet after updating. You can withdraw consent at any time by contacting [email protected]; withdrawing consent disables Kai and AI-based moderation, which may limit features like photo and chat uploads.

5. Sailing-Bounded Data & Automatic Deletion

Your profile and interactions are tied to specific sailings. We've designed Nautir with privacy-first data retention:

• During your sailing: Your profile and chats are active and visible to matches
• When sailing ends: Chats become read-only and all chat photos are automatically deleted from our servers
• 30 days after sailing: All chat messages are permanently purged from our systems

This means your conversations don't live on our servers forever. What happens on your cruise stays on your cruise.

6. View-Once & Ephemeral Photos

Photos shared in chat have multiple layers of privacy protection:

View-Once Photos

When you send a view-once photo, it is queued for permanent deletion from our servers the moment the recipient views it. The recipient sees it once, then it's gone. Deletion is processed automatically and cannot be reversed.

Regular Chat Photos

Standard photos shared in chat are automatically deleted when your sailing ends (return date). They cannot be recovered and are permanently removed from our storage systems.

We don't keep your photos longer than necessary. Your privacy isn't our storage bill.

7. Screenshot & Screen Recording Protection

To protect user privacy, Nautir implements screenshot and screen recording protection on sensitive screens (profiles, chats, matches).

On Android

• Screenshots and screen recordings are blocked entirely at the system level

On iOS

• Protected content appears blank in screenshots via native secure rendering
• Screenshot attempts are detected and logged as a privacy violation
• Screen recording triggers a blur overlay to obscure content
• Content is obscured in the app switcher

Enforcement

We log privacy events (screenshot attempts, recording starts) to detect patterns of abuse. Users who exhibit repeated violations are temporarily locked out of the app. These logs do not capture the actual screenshot content, only metadata about the event (screen visited, timestamp, device platform).

8. Age & Identity Verification

Nautir requires Age & Identity Verification (18+) for all users to ensure a safe, adults-only environment. Our verification process:

• Requires a government-issued ID and a quick liveness check
• Your documents are processed by our verification partner (Didit) and never stored by Nautir
• Nautir receives only the verification result (pass/fail) and confirmed age
• You'll receive a verified badge on your profile confirming your identity

Verified Badge (Premium): Premium users can optionally earn a Verified Badge through additional biometric verification. This confirms that your profile photos are really you through selfie matching—no catfish allowed.

9. Advertising and Attribution

We use device identifiers (such as IDFA on iOS and Advertising ID on Android) to measure the effectiveness of our advertising campaigns. This data is shared with advertising partners, including Meta (Facebook), to understand which ads led to app installs.

• We do not display third-party ads within the app
• On iOS, you will be asked for permission before any advertising identifier is collected (via Apple's App Tracking Transparency prompt)
• On Android, you can reset or opt out of your Advertising ID through your device settings
• If you decline tracking, the app works exactly the same; only our ability to measure ad performance is affected

10. Data Sharing

We may share your information with:

• Other users on your sailing (profile information only)
• Service providers who assist our operations (hosting, analytics, verification)
• Advertising partners for campaign measurement and attribution (device identifiers only, subject to your consent)
• Law enforcement when required by law

We do not sell your personal information to third parties.

11. Data Security

We implement appropriate security measures to protect your information, including encryption in transit and at rest, row-level security on database tables, and rate limiting to prevent abuse. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

12. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your account and data
• Opt out of marketing communications
• Request a copy of your data

12a. External Handles and Crew

Nautir allows you to optionally register one or more usernames from external networks (SLS, SDC, Fetlife, Kik, Snapchat). Handles are stored privately, never displayed on your profile, never sent to other users, and never shared with those networks. Other Nautir users can send you a Crew connection request if they already know your handle on one of these networks. You can delete any handle at any time from Settings → Handles. Deleting your account permanently removes all stored handles.

A Crew connection is a persistent, bidirectional link between two users that lives outside of any single sailing. Either party can remove the Crew connection, which ends it on both sides. Crew invite links contain an opaque, single-use token that grants the bearer a limited one-time ability to request a Crew connection; they do not reveal any other profile information.

13. Age Restriction

Nautir is for users 18 years and older only. We do not knowingly collect information from anyone under 18. If we learn we have collected personal information from someone under 18, we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

15. Contact Us

If you have questions about this Privacy Policy, please contact us at:

[email protected]