Nanvero
Get Pro

Privacy Policy.

Nanvero is built to need less of your data, not more. This explains exactly what we collect across our website and our app, why, who processes it, and what you can do about it.

Last updated: 9 October 2026

This policy covers nanvero.com (our marketing website), app.nanvero.com (the Nanvero web app, where your travel is actually organized) and the Nanvero iOS app. It explains what information we collect, how we use it, the providers who help us process it, how long we keep it, and the rights you have. Nanvero is a trading name of NP Labs Ltd, a company registered in England and Wales (company number 16053245, registered office 128 City Road, London, United Kingdom, EC1V 2NX) (“Nanvero”, “we”, “us”). NP Labs Ltd is the data controller, registered with the UK Information Commissioner’s Office (ICO) under reference ZC228854.

The short version

  • We do not sell your data, and we never will.
  • The app reads the travel and loyalty emails you choose to forward to it, and turns them into your balances, trips and reservations. It never signs in to your loyalty accounts and never asks for their passwords.
  • Instead of forwarding, you can optionally connect a Gmail or Outlook account. Google and Microsoft each grant Nanvero read-only access to your mailbox, and Nanvero’s systems are built to inspect only mail from recognized travel and loyalty senders. Nanvero can never send, change or delete anything in your mailbox, and you can disconnect at any time, which stops all access immediately.
  • Your account and travel data are stored in the European Union (Frankfurt). Some of the providers that help us run Nanvero are in the United States — they are all named below.
  • We use AI to read the parts of a travel or loyalty email our own rules can’t — balances, elite status, benefits and promotions. Data sent to our AI provider is never used to train AI models.
  • An email waiting for you to approve its sender is deleted after 30 days if you don’t act on it.
  • We never ask for — and never store — the passwords to your loyalty or airline accounts. No genuine message from us will ever request one.
  • You can export your data, or permanently delete your account, at any time from Settings → Your data in the app.
  • Questions any time: our contact form.

Who we are

Nanvero is a trading name of NP Labs Ltd. For anything relating to your privacy or this policy, the data controller is NP Labs Ltd and you can reach us at our contact form.

Information we collect

When you visit the website (nanvero.com)

Like most websites, we and our providers collect some technical information:

  • Usage and device data — the pages you view, the site that referred you, and your browser and device type, collected through Google Analytics, Microsoft Clarity and Vercel Web Analytics only if you accept analytics cookies.
  • Approximate location — a rough region derived from your IP address. We do not collect precise location.
  • Newsletter — if you subscribe, your email address, which you confirm through a link we send you.
  • Server logs — our hosting provider records standard access logs (including IP address and timestamps) to keep the site secure and running.

When you create and use the app (web and iOS)

  • Account details — the email address you sign in with, your name, your country, and your currency and display preferences. Sign-in is passwordless: we email you a link and a 6-digit code, and we never store a password for you.
  • Optional profile details — if you choose to add them: city, home airport, date of birth, gender, income bracket and travel preferences (such as trips per year and budget), and the airlines and hotels you star as priorities, with any status or points goal you set for them. They tailor the suggestions Nanvero makes, and you can clear them at any time.
  • Forwarded emails — when you forward a travel or loyalty email to your Nanvero address, we receive and process the content of that email so we can turn it into a balance, trip or reservation. This can include the sender, subject, body and any attachments of the emails you forward.
  • Connected mailbox (optional) — if you choose to connect a Gmail or Outlook account, you grant Nanvero read-only access through Google’s or Microsoft’s official API. That read-only permission covers your mailbox; Nanvero’s systems are designed to inspect only mail from recognized travel and loyalty senders, and process it exactly like a forwarded email. Nanvero never sends, changes or deletes anything in your mailbox. We store the access token the provider issues, encrypted, so scans can run, and delete it the moment you disconnect, which stops all access. For Gmail, disconnecting also withdraws the permission at Google. Microsoft provides no way for an app to withdraw its own permission, so for Outlook the permission stays listed in your Microsoft account until you remove it there — we tell you so, and link to it, when you disconnect.
  • Connected Seats.aero account (optional) — if you already subscribe to Seats.aero Pro and choose to connect it, you authorize Nanvero through Seats.aero’s own sign-in to search award seats and award nights on your behalf, using your Seats.aero allowance. We store only the access token Seats.aero issues, encrypted. We don’t keep your Seats.aero name or email, and search results are shown to you and never stored. Disconnecting deletes the token, which stops all access; to remove Nanvero from your Seats.aero account as well, use the Apps section of your Seats.aero settings.
  • Travel information — the loyalty balances, elite status, reservations, trips, redemptions, notes and expenses that Nanvero builds from what you forward or enter, and any calendar feed address you ask us to import from. Nanvero also keeps a dated history of each program’s balance (and tier points), so you can see it change over time; it is included in your data export and deleted with your account.
  • Card statements (optional) — if you upload a credit card’s monthly statement (PDF), or forward it to your Nanvero address, to count the card’s credits and spend, we read it once and keep only what we work out from it: the statement period, the purchases total, points earned and any bonus points, points used and the points balance, any annual fee, and the few lines that relate to the card’s credits or to offers you used (amount and date). The PDF itself and all your other transactions are never stored. Where we ask you about a line, we keep the merchant name only until you answer.
  • Hotel bills (optional) — if you forward or upload a hotel’s final bill (folio) to check it, we keep the charge lines we read from it (date, description and amount), the hotel, the stay dates, confirmation and folio numbers, the charges we suggest asking about, and what you tell us happened. The bill itself is not stored. The check is deleted with the stay or your account, or when you delete it.
  • Documents and photos — attachments from forwarded emails, and files or photos you upload to a trip. These are stored privately in your account.
  • Devices and sign-ins — for each signed-in session we record the IP address and browser or device, and look up the approximate city from the IP address, so you can review and sign out devices under Settings → Devices & sign in. If you turn on notifications, we store the push token for that device and its name.
  • Subscription and payment — if you subscribe to a paid plan, Stripe handles your card details (see below); we receive and store a customer reference and your subscription status, not your card number.
  • Referrals — if you arrive through a referral link, we record the click (with your country, browser type and a one-way scrambled version of your IP address, never the address itself) and set a cookie for 30 days so the referral can be credited.
  • Product analytics and error reports — how the app is used, and technical details when something goes wrong, used to run, secure and improve the service.

We do not intentionally collect special-category (sensitive) personal data, such as information about your health, religion or sexual orientation. Emails and documents you forward or upload may occasionally contain it incidentally — for example, a meal or assistance request in a booking — and some travel information could indirectly suggest things about you (for example, a destination). We use any such information only to provide the service, and never to profile you for advertising.

Information about other people

Some features let you record details about people you travel or share with: the names on family profiles, the email addresses of people you invite to a Household, as a delegate or to a company seat, the names in a trip’s cost split, and extra email addresses you ask us to accept forwards from (we email those addresses to confirm them). Please add only people who would expect it. We use these details only to run the feature you set up.

Why we use your information (our legal bases)

Under UK data protection law, we rely on the following:

  • Contract — to create your account and provide the Nanvero service you sign up for, including processing the emails you forward, maintaining your wallet and trips, and sending the service emails and alerts that go with them.
  • Consent — for non-essential analytics cookies, push notifications, connecting a Gmail or Outlook mailbox, and marketing email (each of which you can withdraw at any time).
  • Legitimate interests — to keep the service secure and prevent abuse, to understand and improve how it is used, to credit referrals, and to respond to your questions. We balance these against your rights and keep the data to a minimum.
  • Legal obligation — to keep the records the law requires, such as for tax.

Cookies and tracking

We ask before we track. When you first visit, a banner lets you accept or decline analytics, and nothing non-essential loads until you accept. If you decline, we do not load analytics at all. You can change your mind at any time using the Cookie preferences link in the footer.

When you accept, we use Google Tag Manager to load analytics — Google Analytics and Microsoft Clarity — which place cookies to measure how our website and app are used (for example, which pages are popular and how visitors move through them), together with Vercel Web Analytics, which counts visits without setting cookies. None of these are advertising cookies — we do not build advertising profiles or run retargeting pixels. Our fonts are served from our own domain rather than fetched from Google Fonts, so simply loading a page does not send a request to Google for typography.

The app also sets cookies it needs to work — to keep you signed in, to remember which person’s view you’re looking at, and to credit a referral — and stores your display preferences on your device. The iOS app keeps your sign-in in the device’s secure storage. It uses Google Analytics for Firebase to count which screens are opened and when someone signs up, adds a program or adds a booking, linked to your Nanvero account ID (never your name or email). It does not use your device’s advertising identifier, and it is switched off for Nanvero staff accounts. You control it under Settings → Privacy → Share usage analytics. If you are in the UK, the EEA or Switzerland, it is off by default and nothing is sent unless you turn it on. Elsewhere it is on by default, and you can turn it off at any time.

You can control or block cookies through your browser settings, and you can opt out of Google Analytics across all sites using Google’s browser opt-out add-on. Blocking analytics cookies will not stop you from using Nanvero.

For the full list of the cookies we set and how long they last, see our Cookie Policy.

Who processes your information

We do not sell your personal data. We share it only with the service providers that help us run Nanvero, acting on our instructions as our processors (Stripe is the exception, explained below).

Running the service

  • Supabase — the database, sign-in and file storage that hold your account, travel data, documents and photos. Hosted in Frankfurt, in the European Union.
  • Vercel — hosting of the website and app; our servers run in Frankfurt. Also provides Web Analytics, loaded only after you accept analytics cookies.
  • Cloudflare — our domain names, the relay that passes the emails you forward on to us, and the bot check at sign-in, newsletter signup and the contact form (which processes your IP address and interaction signals to tell humans from bots).
  • Postmark — receives the emails you forward, and sends every account and service email: your sign-in link and code, the message asking you to approve a new sender, alerts, and the monthly backup email if you turn it on (which carries a copy of your data). It also delivers messages sent through our contact form to our inbox (your name, email, topic and message), and sends you a short confirmation that it arrived.
  • Loops — our marketing email platform. It holds a contact record for each account with only your first name, email, plan and whether you have opted in to marketing — nothing about your loyalty programs, balances, expiry dates or trips. We use it to send product news and marketing email only if you have opted in. Newsletter sign-ups on the website are held here too. If our main email route is unavailable, contact-form messages pass through Loops instead; you are not added to any mailing list.
  • Anthropic — the AI provider that reads the travel and loyalty emails our own rules can’t, and any card statement you upload, and answers the questions you ask Ask Nanvero (see “How we use AI” below). Anthropic does not use data sent through its API to train its models.
  • Sentry — error reporting for the website and apps, hosted in the European Union. We configure it not to collect personal details by default.

Payments

  • Stripe — sells paid plans to you as the merchant of record, which means Stripe is the seller on your receipt and handles payment, tax and invoicing. For that it acts as a separate controller under its own privacy policy. We share your email address and account reference with Stripe; we never see or store your card number.

Notifications and the iOS app

  • Expo — delivers push notifications to the iOS app (the notification text, such as a program name and points, and your device’s push token) and delivers app updates.
  • Google (Firebase) — Google Analytics for Firebase measures how the iOS app is used: screens opened, sign-ups and the programs and bookings added, with your Nanvero account ID and basic device details (model, iOS version, country). No advertising identifier is collected.
  • Apple — Apple’s push service delivers notifications to your iPhone, and the iOS trip map uses Apple Maps.
  • Your browser’s push service (for example Google, Mozilla or Apple) — delivers web notifications if you turn them on. The content is encrypted in transit.

Travel features

To add weather, photos, maps and places to your trips, we send these services the minimum needed — usually a city, hotel or place name, never your name or email:

  • Open-Meteo — destination names, to show the weather and place trips on the map.
  • Wikipedia / Wikimedia — destination names, to find a cover photo for a trip.
  • OpenStreetMap services (Photon, Nominatim and Wikidata) — hotel and place names and addresses from your bookings, to link them to the right place.
  • MapTiler / OpenStreetMap — your browser loads map images for the areas of your trips.
  • Google and DuckDuckGo icon services — your browser or phone may load program logos by website address, which tells those services which program logos are shown.
  • ipwho.is — the IP address of a signed-in session, to show its approximate city under Devices & sign in.
  • Seats.aero — only if you connect a Seats.aero account: when you run an award search, the search itself (airports or place, dates, cabin or hotel program) together with the token that identifies your connected account.
  • AeroDataBox — the flight number and date of a flight in your Trips, shortly before it departs, to tell you if it is badly delayed or canceled. Never your name, email or booking reference.
  • Stay22 — when you tap a hotel “Book” link, the hotel’s name, location and your dates, so the booking site opens with your stay filled in.
  • Google Wallet — only if you add a booking to Google Wallet, the booking details on that pass. (Apple Wallet passes are made on our servers and downloaded straight to your device.)
  • Calendar hosts — if you give us a calendar feed address to import, our servers fetch it from wherever it is hosted.

Google and Microsoft

  • Google — if you connect a Gmail account, Google’s Gmail API provides the read-only access Nanvero uses to read mail from known travel and loyalty senders. Separately, Google Tag Manager and Analytics provide website and product analytics, loaded only after you accept analytics cookies.
  • Microsoft — if you connect an Outlook, Hotmail or Live account, Microsoft Graph provides the read-only access Nanvero uses to read mail from known travel and loyalty senders. Separately, Microsoft Clarity provides product analytics, loaded only after you accept analytics cookies.

We may also disclose information if the law requires it, or to protect the rights, safety or property of Nanvero and others.

How we use AI

To save you typing, Nanvero reads the travel and loyalty emails you forward or connect and pulls out what matters: your balance, elite status and tier progress, benefits you’ve been granted (such as free night certificates) and promotions you’ve registered for. Bookings are read by our own rules. When our rules can’t confidently read a loyalty email from a program we recognize, we send its sender, subject and text to our AI provider (Anthropic) purely to extract those details. Every result is checked against strict rules before it is written to your wallet, and it is logged — with a short excerpt of the text it came from — so any change is auditable and reversible (the excerpt is removed after 12 months). If you upload or forward a card statement, its contents are sent to Anthropic once to find the card’s credits, spend and points; only those figures are kept, and anything we can’t tell for sure is put to you as a question rather than guessed. A hotel bill is read by our own rules; only a bill they can’t read is sent to Anthropic, once, to copy out its charge lines. Which charges are worth asking about is always decided by our rules, never by the AI. When an email you forward, or one from a connected Outlook mailbox, is a program’s newsletter or monthly statement, we also send its text to Anthropic to list the offers it promotes to all members (such as double points on stays), so we can keep Nanvero’s offers list up to date. This happens once per campaign, however many members receive it. Only the offer’s own terms are kept, never your name, account details or the personal links in the email, and our team checks each offer before it appears in the app. Emails read through a connected Gmail account are never used for this. When you ask a question in Ask Nanvero, your question and the parts of your Nanvero data needed to answer it (such as balances, expiry dates, status and booked trips) are sent to Anthropic to write the answer. Ask Nanvero only reads: it never changes your data, moves points or books anything, and a suggested next step happens only if you tap it. Your questions and its answers are kept for 90 days so you can return to a conversation; you can turn this off in Settings → Your data, which deletes each conversation when you close it and removes what was kept. Your data is not used to train AI models. We do not use AI to make any decision that has a legal or similarly significant effect on you.

Google user data and Limited Use

Nanvero’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Data from a Google mailbox you connect is used solely to provide the travel and loyalty features you ask for — turning recognized travel and loyalty emails into your balances, trips and reservations. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide these features (including to our AI provider, as described above), to comply with the law, or in connection with a merger or acquisition. Google user data is never used to train generalized or standalone AI models. Google’s read-only permission covers your mailbox; Nanvero’s systems are built to inspect only mail from recognized travel and loyalty senders, and you can disconnect at any time, which revokes the access at Google.

International transfers

Your account data is stored, and our servers run, in the European Union. Several of the providers above are based outside the United Kingdom and the EU, so your information may be processed there. In the United States: Google (Gmail, Google Analytics and Firebase), Microsoft (Outlook and Clarity), Apple, Loops, Postmark, Anthropic, Stripe, Expo and Cloudflare. Elsewhere: some of the travel services listed above, such as MapTiler and Open-Meteo in Switzerland and Stay22 in Canada. Where that happens, we rely on appropriate safeguards — such as UK adequacy regulations (including the UK–US data bridge for certified US companies), the UK International Data Transfer Agreement, or standard contractual clauses — to protect it.

What happens to the emails you forward

When a forwarded or scanned email creates a booking, we keep the original message as a viewable document filed against that reservation, along with any attachments it carried (such as a boarding pass or PDF confirmation), so you can open the source later. These are stored privately and served download-only, so nothing in them can run in your browser. You can delete any of these documents yourself, and deleting the reservation or your account removes them. A statement that only updates a balance is used to update your wallet and isn’t kept as a stored email — only the short excerpt logged with the reading — though any attachment it carries may still be filed for you to open later.

The first email you forward from a new sender is held until you confirm that sender is you. While it waits, we store the whole message, including any attachments, so that approving it adds it without you forwarding it again. If you don’t approve or reject it within 30 days, we delete it automatically; you can forward it again at any time.

If we can’t read a forwarded email, we don’t keep its content. We record only the sender’s domain and the subject line, so we can see which programs to support next, and delete that record after 12 months.

Sharing your trips

You can share a trip with a private link. The page shows the trip’s bookings, dates, places and notes. Confirmation numbers, prices, points and documents stay hidden unless you choose to show them for that link — a confirmation number and your surname are often enough to change or cancel a booking, so share them only with people you trust. You can set a link to expire and revoke it at any time. If you allow editing, anyone with the link can add items and notes to the trip. Shared pages are hidden from search engines. Your calendar feed works the same way: a private address that shows your itinerary to any calendar you give it to, until you reset or turn it off.

You can also share a planned trip from your Playbook. That page shows the route, cabin, number of travelers, the program and its published award price, and only if you choose, the travel month, the cash fare you found and whether your points are ready (a word, never a number). It never shows your balances. Shared pages show your first name only. Anyone with the link can add the plan to their own Nanvero account; when they do, we tell you their first name, and we delete that record after 12 months.

Household and delegated access

Nanvero lets you share access with people you trust — a Household puts up to five people on one plan, and Executive lets an assistant or other delegate act in your account. When you use these features, we process the information needed to make them work:

  • Invitations — when you invite someone, we send an invitation email to the address you give and record who invited whom, so the invite can be accepted, declined or withdrawn.
  • Membership and delegate identity — we record that an account belongs to a Household, and which accounts may act as a delegate on another, each with their own separate login.
  • Permissions and sharing choices — we store the access you grant. A delegate can see, or also edit, only the areas you choose (your trips, your points, or both); Household balances can be pooled for planning without anyone seeing another person’s trips, and each switch is yours to set, per person.
  • Activity history — when a delegate changes something in your account, we record the change under their name, and you can see the last 30 days of it in Settings → People.

You can revoke delegated access, or remove a Household member, at any time. When access is revoked the delegate can no longer see or act on your data; when someone leaves a Household, their own account simply returns to the free tier and their private data stays with them — nothing of theirs is deleted, and nothing of yours remains visible to them.

Company seats

A company that uses Nanvero for its travel rewards can invite its employees to a seat. If you accept, the company can see your business trips only: the flights and stays you mark as business, or that you forward from your work email address. It never sees your personal trips, your points balances or anything else in your account. You see the company’s reward programs and the membership numbers to give when you book.

We record the invitation (the email address the company entered, and when) and, once you accept, that your account holds the seat. Nothing is shared until you accept. You can leave the company at any time, and the company can end your seat; either way it stops seeing your trips straight away, and your own account and trips stay as they are. Deleting your account ends the seat too.

How long we keep it

  • Your account and travel data — including the stored emails, documents and photos described above — for as long as your account is open.
  • Forwarded emails waiting for approval — deleted after 30 days if you don’t act on them.
  • Records of emails we couldn’t read (sender domain and subject line only) — deleted after 12 months.
  • The email subject and excerpt kept with each balance reading — removed after 12 months, unless the reading is still waiting for you to review it.
  • The email address on our record of each email we send you — removed after 12 months (we keep the record itself so we never send you the same one-off email twice).
  • Who saved a plan you shared (their first name) — deleted after 12 months.
  • Card-statement questions you haven’t answered(the line’s amount, date and merchant name) — deleted after 90 days.
  • Ask Nanvero questions and answers — deleted after 90 days, or when you close the conversation if you’ve turned history off in Settings.
  • Product analytics (how the app is used) — deleted after 13 months.
  • Error reports from your browser — deleted after 90 days.
  • Database backups — our database provider keeps rolling daily backups for 7 days, after which they are deleted. Data you delete, or that we delete under these rules, can remain in a backup until it rolls off.
  • Emails you send us — for as long as needed to deal with your question and any follow-up.
  • Website analytics (Google Analytics, Microsoft Clarity and Vercel Web Analytics, only if you accept analytics cookies) — kept by each provider for the retention period set in that tool, after which it is deleted automatically.

When you delete your account, we cancel any subscription and delete your profile, wallet, offers, trips, reservations, documents and photos, your contact record at our email platform, and your customer record at Stripe. If you connected a mailbox, we delete the stored access token, which ends Nanvero’s access. For Gmail we also withdraw Nanvero’s permission at Google; Microsoft provides no equivalent, so an Outlook permission stays listed in your Microsoft account until you remove it there. If you connected Seats.aero, we delete its token too; Nanvero stays listed under Apps in your Seats.aero settings until you remove it there. A few records are kept without anything linking them to you — such as counts of AI usage, error reports, and referral and voucher records we need for accounting — and Stripe keeps its own payment and tax records as the law requires. Backup emails already in your inbox are yours to keep or delete.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, to ask for a copy of it in a portable format, and to withdraw any consent you have given. Two of these you can exercise yourself, instantly, in the app:

  • Export a machine-readable copy of the data held against your account — Settings → Your data. Documents and photos download from each trip. You can also have the export emailed to you every month.
  • Delete your account and its data permanently — Settings → Your data → Delete my account.

For anything else — or if you can’t reach the app — email our contact form and we will action it. We reply within one month; if a request is complex, we may need up to two further months, and we will tell you why within the first month. If you are unhappy with how we have handled your data, you can complain to the UK’s Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put things right first.

United States residents

Depending on where you live and the law that applies, you may have additional rights over your personal information — including rights to know, access, correct, delete, or obtain a portable copy of it, and to not be treated differently for exercising them. Nanvero does not sell your personal information, does not share it for cross-context behavioural advertising, and does not use it for targeted advertising. You can exercise any applicable rights yourself using the controls in Settings → Your data, or by emailing our contact form.

Who at Nanvero can see my data?

Today one person at Nanvero has staff access. Our staff tools show your account and profile details, your programs and balances, your trips and bookings, your plan and billing status, and, for emails you forward, the sender, subject line and the short excerpt we read to update a balance. We use this only to give you support, check balance updates our system is unsure about, fix problems and handle your requests.

Our staff tools cannot sign in as you, and they do not open the booking documents you forward, the full text of your emails or your connected mailbox. We never see your full card number; Stripe holds it. Plan changes, balance approvals and support notes record who made them. If more people need access, we will update this section first. The companies that run the service for us are listed under Who processes your information.

Security

We protect your information with measures appropriate to its sensitivity — encryption in transit, private file storage, access controls that keep each account’s data separate, and providers chosen for their security track record. Sign-in is passwordless, so there is no password of yours for us to leak. No system is perfectly secure, but we work to keep the data you trust us with safe, and to collect as little of it as the service needs.

Children

Nanvero is intended for adults: you must be at least 18 to use it (see our Terms), and we do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy as Nanvero develops. When we do, we will revise the “last updated” date at the top, and for significant changes we will make it more prominent.

Contact us

Questions about your privacy or this policy? Email our contact form and a real person will reply.