Consumer Health Data Privacy Policy

This policy is published under Washington State's My Health My Data Act (MHMDA) and describes how Nommie collects, uses, shares, and retains consumer health data. It supplements our Privacy Policy, which continues to govern all other personal data.

1. Categories we collect, and why

• Medication. GLP-1 medication name, dose, start date, start weight, and injection schedule, plus B-complex medication. Used for GLP-1 companion features such as dose reminders and calorie floors.
• Reproductive. Whether pregnancy mode is enabled, and your due date. Used for pregnancy-adjusted nutrition guidance.
• Body and demographic. Current weight, target weight, date of birth, and gender. Used to calculate calorie and macro targets.
• Diet and allergy. Allergens and dietary preferences. Used for meal planning and safety filtering.
• Wearable and health app data. With your permission, Apple Health or Android Health Connect supplies steps, distance, exercise sessions, active and total calories, sleep, height, and weight for activity history, sleep trends, body measurements, and activity-adjusted goals. Optional Recovery reads heart rate variability, resting heart rate, heart rate, blood oxygen, respiratory rate, temperature (including body and basal body temperature on Android), and sleep to show a recovery score and nutrition suggestions on the Recovery screen. These are general wellness insights, not diagnosis or treatment.
• Ring data (optional). If you pair a compatible ring: heart rate variability, heart rate, blood pressure, blood oxygen, skin temperature, and stress.
• Mood. If you log it, how you felt at a point in time, on a five-point scale. Used to show you patterns between how you eat and how you feel.
• Fasting. Your fasting schedule, your fasting sessions and their start and end times, and any fasting goals you set. Used to run fasting timers and reminders.
• Body composition. Body fat percentage and lean mass, where your connected scale or health app provides them. Used alongside weight to track progress.
• User-entered data. Food logs, weight, and goals.

2. Where it comes from

Apple Health or Android Health Connect, which themselves aggregate from watches, scales, and other apps; an optional paired Bluetooth ring, over a direct connection to your phone; and information you enter yourself.

3. What we share, and with whom

Google (Gemini). Six features send something to Google's Gemini so the model can respond to your situation. Meal planning and meal suggestions send your allergens, dietary preferences, and whether you have enabled GLP-1 mode. The AI chat additionally sends your medication name, your display name at the top of every conversation, your fasting status, and, if you have turned on pregnancy mode, your pregnancy status and due date. Your GLP-1 dose and injection schedule are never sent. We use Google's paid Gemini tier, under which Google does not use what we send to train or improve its models.

Voice logging. When you log a meal by speaking, the words you say are turned into text on your device and that text is sent to Google's Gemini so it can work out what you ate. This is the most used way of logging in the app.

Pantry scan. When you scan your fridge or pantry, every photo you take is sent to Google's Gemini together in one request, so it can list what is there without counting the same item twice.

Supplement scan. When you scan a supplement, the photo of the label is sent to Google's Gemini to read the ingredients and serving size.

Worth saying plainly about those two: pantry photos are pictures of the inside of your home, and a supplement label is close to a list of what you take. Neither carries any account field attached to it. The information is the picture itself.

Weekly nutrition summary. Your weekly summary sends Google's Gemini your first name, your goal, your calorie and macro averages against your targets, the foods you logged most often, and food quality flags such as high sodium or high sugar. If Pregnancy Mode is on, it also sends that you are pregnant and which trimester you are in. It does not send your due date.

About your name. Food photo analysis sends only the photo and meal context, and no account identity. That is true of the photo scan specifically, so we want to be exact rather than let it stand for the whole app: the weekly nutrition summary sends your first name, and the AI chat sends your display name.

Your mood logs and body composition are not sent to any AI provider. Google's Gemini is the only AI service we send data to, and neither of those categories is included in what we send it.

Recovery readings and scores stay on your device, except ring activity summaries. Readings used by Recovery from Apple Health or Android Health Connect are processed in memory on your phone and discarded. We do not send those readings or your recovery score to our servers, AI providers, advertisers, or analytics partners. Paired-ring readings are stored on your device on a rolling 30-day window. One exception is ring activities. When you confirm an activity the app detected from your ring, we save a summary of it to your Nommie account with Supabase: the activity type, start and end time, steps, active calories, minutes at moderate intensity, how many minutes and heart-rate readings it covers, and its average and peak heart rate. When you mark a detected activity "Not an activity", we save its start and end time, intensity, number of heart-rate readings, and average and peak heart rate. We use these to show your activity history and to make activity detection more accurate; we save the heart-rate values only after you accept the in-app consent that describes them. We do not share them with AI providers, advertisers, or analytics partners. If you withdraw consent, we delete the saved heart-rate values.

Synced health history. When you connect health tracking, activity summaries (steps, calories, distance, and workout summaries), imported weight and height, and body composition (body fat and lean mass) can be saved in your Nommie account with our hosting provider, Supabase, to show your history and update your profile. This is separate from the on-device Recovery readings. If you grant write access, meals and weights you log in Nommie can also be written to Apple Health or Android Health Connect.

Analytics. Our analytics provider receives no health values, no health data-type names, and no per-person health indicators.

Other processors. Our error reporting, backend hosting, and purchase management providers. We do not sell consumer health data, and we do not use it for advertising.

How we established this. The list above comes from reading the code that builds each request to Google's Gemini, which is what decides what can be included. We have not recorded an actual outgoing request to confirm it, for any feature, including the photo scan. We would rather tell you which method we used than imply a stronger one.

4. Your rights

• Access and portability. You can export your data, including every health field described above.
• Deletion. You can delete your account, which deletes your data across every record tied to it rather than anonymising and retaining it.
• Withdrawing consent. Apple Health and Android Health Connect access can be revoked in your operating system settings. Ring access has its own in-app consent control. Medication tracking is off by default and is opt-in.

To exercise any of these rights, or to appeal a decision we make about a request, contact us at privacy@nommie.ai.

5. How long we keep it

• Ring biometrics. A rolling 30-day window, stored on your device and pruned as new readings arrive. Ring activity summaries are kept in your account until you delete your account. Their heart-rate values are deleted sooner if you withdraw consent.
• Recovery readings from Apple Health and Android Health Connect. Read on demand, processed in memory on your phone, and discarded.
• Data held on our servers, including imported activity summaries and body measurements, medication and pregnancy fields, and your mood, fasting and body composition logs, is retained for the life of your account and deleted when you delete your account. There is no automatic expiry: a due date, for example, is not removed when it stops being current, and mood and fasting entries are kept as history rather than aged out. You can clear or change them at any time in the app.

6. Contact

Kindly Robotics, Inc., which operates Nommie. Questions about this policy, or about consumer health data generally, can be sent to privacy@nommie.ai.