Consumer Health Data Privacy Policy

This policy is published under Washington State's My Health My Data Act (MHMDA) and describes how Nommie collects, uses, shares, and retains consumer health data. It supplements our Privacy Policy, which continues to govern all other personal data.

1. Categories we collect, and why

• Medication. GLP-1 medication name, dose, start date, start weight, and injection schedule, plus B-complex medication. Used for GLP-1 companion features such as dose reminders and calorie floors.
• Reproductive. Whether pregnancy mode is enabled, and your due date. Used for pregnancy-adjusted nutrition guidance.
• Body and demographic. Current weight, target weight, date of birth, and gender. Used to calculate calorie and macro targets.
• Diet and allergy. Allergens and dietary preferences. Used for meal planning and safety filtering.
• Wearable and health app data. Health metrics read from Apple Health or Android Health Connect, including heart rate variability, sleep, blood oxygen, temperature, heart rate, and respiratory rate. Used for recovery guidance and activity-adjusted goals.
• Ring data (optional). If you pair a compatible ring: heart rate variability, heart rate, blood pressure, blood oxygen, skin temperature, and stress.
• Mood. If you log it, how you felt at a point in time, on a five-point scale. Used to show you patterns between how you eat and how you feel.
• Fasting. Your fasting schedule, your fasting sessions and their start and end times, and any fasting goals you set. Used to run fasting timers and reminders.
• Body composition. Body fat percentage and lean mass, where your connected scale or health app provides them. Used alongside weight to track progress.
• User-entered data. Food logs, weight, and goals.

2. Where it comes from

Apple Health or Android Health Connect, which themselves aggregate from watches, scales, and other apps; an optional paired Bluetooth ring, over a direct connection to your phone; and information you enter yourself.

3. What we share, and with whom

Google (Gemini).Some features send parts of your profile to Google's Gemini so the model can respond to your situation. Meal planning and meal suggestions send your allergens, dietary preferences, and whether you have enabled GLP-1 mode. The AI chat additionally sends your medication name and, if you have turned on pregnancy mode, your pregnancy status and due date. The chat also sends your fasting status, so the coach knows whether you are mid-fast. Your GLP-1 dose and injection schedule are never sent. Food photo analysis sends only the photo and meal context, and never your account identity. We use Google's paid Gemini tier, under which Google does not use what we send to train or improve its models.

Your mood logs and body composition are not sent to any AI provider. Google's Gemini is the only AI service we send data to, and neither of those categories is included in what we send it.

Wearable and ring data stays on your device. Health metrics read from Apple Health or Android Health Connect, and biometrics from a paired ring, are not written to our servers. Ring readings are stored on your device on a rolling 30-day window.

Analytics. Our analytics provider receives no health values, no health data-type names, and no per-person health indicators.

Other processors. Our error reporting, backend hosting, and purchase management providers. We do not sell consumer health data, and we do not use it for advertising.

4. Your rights

• Access and portability. You can export your data, including every health field described above.
• Deletion. You can delete your account, which deletes your data across every record tied to it rather than anonymising and retaining it.
• Withdrawing consent. Apple Health and Android Health Connect access can be revoked in your operating system settings. Ring access has its own in-app consent control. Medication tracking is off by default and is opt-in.

To exercise any of these rights, or to appeal a decision we make about a request, contact us at privacy@nommie.app.

5. How long we keep it

• Ring biometrics. A rolling 30-day window, stored on your device and pruned as new readings arrive.
• Apple Health and Android Health Connect. Read on demand and not copied into our store.
• Data held on our servers, including medication and pregnancy fields and your mood, fasting and body composition logs, is retained for the life of your account and deleted when you delete your account. There is no automatic expiry: a due date, for example, is not removed when it stops being current, and mood and fasting entries are kept as history rather than aged out. You can clear or change them at any time in the app.

6. Contact

Nommie, Inc. Questions about this policy, or about consumer health data generally, can be sent to privacy@nommie.app.