Privacy Policy

1. Introduction

Nommie, Inc. (“Nommie,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our mobile application, website, and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, you should not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, and password when you register
• Profile data: age, height, weight, gender, activity level, and dietary goals
• Food data: photos of meals, text descriptions of food, barcode scans, and manual food log entries
• Health data: weight measurements, nutritional intake history, and calorie goals
• Communications: messages you send to our support team or through the AI chat feature

2.2 Information Collected Automatically

• Device information: device type, operating system, unique device identifiers, and app version
• Usage data: features used, pages visited, actions taken, timestamps, and session duration
• Log and diagnostic data: error reports, crash logs, and performance metrics
• Session recordings: to understand where the app confuses or fails people, we may record how the app's screens are used during a session (screen layout, taps, and navigation), processed by PostHog. These recordings are aggressively masked before anything leaves your device: all text you type, all images (including your food photos), and all system photo/contact pickers are replaced with placeholders, and no app logs are captured. What we receive shows the shape of your journey through the app, not your content. Recordings are throttled snapshots, not continuous video, and are used solely for product improvement

2.3 Information from Third Parties

If you sign in with Apple, Google, or another authentication provider, we receive your name, email, and profile identifier as permitted by your settings with that provider.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Analyze food photos and descriptions to estimate nutritional content
• Generate personalized nutrition insights and recommendations
• Process subscriptions and payments
• Send you service-related notifications and updates
• Respond to your support requests and communicate with you
• Improve our AI models using de-identified, aggregated data
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: We share data with trusted third-party providers including cloud hosting (Supabase), payment processing (Stripe), AI food analysis (Google Gemini), and analytics (PostHog).
• Legal requirements: We may disclose information if required by law or governmental request.
• Business transfers: In the event of a merger or acquisition, your information may be transferred as part of the transaction.
• With your consent: We may share information for other purposes when you give explicit permission.

4.1 Third-Party AI Processing: Google Gemini

Some features send parts of your profile to Google's Geminiso the model can respond to your situation. Meal planning and meal suggestions send your allergens, dietary preferences, and whether you have enabled GLP-1 mode, because a plan that does not know your allergies is not safe. The AI chat additionally sends your medication name, your display name, and, if you have turned on pregnancy mode, your pregnancy status and due date, so the coach can answer in context. It also sends your fasting status, so the coach knows whether you are mid-fast. Your GLP-1 dose and injection schedule are never sent. We use Google's paid Gemini tier, under which Google does not use what we send to train or improve its models.

Four more features send data to Gemini. Voice logging sends a text transcript of what you said, and it is the most used way of logging in the app. Pantry scan sends every photo of your fridge or pantry. Supplement scan sends the photo of the label. Your weekly nutrition summary sends your first name, your goal, your calorie and macro averages, the foods you log most often, and, if Pregnancy Mode is on, that you are pregnant and which trimester, though not your due date.

Food photo analysis sends only the photo and meal context, and no account identity. That applies to the photo scan specifically: the weekly summary sends your first name and the chat sends your display name. Our fuller Consumer Health Data Privacy Policy sets all of this out, including how we established it.

You must consent before any photos are sent, and you can withdraw consent at any time in Settings. If you are a Washington State consumer, see our Consumer Health Data Privacy Policy.

5. Data Storage and Security

Your data is stored on secure servers in the United States using Supabase (SOC 2 Type II). We implement encryption in transit (TLS 1.3), encryption at rest (AES-256), row-level security policies, and access controls limiting employee access to personal data.

6. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete or de-identify your personal data within 30 days, except where required for legal purposes.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal data. To exercise any of these rights, contact us at privacy@nommie.app. We will respond within 30 days.

8. Cookies and Tracking

Our web application uses essential cookies required for authentication and session management, and PostHog for product analytics. We do not use third-party advertising cookies or trackers.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. Contact us at privacy@nommie.app if you believe a child under 13 has provided us with personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the “Last updated” date.

11. Contact Us