Privacy Policy

Welcome to Nomsy! Your privacy is important to us. This Privacy Policy explains how Nomsy ("we," "our," or "us") collects, uses, shares, and protects your information when you use our mobile application ("App").

By using Nomsy, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — Used for account authentication and communication
• Display name — Your chosen name displayed in the app
• Account creation date — When you joined Nomsy
• Authentication provider — Whether you signed in with email/password, Google, or Apple

1.2 Food and Nutrition Data

To provide our core service, we collect:

• Food entries — Names, serving sizes, and timestamps of foods you log
• Nutrition information — Calories, protein, carbohydrates, fat, fiber, sugar, and sodium
• Daily summaries — Aggregated nutrition totals for tracking
• Personal goals — Your calorie and macro targets
• Notes — Any notes you add to your food entries

1.3 Media and Device Access

With your permission, we may access:

1.4 Device Information

We automatically collect:

• Timezone — To display accurate daily summaries based on your local time

2. How We Use Your Information

We use your information to:

• Provide our services — Analyze food photos/descriptions, track nutrition, and display your progress
• Personalize your experience — Remember your goals and preferences
• Improve our AI — Enhance the accuracy of nutrition analysis (using anonymized, aggregated data only)
• Communicate with you — Send important updates about your account or our services
• Ensure security — Protect against unauthorized access and maintain service integrity

3. Third-Party Services

Nomsy uses the following third-party services to operate:

3.1 Firebase (Google)

We use Firebase for:

• Authentication — Secure sign-in via email/password, Google Sign-In, and Sign in with Apple
• Cloud Firestore — Secure cloud storage for your food entries and nutrition data

Firebase's privacy policy: https://firebase.google.com/support/privacy

3.2 OpenAI

We use OpenAI's API (via our secure backend) to:

• Analyze food photos and identify what you're eating
• Estimate nutritional content based on food descriptions

OpenAI's privacy policy: https://openai.com/privacy

3.3 Google Sign-In

If you choose to sign in with Google, we receive your email address and display name from Google. We do not access your contacts, calendar, or other Google services.

3.4 Sign in with Apple

If you choose Sign in with Apple, we receive only the information you choose to share (email and name). Apple's "Hide My Email" feature is fully supported.

4. Data Storage and Security

We take your data security seriously:

• Encryption — All data is encrypted in transit (HTTPS/TLS) and at rest
• Secure authentication — We use Firebase Authentication with industry-standard security
• Access controls — Your data is only accessible by you through authenticated sessions
• No selling of data — We never sell your personal information to third parties

5. Data Retention

We retain your data as follows:

• Account data — Retained while your account is active
• Food entries and nutrition data — Retained while your account is active
• Food images — Processed in real-time and not permanently stored

When you delete your account, all your personal data is permanently deleted from our systems.

6. Your Rights and Choices

You have the right to:

• Access your data — View all your food entries and profile information within the app
• Update your data — Modify your profile, goals, and preferences at any time
• Delete your data — Delete individual food entries or your entire account
• Withdraw consent — Revoke device permissions (camera, microphone, etc.) through your device settings

7. Children's Privacy

Nomsy is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using Nomsy, you consent to the transfer of your information to the United States and other countries where our service providers operate.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top
• Sending an in-app notification for material changes

We encourage you to review this Privacy Policy periodically.

10. Contact Us

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know — You can request information about the categories and specific pieces of personal information we have collected
• Right to Delete — You can request deletion of your personal information
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us at support@usenomsy.com.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access — Request a copy of your personal data
• Right to Rectification — Request correction of inaccurate data
• Right to Erasure — Request deletion of your data ("right to be forgotten")
• Right to Data Portability — Receive your data in a machine-readable format
• Right to Object — Object to certain types of processing
• Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent

Our legal basis for processing your data is your consent and the necessity of processing to provide our services.