nom
Legal
Privacy notice
Your logs stay on your phone. Nomeriu only receives what you choose to send: an account if you make one, a review, a link you share, a photo or text for AI help once you allow it, and messages. Screen counts carry no personal data. We sell nothing and show no adverts.
Who is responsible for your data?
Nomeriu is the data controller. Email [email protected] or use the contact form for anything about your data.
What stays on your phone?
Meals, water, sleep, mood, symptoms, medicines, reminders, notes, tasks, voice notes and settings are kept in the app storage on your device. They are not synced to our server. Voice notes and dictation stay on the device; dictation uses your phone or browser speech service, not ours. Clearing the app or the browser data removes them, so use Export in the app to keep a copy.
What reaches our server, and why?
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Account, only if you make one: email, optional first name, a password hash or passkey, sign in sessions, your age confirmation (16 or over) | To sign you in and keep Nomeriu Plus on all your devices | Performing our contract with you | Until you delete the account, which deletes it at once |
| Nomeriu Plus: plan, store or web source, renewal dates, trial use and credits | To give you what you paid for | Contract, and legal duties for tax records | While the account exists; payment records as long as tax law requires |
| Recipe reviews: stars, text and the name you chose; reports and blocks | To show reviews to others and keep them safe. A first review is checked by staff before it shows | Legitimate interests (a safe, helpful community) | Until you or our staff remove it, or the account is deleted |
| Recipes you share with the community | To check and publish them | Consent, given when you share | Until removed or the account is deleted |
| Practitioner links: the summary you choose to share | So the person you send it to can read it | Your explicit consent, asked each time | 7 or 30 days, as you pick, then deleted. You can revoke it sooner |
| Carer links: an encrypted slice of the logs you pick | So your carer can see it. It is encrypted on your phone; our server cannot read it | Your explicit consent | Up to 30 days, then deleted. You can revoke it sooner |
| AI help, once you allow it in the app: the photo or text for that request | Reading receipts, lists and recipe pages, meal estimates, swaps and imports | Your consent, which you can turn off in the app (You, Privacy and data) | Not stored. Only a count of use and cost, with no content, is kept for budgets |
| Contact messages: name, email, optional phone, your message, how you found us, your country and device type | To reply to you, and to understand how people find us | Legitimate interests (answering your message) | 24 months after our last exchange |
| Weather: a rounded area | The weather on your day card | Legitimate interests | Cached for a few hours, not linked to you |
| Error reports: error name, message and page, with no id | To fix bugs | Legitimate interests | 30 days |
| Screen counts and fixed event names: which screens open and where people stop, as daily totals with no id. You can turn this off in the app, and Global Privacy Control or Do Not Track are honoured | To make the app calmer and easier to use | Legitimate interests | 13 months, no personal data |
| Visit counts on this site: page, referring site type, campaign tags | To see which pages help people | Legitimate interests | Visit counts are kept for 25 months, then deleted. They contain no personal data. |
| Invite a friend: your code and the friend account it brought, while signed in | To give you both the free days, once per friend | Contract (the invite offer) | Until either account is deleted |
How does the newsletter work?
Nomeriu monthly is one email a month with a recipe, a calm tip and what is new. It is only sent if you tick the box and then confirm through the link in your inbox. Nothing is sent until you do.
AuraicPulse holds your email address so it can send the confirmation and each issue. Nomeriu itself keeps only a one-way code (hash) of your address and whether you are subscribed, never the address.
Every email has a one-click unsubscribe link, and you can also ask through the contact form. You can unsubscribe at any time.
How do the visit counts work without cookies?
When a page loads, your browser sends the page address and where you came from. Our server turns a few request details into a code using a secret that changes every day, then throws the details away.
We never store your IP address, set a cookie or keep an id that follows you. Because the secret changes daily, the code cannot be reversed or linked from one day to the next.
Your browser keeps a small note of how you first found the site (for example "search" or "social") in local storage. It is sent to us only if you send a message, and you can clear it at any time in your browser settings.
Who else handles your data?
These companies process data for us under data processing terms. None of them may use it for their own purposes. Some are outside the EU and UK; transfers use the safeguards the GDPR allows, such as standard contractual clauses.
| Processor | What for | What they see |
|---|---|---|
| Cloudflare | Hosting, the database and file storage for the site and the app (Pages, D1, R2) | Every request passes through it. Data is stored in the EU region |
| Cloudflare Turnstile | Checking that a contact or sign up form was sent by a person, not a bot | Browser signals for that check. No cookie for tracking |
| AI providers: Google (Gemini), Groq, Cerebras and Anthropic | Reading a receipt, list or recipe photo, estimating a meal, suggesting a swap, and reading an imported recipe. Only after you allow AI help in the app | The photo or text for that one request. They process it only to answer and do not use it to train their models. Nomeriu does not keep it |
| Stripe | Taking payment for Nomeriu Plus on the website | Your email, payment details (held by Stripe, never by Nomeriu) and your plan |
| RevenueCat | Checking Nomeriu Plus bought in the App Store or Google Play | Your account id and your store purchase record |
| Apple and Google | Billing for subscriptions bought in their stores | What their own store terms say. Nomeriu never sees your card |
| Open Food Facts | Product details when you scan a barcode or search for a food | The barcode or search words only, sent by our server, never who you are |
| MET Norway | The weather on your day card | A rounded area, sent by our server, never who you are |
| Resend | Sending account emails (sign in codes, password reset) | Your email address and the email itself |
| AuraicPulse | Our contact inbox and email forwarding (Pulse), used to reply to messages and help requests, and to send the newsletter | The details you send us, and your email if you subscribe |
How do you delete your data?
In the app: You, Account, Delete account. On the web: delete your account. This deletes your account, reviews, shared links and Plus record from our server at once. A website subscription is cancelled for you. A subscription bought in the App Store or Google Play is billed by Apple or Google, so cancel it there first. Logs on your phone are removed when you clear the app.
What are your rights?
Under the GDPR you can ask to see, correct, delete or move your data, object to how we use it, restrict it, or withdraw consent at any time. Email [email protected]. We answer within one month.
You can also complain to your data protection authority: the Data Protection Commission in Ireland (dataprotection.ie), the ICO in the UK (ico.org.uk), or the authority where you live in the EU.
Nomeriu is not for children under 16 and does not knowingly hold their data. It shares general food information and is not a medical device.
Nomeriu can be used anywhere in the world. This notice is written for the EU and UK rules above. If you live elsewhere you can still ask for any of the above, and your local law may give you other rights too.
Last updated