Privacy Policy

Last updated: 2026-06-21

Nomi (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what personal information the Nomi app and its supporting backend service collect, why we collect it, how it is used and shared, and the rights you have over it.

This Privacy Policy applies to the Nomi mobile application and the backend services that power it (collectively, our "Service"). By creating an account or using the Service, you agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy and our Terms & Conditions. Nomi is operated from Norway and is offered to users in the European Economic Area (including Norway and the Netherlands) and elsewhere.

Definitions and key terms

To help explain things as clearly as possible, the following terms are used throughout this Privacy Policy:

• Company: when this policy mentions “Company,” “Nomi,” “we,” “us,” or “our,” it refers to Nomi, the controller responsible for your personal information under this Privacy Policy.
• Country: the country in which Nomi and its founders are based, which is Norway.
• Device: any internet-connected device, such as a phone or tablet, used to access the Service.
• Personal Data: any information that, directly or indirectly, alone or combined with other information, allows a natural person to be identified.
• Processor / Sub-processor: a third-party service that processes personal information on our behalf and under our instructions (for example, our hosting and AI providers).
• Service: the Nomi mobile application and the backend services that support it.
• You: a person who registers for or uses the Service.

What Information Do We Collect?

We only collect data needed to operate the app's features. We do not collect data for advertising, tracking, or profiling. The categories of personal information we collect are:

• Account information — your email address and your name or first name, used to create and identify your account.
• User identifier — a unique account ID assigned to you, used to associate your data with your account.
• Voice audio — when you use voice input to add items, the audio you speak is captured and processed so it can be turned into shopping-list items.
• Photos — when you scan a written or printed shopping list, the photo you capture or select is processed so the text can be read and converted into list items.
• Other user content — the content you create in the app, including shopping list items, your messages in the Ask Nomi assistant, and saved recipes and meal plans. This can include information you choose to share with the assistant about your food allergies and dietary constraints, which may be health-related; we treat such details as special-category data and use them only to tailor recipes and suggestions and to help the assistant avoid foods you cannot eat.
• Device clock and timezone — your device's local date, time, and timezone are sent with Ask Nomi requests so that date-relative answers (such as “this week”) and time-aware suggestions resolve correctly. We do not use this to track your location.
• Shared-list and collaboration data — when you share a list or join a shared list, we store who the list is shared with, each member's role, and the list's invite code. The other members of a shared list can see your display name and an account identifier (and you can see theirs), and while you are actively viewing a shared list your display name may be shown to other members in real time.
• How items were added — for each list item we record whether it was added by typing, voice, or photo, and we may store a reference (a link) to associated media. We do not keep the original audio or photo we processed for AI features.

All of the above is linked to your account identity. We do not use any of it for tracking you across other apps or websites, and we do not build advertising profiles.

The app also requests certain device permissions so optional features can work. These are used only while you use the relevant feature:

• Camera — to scan shopping lists and to scan QR codes for joining a shared list.
• Microphone — to capture voice input when you add items by speaking.
• Photo Library — to let you select an existing photo of a list to scan.
• Speech Recognition — to provide a live preview of your speech while you use voice input.

How Do We Use The Information We Collect?

We use the information we collect solely to provide and operate the app's functionality:

• To create, authenticate, and secure your account.
• To store and sync your shopping lists, saved recipes, and meal plans across your devices and with people you choose to share a list with.
• To convert your voice input into shopping-list items.
• To read text from photos of shopping lists so items can be added automatically.
• To power the Ask Nomi assistant, including answering your questions and suggesting recipes.
• To manage your subscription entitlement (whether you have premium access).
• To respond to your support requests and maintain the security and reliability of the Service.

The legal bases on which we rely to process your personal information are the performance of our contract with you (providing the app you signed up for), your consent (for example, when you grant a device permission such as camera or microphone), and our legitimate interests in keeping the Service secure and functioning correctly. Where we process any special-category data — such as information you provide about food allergies — we rely on your explicit consent, which you can withdraw at any time.

How Is Your Voice, Photo, and Chat Data Processed?

To deliver the app's AI-powered features, certain content you provide is transmitted from your device to our backend and, in turn, to the specialized service providers (sub-processors) described in the section below. Specifically:

• Voice audio is streamed to our backend and on to our AI provider (OpenAI) to be transcribed and turned into shopping-list items. The audio is processed in real time and is not retained as audio files by us after processing.
• Photos of lists are sent to our backend and on to our AI provider (OpenAI) to extract the text (optical character recognition). The image is processed to read its text and is not stored as a photo file by us after processing.
• Ask Nomi chat messages are sent to our backend and on to OpenAI to generate responses, along with the content the assistant needs from your shopping lists, saved recipes, meal plans, and remembered preferences to answer you. To power the tappable reply suggestions and conversation starters you can pick instead of typing, Ask Nomi also sends recent context to Cerebras — your recent typed messages and the assistant's replies (which can contain item names, recipe names, and other text you wrote), short summaries of what the assistant just did, and relevant saved memories such as your food preferences and allergies; this is detailed in the sub-processor section below. Your conversation history is stored so the assistant has context, and it is deleted when you delete your account.
• Item text (the names of items you add) is sent to our text AI provider (currently OpenAI) to correct spelling and assign categories.

We share with these providers only the data necessary for the relevant feature, and they act as our processors under contract. We do not sell this data or use it for advertising.

Service Providers and Sub-processors

We engage trusted third-party service providers to operate the Service. They process your information only on our behalf and under our instructions. The current sub-processors are:

• OpenAI — provides most of the app's AI features: voice transcription, optical character recognition for photos of lists, and Ask Nomi assistant responses. OpenAI is also currently our text AI provider (item-text spelling correction and categorization) and the provider that produces the short conversation summaries used to give the assistant memory. To answer your questions, Ask Nomi sends OpenAI the context it needs, which may include: your voice audio; photos of lists; your chat messages and conversation history; item text; relevant content from your shopping lists, saved recipes, and meal plans; your remembered preferences (including any food allergies or dietary constraints); your app language and chosen assistant style; the current date from your device; the web address of a recipe page you are viewing in the app; and the results of any web searches the assistant runs. To support and protect these requests, we also send OpenAI a conversation identifier (so repeated prompt content can be cached) and a pseudonymous identifier derived from your account ID that OpenAI uses for abuse monitoring; we do not send your raw account ID. OpenAI processes this data to return the result and does not use it to train its models for our account.
• Cerebras — generates Ask Nomi's tappable reply suggestions and the conversation starters shown before you type. To make the suggestions relevant, it receives the context the assistant has for your session, which can include: your recent chat messages and the assistant's replies (these contain whatever you typed, which may include item names, recipe names, and other free text); short summaries of what the assistant just did for you (for example a recipe it showed, a web search it ran, or a shopping-list or meal-plan change), which may include recipe titles, search terms, dates, and item or meal counts; relevant saved memories, such as your remembered food preferences, saved recipes, and brief summaries or notes Nomi has kept from past conversations — and any remembered food allergies or critical dietary constraints, which are always included so suggestions can avoid foods you cannot eat; and, for the conversation starters shown before you type, your device's local date and time, whether you currently have a list or meal plan in view (and how many items remain or days are planned), and the domain of a recipe website you are viewing (for example “example.com”). Your app language is included with both, and your chosen assistant style is included with the reply suggestions. For the reply suggestions, full web addresses and internal identifiers are stripped from the context before it is sent. The conversation starters are assembled from a few summary fields derived from your data — the counts, dates, and the recipe-site domain noted above — rather than from the full text of your messages, and that recipe-site domain is included as-is so a starter can reference where a recipe came from. Cerebras processes this to return the suggestions and does not use it to train its models for our account.
• Supabase — provides authentication (including email/password and Sign in with Apple, and the related sign-up and account emails), our PostgreSQL database, and realtime sync. Supabase stores your account information (email, name, user ID), your shopping lists, saved recipes and meal plans, and your Ask Nomi conversation history.
• Railway — hosts our backend application server, which processes requests between the app and our other providers.
• Apple — processes payments for in-app subscriptions through the App Store using StoreKit. Apple handles your billing details; we never receive or store your payment card information. We store your subscription/entitlement status (whether your subscription is active), and we confirm your subscription with Apple using the purchase's transaction identifier — not your name or card details.
• Brave Search — when the Ask Nomi assistant searches the web for recipes or related information, the search query is sent to Brave Search to find results. These queries can include words you or the assistant chose, which may reflect dietary or allergy context; we remove emails, phone numbers, and your list and account identifiers before searching. Brave is an independent search provider and handles the query under its own privacy terms.

Account and notification emails are currently sent through Supabase (described above). We may in the future also engage additional service providers to deliver transactional emails or to monitor app stability and diagnose errors and performance issues. Where any such provider processes personal information, it does so only on our behalf and under our instructions, and we limit the data shared to what is necessary for the purpose.

We may also disclose information where required to comply with applicable law, a lawful request by public authorities, or legal process, or where necessary to protect the rights, property, or safety of Nomi, our users, or the public.

Do We Sell Your Personal Information?

No. We do not sell your personal information, and we do not share it with data brokers, advertisers, or marketing partners. We do not use advertising networks, and we do not use any tracking or analytics technology that follows you across other apps or websites.

How Long Do We Keep Your Information?

We keep your personal information only for as long as we need it to provide the Service to you and to fulfil the purposes described in this policy, or as required to comply with our legal obligations. Your account information and content (lists, recipes, meal plans, and Ask Nomi conversation history) are retained while your account is active. Voice audio and photos used for AI processing are processed transiently and are not retained as media files by us after processing. When you delete your account, your data is removed as described below.

How Do We Protect Your Information?

We use reasonable technical and organizational measures to protect your personal information, including encryption of data in transit (HTTPS/TLS), authenticated access controls, and reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Could My Information Be Transferred to Other Countries?

Nomi is based in Norway. Some of our service providers operate infrastructure outside the European Economic Area, including in the United States. As a result, your personal information may be transferred to, stored in, and processed in countries whose data-protection laws differ from those of your country. Where we transfer personal data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, where applicable.

Your Privacy Rights

Subject to applicable law, you have the right to access the personal information we hold about you, to request correction of inaccurate information, to request erasure of your information, to restrict or object to certain processing, and to request a copy of your information in a portable format. Where processing is based on consent, you may withdraw that consent at any time (for example, by revoking a device permission in your phone's settings).

You can exercise many of these rights directly in the app, and you can contact us about any of them using the details in the "Contact Us" section. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority (in Norway, Datatilsynet).

How to Delete Your Account and Data

You can delete your account at any time from within the app, in Settings → Delete Account. Deleting your account permanently removes your account information and content from our systems, including your shopping lists and list items, shared-list memberships, saved recipes and meal plans, your Ask Nomi conversation history, and your subscription records, and it also removes your authentication record. Some information may persist briefly in routine backups before being overwritten, and we may retain limited records where required to comply with legal obligations.

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what categories of personal information we collect and how we use them, the right to request access to and deletion of your personal information, and the right not to be discriminated against for exercising your rights. The categories of personal information we collect, the purposes for collecting them, and the parties with whom we share them are described above.

We do not sell the personal information of our users, and we do not share it for cross-context behavioral advertising. To exercise your rights, please contact us using the details below.

Children's Privacy

The Service is not directed at children. You must be at least 16 years old to create an account and use Nomi. We do not knowingly collect personal information from children under this age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

Recipe Websites and Other Third-Party Links

The Ask Nomi assistant can find recipes on the web, and the app can open third-party recipe websites in an in-app browser so you can view the original source. To show you recipe details, Nomi may also fetch pages from these recipe websites for you; these requests identify only a generic “NomiBot” service and do not include your name, account, or other personal information. These websites are operated by third parties and are not controlled by Nomi. Your interaction with any third-party website is governed by that website's own privacy policy and terms, not this Privacy Policy.

Changes To Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service or for legal reasons. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised Privacy Policy. If you do not agree to an update, you can delete your account.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Email: nomi-support@dalecompany.io