Privacy Policy

Effective 26 October 2026

1. Who we are

This policy covers the Nomi iPhone app (on the App Store as “Nomi Crew: AI Calorie Tracker”) and this website. Nomi is run by the developer named on its App Store page, based in the Philippines. In this policy, “Nomi”, “we” and “us” mean that developer.

For anything about privacy, including requests under the Philippine Data Privacy Act, write to admin@nomicrew.xyz.

2. Your account

Nomi works without signing up. The first time you open the app, it creates an anonymous account on our server, identified by a random ID. We don’t ask for your name, email address or phone number. Your sign-in token is kept in the iOS Keychain on your phone.

Signing in is optional. If you choose Sign in with Apple (to keep your crew when you change phones), your anonymous account becomes your Apple-linked account, or you switch to the one already linked to your Apple ID. Our server then stores your Apple account ID, the email address Apple gives us (this can be Apple’s private relay address, if you chose to hide your email) and, only the first time and only if you share it, your name. We use them only to recognise your account. They are not sent to AI providers, analytics or advertisers. If you don’t sign in, your account is tied to the app on your iPhone.

3. What stays on your phone only

The app keeps your log in a database on your iPhone, so it works offline. These things never leave your phone:

• Your answers to the fasting safety check (for example, pregnancy or diabetes). Only the result, whether fasting is allowed for you, is backed up.
• Dish photos you add to a recipe. They are saved in the app’s folder on your phone; only the file name is backed up.
• Apple Health sync bookmarks, and a few app settings such as which chat you last had open.

Meal photos, nutrition label photos and ingredient photos are not kept anywhere. The app shrinks the photo, sends it once for the AI to read (see section 5) and then discards it.

4. What is backed up to our server

The app copies your log to our server, run on Convex, in the United States. This lets the crew work with your data and lets our server run the weekly pattern review described in section 5. What is copied:

• Profile: age, sex (if you give it), height, weight, goal weight, goal and pace, activity level, workouts per week, calorie and nutrient targets, units, time zone, and the dates you accepted the health notice and allowed AI.
• Food: meals and the foods in them with their nutrition, what you typed to log them, the AI’s estimate, your edits, favourite foods, fasts and your fasting plan.
• Training: workouts, sets, routines, steps and weigh-ins, including any imported from Apple Health.
• Recipes: recipes, ingredients and the nutrition labels saved to your pantry.
• Chats: your messages with the bots and their replies.
• Account (only if you sign in with Apple): your Apple account ID, email address and name, as described in section 2.
• The crew’s memory: what the crew remembers about you, notes the bots leave each other, which bots are on, your reminder settings, and a history of changes the bots made (so you can undo them).

Our server also keeps some records of its own:

• AI request records: for each AI request, its result (for example the food names and estimates), so a retry never runs or counts twice. These are deleted after about 7 days.
• AI usage records: which feature was used, which model answered, how long it took, how many tokens it used and what it cost. These contain none of your text or photos. We use them for the daily AI allowance and to watch our costs.
• Your daily AI allowance and, once you subscribe, your subscription status (see section 8).

5. AI

Nomi’s bots run on AI models. Our server makes every AI request; the app never talks to an AI provider directly, and no AI key is stored in the app.

What is sent

• What you type or snap for a bot to handle: meals, chat messages, workout notes, recipes, meal photos with any caption, nutrition label photos and ingredient photos.
• Voice recordings, when you log by voice and your iPhone can’t turn your speech into text on the device: the short recording is sent to be written down (see below).
• The context the crew needs to answer well: for example your profile and targets, today’s meals and workouts, a summary of recent days, your recent messages, and what the crew remembers about you.

Requests do not include your name, email or phone number, and they don’t include your account ID.

Who receives it

We use Surplus Intelligence, an AI marketplace. Surplus routes each request to a seller who runs the model, and from there to the model’s provider. The models we use today include Google Gemini, OpenAI GPT and DeepSeek models. We block the sellers that Surplus marks as untrusted.

Surplus’s privacy policy (updated 15 September 2026) says it does not keep the content of chat requests by default and does not use it for model training, advertising or profiling. Surplus also says it does not control how sellers and model providers handle, keep or train on requests. Neither do we, so we can’t promise that a seller or provider won’t log a request under its own policy. Please don’t put anything in a message that you wouldn’t want an AI provider to see.

Voice recordings go to OpenAI (United States) for speech-to-text, directly from our server and not through Surplus. Our server does not store or log the recording. OpenAI handles it under its own terms and privacy policy, and we can’t promise how long it keeps API requests. The words it returns are then handled like anything you type. When your iPhone can write your speech down on the device, nothing is sent.

What we do with it

• We send your data to AI providers only to answer you and run the features you use. Never for ads, and never sold.
• Our server does not store your photos. Each photo is passed to the model for that one request and is not logged.
• AI answers are estimates and can be wrong. You can check and edit every logged item.

Weekly pattern review

Once a week, for accounts with at least 14 days of logged meals, our server sends a summary of your meals from about the last four months (food names, meal times, calories and protein) to an AI model to spot habits. The habits it finds are saved as things the crew remembers, and fade after 21 days unless the next review sees them again. You can see, edit and delete them in Settings → What Nomi knows about you.

Your choice

The app asks before its first AI request. You can turn AI off or back on any time in Settings → Privacy choices. While it is off, nothing new is sent to AI providers, and features that need AI won’t work. Turning AI off doesn’t stop your log from being backed up to our server.

6. Apple Health

Apple Health is optional, and Nomi only connects to it if you allow it in the iOS permission screen.

• Nomi reads: workouts (including from Apple Watch), steps, active energy, walking, running and cycling distance, and body weight.
• Nomi writes: the nutrition of your meals (energy, protein, carbohydrates, fat, sugar, fibre and sodium), your weigh-ins, and Rep workouts with their active energy.

What Nomi reads becomes part of your Nomi log. Like the rest of the log, it is backed up to our server (section 4) and may be part of the context sent to AI to answer you (section 5).

We never use Health data for advertising or marketing, never sell it, and never share it with data brokers. Health data and values are never sent to our analytics tool; at most it receives a count, such as how many workouts a sync imported. Nomi does not store Health data in iCloud.

You can change what Nomi may read or write in the Health app (tap your profile picture, then Apps, then Nomi) and see the sync in Settings → Apple Health.

7. Analytics

We use PostHog (United States) to learn which parts of the app are used and where things break. The app sends events such as “a screen was viewed”, “a bot was opened”, “a meal was logged” (with how it was logged, how many items, and how long the AI took), “an AI request failed” (with an error code) and “a sync finished” (with a row count).

• Events never contain food names, anything you type or search, messages, photos, weights, calories or Apple Health values. The app only accepts properties from a fixed list of choices, numbers and yes/no values, and drops anything else before it is sent.
• Events carry a random ID that PostHog’s software creates on your phone. PostHog does not receive your Nomi account ID. If you subscribe, we pass this random ID to RevenueCat (section 8) so subscription events can be matched to app usage.
• PostHog also receives basic device details (such as the iPhone model, iOS version, app version and language) and, as with any internet connection, your IP address. The app turns off PostHog’s location lookup, session recording and automatic error capture.

8. Subscriptions

Crew Pass is sold through the App Store. Apple handles payment, and we never see your card or payment details.

We use RevenueCat to manage subscriptions. When you buy, restore or renew, RevenueCat receives your purchase records (which plan, when it started or renews, trial status, cancellations and refunds), your Nomi account ID, the random analytics ID from section 7, and basic device and app details. RevenueCat tells our server whether your Crew Pass is active, and we store that status.

9. Notifications, Live Activities, camera and app updates

• Reminders are local notifications. Your phone schedules them from your log and settings; we don’t send push notifications from our server. You can turn them off in iOS Settings.
• Live Activities (a running workout or a fast on the Lock Screen and Dynamic Island) are started and updated by the app on your phone. Anyone who can see your Lock Screen can see them.
• Camera and photos: used only when you snap or pick a meal, label, ingredient or dish photo.
• Microphone and speech: used only while you log a meal or recipe by voice. Your iPhone turns your speech into text on the device when it can. If it can’t, the recording is sent to be written down, as described in section 5.
• App updates: the app checks Expo’s update service for small updates when it starts. Expo receives your IP address, the app version, the platform and a random ID for this install.

10. Who we share with

We share data only with the services that run Nomi for us:

We don’t sell your data, show ads, use advertising IDs or track you across other companies’ apps and websites. We may disclose data if the law requires it, or to a buyer of Nomi if it is ever sold, under this policy.

11. Where data is processed

Our server, PostHog and RevenueCat process data in the United States. AI requests may be processed in the United States and other countries where sellers and model providers run. When you use Nomi, your data is transferred outside the Philippines to these places, over encrypted connections.

12. How long we keep it

• On your phone: until you delete it in the app or delete the app.
• On our server: your backed-up log is kept until you delete your account. When you delete a single item in the app, our copy is marked as deleted; its contents are erased when you delete your account.
• AI request records: about 7 days.
• Learned habits from the weekly review: 21 days unless seen again.
• AI usage records and subscription status: until you delete your account.
• Analytics events: kept by PostHog under our account settings. PostHog does not hold your Nomi account ID, so we can’t pick out yours.

Deleting the app removes the data on your phone but not the copy on our server. Delete your account first (section 13).

13. Export and deletion

• Delete one thing: edit or delete any meal, workout, recipe or remembered fact in the app.
• Delete your account: Settings → Delete account erases your data on your phone and on our server, including the AI usage records and subscription status. If you signed in with Apple, it also revokes the Apple sign-in link. It can’t be undone.
• Export: Settings → Export my data gives you a copy of your log.

Deleting your account doesn’t cancel Crew Pass. Cancel it in iOS Settings first (see Support).

14. Your rights

Everyone

You can ask us to tell you what we hold about you, give you a copy, correct it, delete it, or stop processing it. Write to admin@nomicrew.xyz. We answer within 30 days. If you haven’t signed in with Apple, we may ask you for details from the app so we can find your account.

Philippines

Under the Data Privacy Act of 2012 (Republic Act 10173), you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, and to damages. We process your health and other data with your consent, which you give when you accept the health notice and allow AI, and you can withdraw it at any time (sections 5 and 13). If you think we have mishandled your data, you can complain to the National Privacy Commission (privacy.gov.ph). You can reach our data protection contact at admin@nomicrew.xyz.

United States

Depending on your state, you may have the right to know, access, correct and delete your personal data, including health data, and to withdraw consent. We don’t sell personal data or share it for targeted advertising, so there is nothing to opt out of. We won’t treat you differently for using these rights. To use them, email us.

15. Children and teens

Nomi is for people aged 13 and over. We don’t knowingly collect data from children under 13; if you think a child under 13 uses Nomi, email us and we’ll delete the account. People aged 13 to 17 get a maintenance plan only, with no weight-loss goal, and fasting is never offered to anyone under 18.

16. Security

Data travels between the app, our server and our services over encrypted connections (HTTPS). Your sign-in token is stored in the iOS Keychain, and AI and server keys stay on our server. No system is perfectly secure, so we can’t guarantee security, but we will tell you and the authorities about a breach that affects you as the law requires.

17. This website

nomicrew.xyz has no cookies, no analytics and no trackers, and its fonts are served from this site. Our web host may keep standard server logs, such as IP addresses and pages requested, for security.

18. Changes and contact

If we change this policy, we’ll update the date at the top. If a change affects what is sent or who receives it, the app will tell you and ask again where needed.

Questions: admin@nomicrew.xyz.