Privacy

Nourmio Privacy Policy

Last updated: 2026-11-08

This Privacy Policy explains how Nourmio collects, uses, and protects information when you use the app and related services.

Information We Process

• Device-generated user identifiers used to associate settings and food logs with your app session.
• If you sign in, the stable identifier issued by Apple or Google, used to restore the same diary on another device, and the verified email address when the provider supplies one, displayed in your account settings. Apple may supply a private relay address. Nourmio does not request access to Gmail or your other Google services.
• A protected device credential and a server-side counter used to enforce the five-attempt guest recognition trial.
• Store subscription identifiers, products, verified test status, renewal and expiry state, verified renewal price and currency when supplied by the store, generated account-link identifiers, encrypted Google Play purchase tokens, and recognition operation records used to apply guest and Free allowances, verify Plus access, measure recognition usage and prevent duplicate processing. Plus, including its introductory trial, does not have a monthly recognition allowance. Nourmio does not receive your payment card details.
• Food log data, including product names, portion sizes, calorie and sugar values, timestamps, tracking focus, goals, settings, and the days you confirm as complete. Day completion is saved with your diary account and is cleared when that day's food entries change.
• Images you submit when you use photo recognition features.
• Your optional account avatar: the built-in avatar you choose or a profile photo you upload.
• Audio you submit when you use voice search or transcription features.
• Meal descriptions, voice transcripts and product search queries you submit for recognition.
• Aggregate daily counts of landing-page views, App Store link clicks, app opens, focus choices, onboarding completion, plan-page views and purchase requests. These counts do not contain marketing visitor or account identifiers.
• Technical data such as API requests, error logs, and service diagnostics needed to operate and secure the service.

Reminders

Evening check-ins and weekly review reminders are optional local notifications. Their time, pause and enabled choices are stored on your device, separately for each diary account. They do not register a push token or send notification preferences or diary details to a notification delivery provider. Lock-screen messages contain no food names, calorie or sugar totals. Your device schedules up to 28 days ahead and opening Nourmio refreshes that schedule. Device settings can delay or silence notifications. Updates made on another device affect local reminders after this device opens and synchronizes. You can disable reminders in Nourmio or your device settings.

How We Use Information

• To provide barcode lookup, image recognition, voice transcription, and search results.
• To store your settings and food log history and calculate daily and weekly summaries from your entries.
• To verify and restore Apple and Google Play subscriptions, process renewal or refund notifications, apply guest and Free allowances, and measure recognition usage.
• To maintain, troubleshoot, secure, and improve the app and backend services.

Third-Party Services

Our own server stores marketing counts grouped by UTC day, event, a broad traffic-source category, and a selected focus or billing term when relevant. These first-party counters do not use marketing cookies, advertising IDs, fingerprinting or a third-party analytics SDK. We do not store full referral URLs or search queries in these counters, and cannot connect an individual website visit to an App Store installation or purchase. Test events are separated from operational counts. Counts measure events, not unique people. Separately, aggregate subscription reports use existing store-verified Apple and Google Play subscription records.

Cloud photo recognition sends product photos through RouterAI to Google Gemini, or to OpenAI, to identify foods and estimate portions, calories and sugar. Meal descriptions and cloud voice recordings are sent to OpenAI. Account email, account avatars and the rest of your diary are not included in these recognition requests. Apple or the Android device's speech recognition provider may process speech according to the device's available recognition mode and service settings. Barcode and product searches send the barcode or food query to Open Food Facts. Apple and Google process sign-in information to verify your account.

Optional Website Analytics

On sugarwise.monster, Google Analytics 4 loads only after you choose Allow analytics. It uses analytics cookies to measure page visits and clicks on links to public pages and the App Store. Our tracking code does not send food entries, calculator inputs, account emails or app user identifiers to Google Analytics. We remove query strings and URL fragments from page addresses sent to it and send only the referring website's origin. Google also processes technical browser and device information. Advertising features are disabled.

You can decline optional analytics and continue using the website. Select Privacy choices in the footer to change your decision. Withdrawing consent stops further Google Analytics tracking and removes its accessible analytics cookies on this website. Your choice is stored in your browser's local storage. Our separate first-party aggregate event counters continue to operate without Google Analytics. See Google's Privacy Policy.

Data Storage

Nourmio currently stores application data on its production backend. Some information may be stored in a database to support app settings, saved products and history. Nourmio does not store the raw images or audio submitted for recognition. AI and food-data providers process the content needed for the requested feature under their own terms. OpenAI Responses storage is disabled in the new release, but this does not mean Zero Data Retention: OpenAI may retain abuse-monitoring data under its service policy. See OpenAI's data controls. Photo requests are also subject to RouterAI's privacy policy and Google Gemini API terms. Apple and Google sign-in do not receive your diary contents.

To recover a response lost during a network interruption, the service temporarily stores encrypted recognition results, including voice transcripts, for a 24-hour retry window. Expired results are removed during service cleanup. Short-lived encrypted sign-in results support recovery of interrupted account transitions. Apple authorization tokens are encrypted on the server so that access can be revoked when you delete your account. Provider email addresses are encrypted in the account record and removed when the account is deleted. Email may also appear in encrypted sign-in recovery results. These have a ten-minute recovery window, and expired results are removed during service cleanup.

Apple and Google Play process subscription payments. Nourmio exchanges subscription identifiers, an opaque account-link identifier and, for Google Play, purchase tokens needed to verify access with the relevant store. Google purchase tokens are encrypted on our server. Recognition counters and minimal operation records prevent the same action from using your allowance twice. After account deletion, minimal subscription identifiers and the former account-link token remain. A keyed, non-readable fingerprint of the former account's Apple or Google login lets us check subscription ownership if you sign in again after deletion and request restoration. Recovery requires verification with the store and cannot transfer a subscription from an active account. Retained subscription records do not include your diary, email address or the raw sign-in identifier. Deleting a diary remains permanent.

If you upload an account avatar, Nourmio stores a resized, encrypted copy of that photo on its backend. The service removes image metadata, including location metadata, and does not send your avatar to AI providers. The stored avatar is available to your signed-in account. Replacing or removing it deletes the previous copy from the active account record. Deleting your account also deletes its avatar. Signing out keeps it available when you sign in again.

Your Choices

• The updated cloud AI permission names RouterAI, Google Gemini and OpenAI. OpenAI-only permission does not authorize photo requests to RouterAI. Your choice is saved separately for each account on this device. You can turn cloud AI off in Settings. This stops future cloud requests and does not recall content already sent. Older app versions must be updated to use RouterAI photo recognition.
• You can choose manual entry or barcode scanning instead of image recognition.
• You can choose text input instead of voice features.
• You can use a built-in avatar, upload a photo or remove your avatar in account settings.
• You may contact us if you have a question about your information or want help with a privacy-related request.
• You can delete a signed-in account or a guest diary in Settings. This deletes server-side diary entries, settings and saved products, and removes access from your device after the server confirms deletion. Account deletion includes revoking Apple authorization when applicable.
• Deleting your account does not cancel a store subscription. Manage it separately in Apple or Google Play, depending on where you purchased it. To recover eligible access after deletion, sign in with the same Apple or Google login and tap Restore purchases. Contact support if recovery evidence is unavailable. You can also request account deletion without the app.
• Signing out or starting over on one device does not delete server-side records. The technical guest-trial counter remains after reset or deletion, without diary contents or provider profile data, so that these actions do not replenish the trial.

Children's Privacy

Nourmio is intended for adults aged 18 and over. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will publish the updated version on this page.

Contact

For privacy questions or support requests, contact: info@cimmetria.com