Privacy Policy

Nomzy · Last updated: July 23, 2026

Nomzy estimates the calories in your meals from a photo, a text description, or a barcode. This policy explains exactly what happens to your data. There are no accounts and no sign-ins.

What you share, and how it's processed

When you scan a meal, the photo — downscaled on your device first — or the text you type is sent over an encrypted connection to our backend, which forwards it to Google's Gemini API to produce the calorie and nutrition estimate. The same applies to corrections you ask Nomzy to re-estimate. This processing is transient: we use it only to produce your estimate and we do not store your meal photos, descriptions, or results on our servers, nor do we use them to train any models of our own. Google processes the request under its own API terms and privacy policy.

When you scan a barcode, your device queries the public Open Food Facts database directly with the barcode number to fetch the product's label data. No meal history or personal information is included in that lookup.

Where your food log lives

Your meals, corrections, goals, water, and weight entries are stored on your device. If you are signed into iCloud, they sync privately through your own iCloud database, protected by your Apple ID — we have no access to it and keep no copy of it. Deleting the app removes the local data; you can also remove the iCloud copy from your Apple ID storage settings.

Apple Health

If you choose to connect Apple Health, Nomzy writes your logged meals and weight to Health and reads your steps, active energy, and weight from it. Health data is processed entirely on your device — it is never sent to our servers or to any third party, and we never use it for marketing or analytics.

Keeping the service honest (App Attest)

To stop bots and abuse of the AI backend, Nomzy uses Apple's App Attest to prove that requests come from a genuine, unmodified copy of the app on a real device. This is a cryptographic check tied to your device — it is not a personal identifier and is not used to track you. We keep a per-device key and daily scan counts purely to enforce the free tier and fair-use rate limits; these contain no meal content.

Anonymized usage analytics

We use TelemetryDeck to understand how the app is used in aggregate (for example, "how many scans happened today"). TelemetryDeck is a privacy-first service: data is anonymized before it reaches us, it cannot be used to identify you, and it is never sold or shared. Nomzy does not use advertising identifiers (IDFA) and does not track you across apps or websites.

Subscriptions

Payments are processed entirely by Apple. To manage subscription status we use RevenueCat, which receives an anonymous identifier and your purchase receipt — never your name, email, or Apple ID. We do not see your payment details.

What we never do

Your rights

Your food log lives on your device and in your own private iCloud, so you stay in control: deleting the app removes the local copy. If you have questions about this policy or your rights under GDPR, KVKK, or similar laws, contact us and we will help.

Changes

If this policy changes, the new version will be posted here with an updated date. Material changes will be noted in the app's release notes.

Contact

Nomzy is operated under the trade name "Ferah Labs" by Mehmet Görkem Çakıcı, an individual based in Turkey.
Email: ferahlabs@gmail.com