Your data, plainly explained

Last updated 1 August 2026. This policy explains what NomNum collects, why, how long it is kept, and the choices you have. We wrote it to be read, not to be survived.

Who we are

NomNum is an educational Indian meal-planning tool. For the purposes of UK and EU data protection law we are the data controller for the account data described below. You can reach us for any privacy request at the contact address in the app's Account screen.

What we collect, and why

• Account basics: your email address (to sign in and to email your plans), and optionally your name and phone number if you choose to add them. Legal basis: performance of the service you asked for, and your consent for anything optional.
• Bio and goals: weight, height, age, sex, activity level and your goal, used only to compute your calorie, protein, hydration and sleep targets. The measurements themselves are never shared; if you use the optional AI features, only the daily calorie and protein targets computed from them are sent (see below).
• Health information (sensitive): any dietary conditions, allergens, or clinician-care flags you choose to enter, used only to filter dishes and shape your plan. This is special-category / sensitive personal data under the UK GDPR, EU GDPR (Article 9) and India's DPDP Act. We collect it only with your explicit, separate consent, which you can withdraw at any time by clearing those answers or deleting your account.
• Your plan work: the dishes, plates, custom recipes and plans you build, so you can return to them.
• Basic technical data: standard security and delivery information handled by our hosting and email providers. We do not run advertising trackers.
• Optional AI features: when you ask the AI to suggest a meal or plan, we send your request, your daily calorie and protein targets, your diet and cuisine preference, and a list of eligible dishes with the app’s own calorie and protein figures to our AI provider, so its suggestions can fit your day. Your health-lens conditions and allergens are not sent: the dish and ingredient lists are filtered on your device first, so the AI only ever sees foods already suitable for you. Dish nutrition is always computed by the app from its cited ingredient data, never taken from the AI, with one exception: an ingredient we cannot match at all may come back with a clearly labelled AI estimate, which you review, can verify against a food database, and must confirm before it is saved. If you import a recipe from a photo, that photo is sent for transcription only.

We do not require, and the app does not include a workflow to store, uploaded medical documents or doctors' letters. Where a clinician sign-off is needed for a higher-risk goal or condition, the app records only your confirmation that an appropriately qualified professional approved your use, not a copy of any medical record.

What we never do

• We never sell your personal data, and we never sell or share your health information for advertising.
• We do not use your data to make automated decisions with legal or similarly significant effects on you.
• We do not claim to be a medical provider. The app is educational and is not a substitute for professional care.

How long we keep it

Guest data lives only in your browser until you clear it. Account data is kept for as long as your account is active. When you delete your account, your synced data is removed from our records. You can also ask us to delete your data without closing your account.

Your rights

Depending on where you live, you have rights to access, correct, delete, restrict, or port your data, to withdraw consent, and to object to certain processing. The quickest route for most of these is built into the app: edit anything in ⚙️ Account, or use Delete my account & data to erase it. You can also contact us to exercise any right, and you may complain to your local regulator (for example the UK ICO, an EU supervisory authority, or the Data Protection Board of India).

Security

Account data is transmitted over encrypted connections and held by reputable hosting and authentication providers. No system is perfectly secure, but we apply safeguards appropriate to the sensitivity of the data, and where the law requires it we will notify you and the relevant regulator of a qualifying breach without undue delay.

Children

NomNum is intended for adults aged 18 and over and is not directed at children.

Changes

If we make material changes we will update the date above and, where appropriate, ask you to review the change in the app.

Read the Terms of Use →