Data controller

Nomi Family AB, reg. no 559581-0820, Enstigen 3, 182 34 Danderyd, Sweden. Questions about your data: hello@nomi.family.

What we process

When you create an account

• Name, email address and language — provided by the sign-in service you choose (Google, Apple, Microsoft or Yahoo). We store no passwords.
• The time of your consent to emails from us.

When you use nomi

• Your household: household type, number of adults and children, and the children's age groups.
• Your food profile: allergies and dietary restrictions, likes and dislikes, and any free text you write about your family and your food.
• Your activity: meal plans, cooked, saved and imported recipes, ratings and shopping lists.
• Your conversations with nomi in the chat.

Automatically

• Server logs with IP address, for operations and security.

Why, and on what legal basis

• Delivering the service: plans, suggestions, shopping lists and chat — contract (art. 6.1b).
• Adapting recipes to allergies and diets — explicit consent (art. 9.2a).
• Emailing you about launch and news — consent (art. 6.1a).
• Operations and security (server logs) — legitimate interest (art. 6.1f).

Allergies are health data

Allergies and dietary restrictions count as health data. Entering them is your choice — doing so is your explicit consent — and they are used solely to pick and adapt recipes for your family. You can remove them at any time in settings.

Children's data

It is always the adult account holder who enters information about the household's children, and we only ask for how many and their age group. Children have no accounts of their own.

Cookies and local storage

We use three cookies, all necessary for the service to work. There are no consent-requiring cookies — no analytics, no marketing, no third parties.

• nomi — keeps you signed in. 7 days.
• lang — remembers your language choice. 1 year.
• sign-in cookie — temporary during sign-in itself, deleted right after.

The browser's local storage is used for two things that never leave your device: rotating the greeting phrases and keeping your place in a recipe in cooking mode.

Who processes data for us

• Hetzner (Finland, EU) — all hosting and storage.
• OpenAI (USA) — receives chat messages and profile text to produce suggestions. The transfer is protected by the EU Commission's standard contractual clauses / Data Privacy Framework.
• Brevo (EU) — sends our emails.

We never sell your data.

For how long

We keep your data for as long as you have an account. You can delete your account yourself at any time in settings.

Your rights

You can request a copy of your data, have it corrected or erased, object to or restrict processing, move your data, and withdraw a consent at any time. Write to hello@nomi.family and we reply within a month. If you are unhappy, you can complain to the Swedish Authority for Privacy Protection, imy.se.

Changes

The version in force is always the one on this page. We announce material changes in the app.