Privacy Policy

Last Updated: February 1, 2026

1. Information We Collect

Nomrade collects the following information to provide and improve our services:

1.1 Account Information

• Registration Data: Email address, username, password (securely hashed), and optional full name
• Profile Information: Avatar customization, dietary preferences, allergies, cooking skill level, and food goals
• Authentication Data: Session tokens and refresh tokens for maintaining your login state

1.2 Content and Activity Data

• Meal Logs: Meal names, dates, times, calories, macronutrients (protein, carbs, fat), images, notes, and cuisine types
• Saved Content: Recipes, restaurant information, and content saved from external platforms including URLs, titles, descriptions, and images
• User-Generated Content: Photos, notes, trails (collections), and quest participation
• Water and Nutrition Tracking: Daily water intake and nutritional goal progress

1.3 Location Data

• GPS Location: Real-time location data (with your permission) for discovering nearby restaurants and completing location-based quests
• Saved Places: Restaurant names, addresses, coordinates, cuisine types, and your notes about locations
• Location History: Aggregate visit counts and timestamps when you log meals at specific locations

1.4 Social and Community Data

• Friend Connections: Your friend list, friend requests, and social interactions within the app
• Shared Content: Trails and content you choose to share with friends or make public
• Quest Data: Quest participation and completion status

1.5 Third-Party Platform Data

When you save content from social media platforms, we store:

• The content URL and embed data (title, description, images)
• Creator handle or username
• Any recipes or location information extracted from the content

1.6 Device and Usage Data

• App Usage: Features accessed, actions taken, and interaction patterns to improve the experience
• Technical Data: Device type, operating system, and crash reports for troubleshooting
• Activity Timestamps: When you log meals, save content, complete quests, and interact with the app

2. How We Use Your Information

2.1 Core Functionality

• Provide meal tracking, calorie counting, and nutritional analysis
• Save and organize recipes from various sources including social media platforms
• Display embedded content from third-party platforms using their official embed APIs
• Help you discover restaurants and food experiences based on your location and preferences
• Enable quest-based food exploration and gamification features

2.2 Personalization

• Customize recipe recommendations based on your dietary preferences and restrictions
• Suggest restaurants based on your cuisine preferences and location
• Provide AI-powered recipe extraction and meal suggestions
• Tailor your dashboard and avatar based on your activity

2.3 Social Features

• Connect you with friends and enable content sharing
• Display activity feeds and social interactions
• Enable collaborative trails and shared food discoveries

2.4 Service Improvement

• Analyze usage patterns to improve features and fix issues
• Maintain security and prevent abuse
• Send important service updates and notifications

3. Data Sharing

We do not sell your personal data. We only share data:

• With third-party services you explicitly choose to connect
• With friends you choose to connect with in the app
• When required by law

4. Data Security

We use industry-standard security measures to protect your data. All API tokens are encrypted, and we use secure connections for all data transfers.

5. Your Rights

You have the right to:

• Access your personal data
• Delete your account and data
• Disconnect third-party platforms

6. Third-Party Services and APIs

Nomrade integrates with various third-party services to provide our features. When you use these integrations, the respective platforms' privacy policies also apply.

6.1 Social Media Embeds

We use official embed APIs (such as oEmbed) to display content you save from third-party social media platforms. When you save a post, we store the URL and retrieve embed data (including images, captions, and creator information) through the platform's official API. Content is displayed according to each platform's terms and using their official embed format.

We recommend reviewing the privacy policies of any platforms whose content you save.

6.2 Location and Business Data

• Google Places API: We use Google's Places API to search for restaurants, retrieve business information, and provide location autocomplete. Google Privacy Policy
• Yelp Fusion API: We may use Yelp to enrich restaurant data with cuisine categories and business details. Yelp Privacy Policy

6.3 AI and Content Processing

• Anthropic Claude: We use AI to extract recipes from URLs and provide intelligent meal suggestions. Recipe text may be processed by Anthropic's API. Anthropic Privacy Policy

6.4 Infrastructure

• Supabase: Our backend infrastructure and database are hosted on Supabase, which handles data storage and authentication. Supabase Privacy Policy

We recommend reviewing the privacy policies of these services to understand how they handle your data.

7. Cookies and Tracking

We use minimal tracking to improve our services. We do not use advertising cookies or sell data to third parties.

8. Children's Privacy

Nomrade is not intended for users under 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or app notification.

10. Data Retention

We retain your personal data only as long as necessary to provide you with our services and as described in this Privacy Policy.

10.1 Active Account Data

• Account Information: Retained while your account is active
• Meal Logs and Nutrition Data: Retained indefinitely while your account is active to provide historical tracking
• Saved Content (including Instagram embeds): Retained while your account is active or until you delete the content
• Location Data: Saved places retained until deleted; real-time GPS data is not permanently stored
• Social Connections: Friend lists and interactions retained while your account is active

10.2 Third-Party Platform Data

• Instagram/Social Embed Data: URLs and metadata are retained while the content remains saved in your account. If the original content is deleted by the creator or platform, we retain only our cached metadata.
• Cached Location Data: Google Places data may be cached for up to 30 days to reduce API calls

10.3 Account Deletion

• Personal Data: Permanently deleted within 30 days of account deletion
• Audit Logs: Administrative audit logs are retained for security and legal compliance purposes
• Backup Data: May persist in encrypted backups for up to 90 days

10.4 Legal Requirements

We may retain certain data longer if required by law, legal proceedings, or to protect our legal rights.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

12. Your Privacy Rights

12.1 General Rights

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your data
• Objection: Object to processing of your data
• Restriction: Request restriction of processing

12.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

12.3 European Union Residents (GDPR)

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the rights listed above and the right to lodge a complaint with your local supervisory authority.

13. Analytics and Performance

We use analytics tools to understand how users interact with our app and to improve performance. These tools may collect information such as how often you use the app, the features you use, and crash reports. This data is aggregated and anonymized.

14. Push Notifications

With your permission, we may send you push notifications. You can disable these at any time through your device settings.

15. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or app notification. Your continued use of the Service after changes are made constitutes acceptance of the updated policy.

16. Contact Us

For privacy concerns, data requests, or to exercise your privacy rights, contact us at: support@nomrade.com

For GDPR-related inquiries, please include "GDPR Request" in your email subject line.