Legal
Privacy Policy.
Last updated 27 September 2026
This policy explains how Sugi Studio Pty Ltd ("Sugi Studio", "we", "us" or "our") collects, uses, shares and protects personal information when you use the nomi mobile app and this website (together, "nomi"). We're an Australian company, and we're responsible for your information under Australia's Privacy Act 1988 and, where they apply to you, the EU and UK General Data Protection Regulation and other privacy laws.
The short version
- We collect what nomi needs to plan your dinners: your first name, household, budget, diet, the nights you cook and where you shop, plus your plans and lists.
- Allergies are health information. Telling us is up to you, and we only use them to keep those ingredients out of your plans.
- No ads, no selling your data, no tracking you across other apps, and no location permission.
- Your account data is stored in Sydney, Australia, by service providers who process it for us.
- You can see, change or delete your information at any time, and delete your account right in the app.
1. What we collect
Information you give us
| What | For example |
|---|---|
| Your account | An account ID nomi creates when you first open the app. If you link Sign in with Apple or Google, the ID that service gives us and your email address. Apple lets you hide your email behind a private relay address. |
| Your name | The first name you give nomi, so it can greet you. |
| Household and plan settings | Your country or region, currency, supermarket, how many adults and kids you cook for (just the numbers), the nights you cook, your weekly budget, how long you like to spend cooking and the appliances you have. In the US, the ZIP code you enter to find nearby stores. |
| Food preferences | Your diet (such as vegetarian), the vibes you pick, the proteins you like and ingredients you skip. |
| Allergies | Any of gluten, dairy, nuts, eggs, shellfish, sesame or soy, if you choose to tell us. See section 3. |
| Onboarding answers | For example what you'd like help with, what gets in the way of planning, and how you heard about nomi. |
| Your plans and activity | Meal plans and swaps, grocery lists (including items you type in), favourites, ratings, notes, meals you mark as cooked, recipes you view and past suggestions. |
| Messages to us | What you write to us, the email address you reply from, and your app version. |
Some of this stays only on your phone. The rest is saved to your nomi account so it's backed up and there when you sign in on another device.
Information collected automatically
- Subscription details: which plan you have, its status, trial and renewal dates, and transaction IDs, which we receive from Apple or Google. We never see your card or bank details.
- Notification token: if you turn on reminders, a push token, a device identifier and your phone's platform, so we can send them.
- Device settings: your phone's region setting (to suggest your country), language and time zone (so reminders arrive at the right time).
- Technical logs: our servers record basic request details such as IP address, time and errors, to keep nomi secure and fix problems.
- Crash reports: if the app crashes or hits an error, what went wrong, the screens and taps just before it, and your device model, operating system and app version. Crash reports don't include your name or email.
What we don't collect
nomi doesn't ask for your location, contacts, photos or microphone. It doesn't use your device's advertising identifier, show ads, or include advertising, analytics or tracking SDKs.
2. How we use it
| Why we use it | Legal basis (EU and UK) |
|---|---|
| To run nomi: plan your meals, estimate costs, build your grocery list, scale recipes and keep your account | Performing our contract with you |
| To tailor suggestions, such as avoiding recent repeats and leaning towards meals you like | Performing our contract; our legitimate interest in useful suggestions |
| To manage your subscription, free trial and offer codes | Performing our contract |
| To send the reminders you turn on, like your weekly plan reminder or a note before a trial ends | Your consent, which you can withdraw by turning reminders off |
| To answer your messages and help with problems | Performing our contract; our legitimate interest in supporting users |
| To keep nomi secure, prevent abuse of trials and codes, fix bugs and improve the app | Our legitimate interests in a safe, working service |
| To keep records and meet legal obligations, such as tax rules or lawful requests | Legal obligation |
| To keep allergens out of your plans | Your explicit consent (see section 3) |
We don't use your information for advertising, we don't sell it or share it for cross-context behavioural advertising, and we don't make decisions about you that have legal or similarly significant effects based solely on automated processing.
3. Allergies and health information
Food allergies are health information, which privacy laws treat as sensitive. Telling nomi about allergies is optional: you can choose "No allergies" and still use every feature. If you select allergies, you consent to us storing them and using them only to keep those ingredients out of your meal plans.
You can change or remove them at any time in the app's Preferences, which also withdraws your consent for any you remove. We don't share them with anyone other than the service providers that store data for us. nomi can't guarantee that a recipe is free from allergens, so always check ingredient labels.
4. Who we share it with
We don't sell your personal information. We share it only with service providers that help us run nomi, under contracts that let them use it only on our behalf:
- Supabase: our database, sign-in and server functions. Account data is hosted in Sydney, Australia.
- Apple: Sign in with Apple, App Store payments and notification delivery on iPhone.
- Google: Sign in with Google, Google Play payments and notification delivery on Android (Firebase Cloud Messaging).
- RevenueCat: manages subscriptions. It receives your nomi account ID and your purchase details from the stores.
- Expo: sends push notifications. It receives your push token and the notification text, which may include your first name.
- Sentry: receives the app's crash reports, so we can find and fix bugs.
- Store lookup services (US only): when you look for stores near a ZIP code, we send the ZIP code, or the approximate coordinates of its centre, to store directory and grocery pricing services such as Kroger, OpenStreetMap and Zippopotam.us. We don't send your name or account ID.
- Vercel: hosts this website.
We may also share information:
- with our professional advisers, such as lawyers and accountants, where they need it;
- when the law requires it, or to protect the rights, safety or property of our users, the public or us;
- with a buyer or successor if nomi or Sugi Studio is sold or restructured, in which case this policy continues to apply to your information.
5. Where it's stored
Your nomi account data is stored in Sydney, Australia. Some of our service providers, including Apple, Google, RevenueCat, Expo, Sentry and Vercel, are based in or process data in the United States and other countries. When information leaves Australia, we take reasonable steps to make sure it's protected consistently with the Australian Privacy Principles. For people in the EU, EEA, UK and Switzerland, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses and the UK equivalent in our providers' data processing terms.
6. How long we keep it
- Account data, plans and preferences: for as long as your account exists. When you delete your account, we delete it from our database straight away. Copies in our provider's backups are overwritten on a rolling basis.
- Favourites and meal history: until you clear them (Settings → Your meals) or delete your account.
- Notification tokens: until you turn reminders off, delete your account, or the token stops working.
- Messages to us: as long as we need them to answer you and keep business records. They're unlinked from your account when you delete it, and we'll delete them sooner if you ask.
- Purchase records: Apple, Google and RevenueCat keep their own records of your purchases under their policies and tax laws.
- Server logs: a short period, usually days to weeks.
- Crash reports: up to 90 days.
7. How we protect it
nomi sends everything over encrypted connections (HTTPS), and our providers encrypt stored data. Access rules in our database mean each account can only read and change its own data, and only a few people at Sugi Studio can reach it, for support and maintenance. No system is perfectly secure, so please keep your device and sign-in secure too. If a data breach is likely to cause you serious harm, we'll tell you and the relevant regulator as the law requires.
8. Your choices and rights
In the app
- See and change your information: in Preferences and Settings.
- Clear favourites or meal history: Settings → Your meals.
- Turn reminders off: in Settings, or in your phone's notification settings.
- Delete your account: Settings → Account → Delete my account. See our account deletion page for details.
Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct information that's wrong or out of date;
- have your information deleted;
- object to, or ask us to restrict, how we use it;
- receive your information in a portable format;
- withdraw consent you've given, without affecting what we did before;
- complain to a privacy regulator.
To use any of these rights, email support@sugistudio.dev. We may need to confirm the request comes from you, for example by asking you to write from the email linked to your account. We'll reply within 30 days, and we won't treat you differently for using your rights.
Where you live
- Australia: you can access and correct your information under the Australian Privacy Principles. If you're unhappy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner.
- EU, EEA and UK: you have the rights listed above and can complain to your local data protection authority, or in the UK to the Information Commissioner's Office.
- New Zealand and Canada: you can contact the Office of the Privacy Commissioner in New Zealand or the Office of the Privacy Commissioner of Canada.
- United States: depending on your state (for example California, Colorado, Connecticut, Virginia or Texas), you can ask to know, access, correct or delete your personal information. We don't sell or share personal information for targeted advertising, and we use sensitive information, like allergies, only to provide nomi. You can use an authorised agent, and you can appeal a decision by replying to our response.
9. Children
nomi is for adults, and we don't knowingly collect personal information from children. When you tell us how many kids you cook for, we only store the number. If you think a child has given us their information, email us and we'll delete it.
10. This website
This website doesn't use cookies, analytics or trackers, and it serves its own fonts and images. Our host, Vercel, processes your IP address and basic request details to deliver the pages and protect them from abuse. If you email us, we use your email to reply.
11. Changes to this policy
We'll update this policy when nomi or the law changes, and change the "last updated" date above. If we make a significant change, we'll tell you in the app before it takes effect.
12. Contact us and complaints
For privacy questions, requests or complaints, contact:
Sugi Studio Pty Ltd
Email: support@sugistudio.dev
We'll acknowledge a complaint within 7 days and aim to resolve it within 30 days. If you're not satisfied, you can contact the privacy regulator where you live (see section 8).