Nori works without an account. Your diary stays on your iPhone unless you turn on sync. We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
1. What we collect
We only collect what Nori needs to work. Depending on the features you use, that includes:
- Diary data — foods, meals, recipes, water, weight, body measurements, activity, fasting and notes you enter.
- Goals and profile — goal type, targets, height, birth year and sex, if you provide them to calculate a daily goal.
- Account details — your email address, or the private relay address from Sign in with Apple, only if you create an account for sync.
- Food photos — only when you tap Scan on a meal photo.
- Purchase status — whether you have Nori Plus. Apple handles payment; we never see your card details.
- Diagnostics — crash reports and basic performance data, only if you allow it in Settings.
2. How we use it
To show your diary, calculate goals and totals, sync your data between devices if you choose, analyse a food photo you submit, and fix bugs. We don't use your data for advertising and we don't build marketing profiles.
3. Photo scanning
When you tap Scan, the photo is sent over an encrypted connection to our servers and to an AI image-analysis provider that returns suggested foods and amounts. The provider processes the photo only to return that result and is contractually barred from using it to train its models.
We don't keep scanned photos after the result is returned, unless you choose to save the photo with the entry. Scanning is optional; search and barcode always work without it.
4. Apple Health
If you connect Apple Health, Nori reads and writes only the data types you approve, such as weight, active energy and dietary energy. Health data is never used for advertising, never sold and never shared with third parties. You can revoke access at any time in the Health app.
5. Who we share it with
We don't sell or rent personal data. We share it only with service providers that help run Nori, under contracts that limit how they use it:
- Cloud hosting — stores synced data and runs our servers.
- AI image analysis — processes photos you choose to scan.
- Apple — processes Nori Plus purchases and, if you use it, Sign in with Apple.
We may disclose information if the law requires it, and we'll tell you where we're allowed to.
6. How long we keep it
Data on your device stays until you delete it or remove the app. Synced data stays until you delete it or your account. When you delete your account, we erase synced data within 30 days, and remove it from backups within 90 days.
7. Your choices and rights
Wherever you live, you can:
- Access and export your data — Profile → Settings → Export data.
- Correct it — edit any entry or goal in the app.
- Delete it — delete single entries, or your whole account in Profile → Settings → Account.
- Withdraw consent — turn off sync, diagnostics or Health access at any time.
If you're in the EEA, UK or California you have additional rights under GDPR and CCPA, including the right to complain to your local data protection authority.
8. Children
Nori isn't intended for children under 13, or under 16 in the EEA and UK. We don't knowingly collect their data. If you think a child has given us data, contact us and we'll delete it.
9. Security
Data is encrypted in transit and at rest on our servers. On your iPhone it's protected by iOS data protection. No system is perfectly secure, so we limit what we collect in the first place.
10. Changes and contact
If we change this policy we'll update the date above and, for significant changes, tell you in the app first.
Questions or requests: privacy@nori.app. We reply within 30 days.