Privacy Policy

Effective date: 13 August 2026

The short version: your meal plans, shopping lists and the text you enter while planning stay on your device. The NomNom consumer app has no user accounts and never asks for your name or email. If you explicitly rate a recipe, we save that anonymous rating so we can improve the meals. We collect anonymous usage analytics, selected setup categories and crash diagnostics to improve the app, hosted in the European Union, and you can switch this collection off in the app's settings at any time. If you choose to join the launch waitlist on our website, we keep that email address only to send you launch news, and you can leave the list anytime.

Who we are

NomNom is published by Z Gen Kibernetika Kft. (registered in Hungary), the data controller for the processing described here. If you have any questions about this policy, contact us at help@nomnomplanner.com.

What stays on your device

To do its job, NomNom stores the following information locally on your device only:

your preferences (shop, country, budget, servings, cook days, dietary needs, dislikes, kitchen appliances),
your generated meal plans, bookmarks and shopping list checkmarks.

This content is not uploaded to our servers. Deleting the app deletes all of it.

Usage analytics and crash diagnostics

We use PostHog, an analytics service, to understand how NomNom is used so we can improve it. PostHog processes this data on our behalf on servers located in the European Union (Frankfurt, Germany). The data we collect:

Usage events: which screens you open and which features you use, for example that a meal plan was generated or a recipe was bookmarked.
Preference categories: traits such as your selected country, shop, household size, cooking and shopping schedule and appliance choices, so we can see which setups work well. The current iOS app also sends your configured weekly budget, meal goals and dietary needs. The Android app does not send those three categories. Free-text input, such as your dislikes, is never sent as analytics; for dislikes, only the count is sent.
Device and app information: device model, OS version, app version, language and a random installation identifier. We do not collect your name, email, contacts, or precise location.
Crash diagnostics: when the app terminates because of a technical error, the error type, message and stack trace are saved on the device and sent on the next app launch together with the device, OS and app version. This lets us identify and fix the failing code.
Session replays: anonymised recordings of how the app's screens are used. Anything you type is masked and never recorded.

Your IP address is used to receive this data and derive a rough location (country/city), and is not stored with your events. Analytics profiles are identified by a random identifier, not by who you are.

Opting out: you can turn analytics off at any time in the app under Settings. When switched off, no analytics, crash diagnostics or session replay data is sent. Our legal basis for this processing is our legitimate interest in understanding and improving the app (GDPR Art. 6(1)(f)); the opt-out is always one tap away.

Analytics data is retained for at most 12 months and then deleted or irreversibly aggregated.

Recipe ratings and feedback

When you explicitly tap “like” or “not for me” on a recipe, we send the recipe identifier and name, your selected rating and whether you turned it on or off, your selected app country and language, the app version, and the country-level location supplied by Cloudflare. Each submission uses a fresh random event identifier. It is not linked to your name, email, analytics identifier or a persistent device identifier.

You may also choose to send a written recipe issue or suggestion. We store the recipe identifier and name, the category you select, your message of up to 2,000 characters, your selected app country and language, the app version, submission time and country-level location supplied by Cloudflare. Please do not include your name, email address or other personal information in the message.

Your IP address is used only to prevent automated abuse. We store a one-way hash of it for up to 25 hours and do not attach it to the feedback. Recipe ratings and written feedback are stored on Cloudflare infrastructure for up to 12 months and are then automatically deleted. We use them only to understand which recipes work well and improve the meal catalogue. Our legal basis is our legitimate interest in improving NomNom (GDPR Art. 6(1)(f)). You can object to this processing by contacting help@nomnomplanner.com.

Our website and the waitlist

Our website (nomnomplanner.com) sets no cookies and runs no client-side analytics or trackers. To count visits and signups we record server-side events (page viewed, waitlist joined) that contain a rough location (country) and no persistent identifier, processed by PostHog in the EU as described above.

If you join the waitlist, we store your email address, the signup date, your country and, where available, the site that referred you. We use this for one purpose: sending you TestFlight invites and launch announcements for NomNom. The legal basis is your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time by emailing help@nomnomplanner.com or replying to any of our emails; we then delete your address. Waitlist data is stored on Cloudflare infrastructure, is never shared with advertisers or used for any other marketing, and is deleted no later than 6 months after the app's public launch.

Purchases

Subscriptions are processed by Apple through the App Store or by Google through Google Play, depending on your device. We do not receive your name, address or payment details. Through RevenueCat, we receive an anonymous confirmation of the subscription status, for example that a trial started, a purchase completed or automatic renewal was turned off, so the app can unlock and we can understand subscription performance.

If you turn off automatic renewal, NomNom may show one optional question asking why you cancelled. You can select a structured category, such as price, low usage, content fit or a technical problem, and may add an optional note of up to 300 characters. We store the category and any note you choose to submit with a one-way hash of RevenueCat's anonymous app user identifier, the subscription product and period type, expiry time, selected app country and language, app version, submission time and country-level location supplied by Cloudflare. Please do not include your name, email address or other personal information in the optional note. This lets us measure trial and paid cancellations without receiving your payment details. The response is optional, shown at most once for a subscription period and retained for at most 12 months. Our legal basis is our legitimate interest in improving NomNom and understanding why subscriptions are cancelled (GDPR Art. 6(1)(f)). You can object by contacting help@nomnomplanner.com.

Apple's handling of your purchase data is described in Apple's Privacy Policy. Google's handling of your purchase data is described in Google's Privacy Policy.

Authorised TikTok integration

An authorised NomNom operator may connect a NomNom-managed TikTok account to our private marketing dashboard through TikTok Login Kit. After the operator gives consent, we receive an app-specific account identifier, display name, profile statistics, and public post metadata and statistics such as post identifiers, descriptions, cover images, publication times, views, likes, comments and shares. We do not receive the TikTok password, private posts, messages or contacts.

We use this data only to display and monitor the performance of NomNom's own TikTok content. Access and refresh tokens are stored server-side, encrypted at the application layer, on Cloudflare infrastructure. Tokens are deleted locally and a revocation request is sent to TikTok when the integration is disconnected. Historical public post statistics are retained only while they are needed for NomNom's content performance analysis.

The operator can revoke access from TikTok's app permissions or request disconnection and deletion by writing to help@nomnomplanner.com.

Who we share data with

We do not sell your data or share it with advertisers. The third parties processing data on our behalf are PostHog (EU region) for analytics and crash diagnostics, RevenueCat for anonymous subscription status, and Cloudflare for website hosting and storage, each under a data processing agreement. Apple and Google process purchases under their own privacy policies. TikTok supplies authorised account data at the operator's direction and handles TikTok account data under its own privacy policy. We may disclose data if the law requires it.

Children

NomNom is not directed at children under 16 and we do not knowingly collect personal data from them.

Your rights

Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to lodge a complaint with a supervisory authority (in Hungary: NAIH, naih.hu). Because analytics profiles are keyed to a random identifier rather than your identity, if you contact us to exercise these rights we may ask you for that identifier (shown in the app's settings) to locate your data. Write to help@nomnomplanner.com and we will respond within 30 days.

Changes to this policy

If the app changes in a way that affects your privacy, we will update this page and the effective date above before the change ships.