Privacy policy

Nomi · last updated 2026-07-16

1. Who is responsible for your data

The data controller is Nomi Family AB, reg. no. 559581-0820, Enstigen 3, 182 34 Danderyd, Sweden (”Nomi”, ”we”, ”us”). If you have questions about how we process your data, reach us at hello@nomi.family.

2. What data we collect

When you join the waitlist

• First name and email address.
• Invitation/source code and campaign information (UTM) — so we know where your signup came from.
• Your consent and the time it was given.

When you use the app (after launch)

• Account details: name, email, login credentials.
• Household profile: family members, including children's first names and ages.
• Allergies and dietary needs — classed as sensitive data (health). Collected only with your explicit consent and used solely to adapt recipes and avoid allergens.
• Preferences: what you like and dislike, past meals, plans and shopping lists.
• Conversations with Nomi (chat) to give suggestions and improve the service.
• Payment details for subscriptions (handled by our payment provider — we do not store card numbers).
• Technical data: device, approximate location via IP, usage statistics.

3. Why we process the data, and on what legal basis

Purpose	Legal basis
Send emails about launch and early access (waitlist)	Consent (art. 6.1a)
Provide the service — account, planning, suggestions	Contract (art. 6.1b)
Adapt recipes to allergies and dietary needs	Explicit consent (art. 9.2a)
Improve and develop the product	Legitimate interest (art. 6.1f) — or consent for non-essential analytics
Handle payments and bookkeeping	Contract (art. 6.1b) and legal obligation (art. 6.1c)
Marketing and analytics cookies	Consent (via cookie banner)

4. Children's data

The adult account holder enters and consents to data about children in the household. We only collect what is needed — first name, age and any allergies — to adapt the meals. Children do not create their own accounts.

5. How long we keep the data

• Waitlist: until the service has launched or until you unsubscribe — after that the data is deleted or anonymised within 24 hours.
• Account: for as long as you are a customer. When an account is closed, your data is deleted within 24 hours.
• Chat logs: 12 months.
• Accounting records: kept as long as the law requires (normally 7 years under the Swedish Bookkeeping Act).

6. Who we share data with

We never sell your data. We use suppliers (data processors) who process data on our behalf, under data processing agreements:

• Hosting/operations: Hetzner/Finland
• AI provider for the chat: OpenAI
• Email sending: Brevo
• Payments: Adyen
• Analytics/ad measurement: Meta, Google

Transfers outside the EU/EEA: if a supplier processes data outside the EU/EEA, it is done with lawful safeguards (the EU Commission's standard contractual clauses or the Data Privacy Framework).

7. Your rights

You have the right to: request a copy of your data (data access), have incorrect data corrected, have data deleted, object to or restrict processing, have your data moved (data portability), and withdraw your consent at any time. Contact us at hello@nomi.family — we reply within a month.

You also have the right to complain to the supervisory authority, the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Cookies

We use essential cookies to make the site work, and — with your consent — cookies for analytics and ad measurement. You choose via the cookie banner. More information is available in our [cookiepolicy].

9. Security

We protect your data with technical and organisational measures, and limit access to those who need it to deliver the service.

10. Changes

We may update this policy. For material changes we will inform you by email or in the app. The date at the top shows the latest version.