Your data deservesa clear explanation.

Local records and account sync

Meal records and photos, body profile, weight history, memories, preferences and calendar data are stored locally first. When you sign in, records such as your meals and meal photos, body profile, weight and, if you turn on Cycle Care, period dates are also saved to our servers over an encrypted connection so they can sync and be restored across your devices. Synced records are stored in a form our servers can read so that features such as Nanami can use them; they are not end-to-end encrypted.

Signing out does not automatically erase local records. Local first does not mean every feature is fully offline: sync, AI, social features and messaging process the data needed for those features as described here.

Health data (Apple Health and Health Connect)

With your permission, the app reads the health categories needed for its cards and calorie budget and may write weight and dietary energy. Health-store data is read and calculated on your device, and some of it is saved to your account when a feature needs it, as described below.

Account sync includes the body profile, meals, nutrition and weight records you create in Nometer, and period records if you turn on Cycle Care. Nanami can use your synced records, such as meals and cycle status, to answer you. Optional social features send only the summaries allowed by your sharing settings, which you can change in Settings at any time. We do not upload a complete copy of your Apple Health or Health Connect database.

• Activity, steps, exercise and distance
• Sleep, heart rate, oxygen saturation and respiratory rate
• Calories burned, weight and dietary energy
• Menstruation (only if you turn on Cycle Care)

Cycle Care (optional)

Cycle Care is available on iOS and Android. It is off by default, is offered only when the sex in your profile is set to female, and starts only after you agree on the Cycle Care screen. When Cycle Care is on:

• You can log when a period starts and ends in the app.
• With a separate permission, Nometer reads menstruation records from Apple Health (iOS) or Health Connect (Android) for roughly the past 12 months, and writes the periods you log in Nometer back to Apple Health or Health Connect. Flow intensity is not stored in Nometer. If you do not grant this permission, you can still log periods manually.
• Period date ranges (start and end dates, and whether each one came from Nometer or the health app) are saved to your account over an encrypted connection, together with your Cycle Care setting and time zone.
• Our servers use these dates to estimate your next period, give Nanami your cycle status in conversations, and send you a care message from Nanami about two days before a predicted period.

Period information is sensitive health data. We use it only to provide Cycle Care and Nanami's responses to you, and never for advertising. You can turn Cycle Care off in Settings at any time. This stops Nanami's cycle care and hides cycle features; records already saved to your account remain until you delete them or delete your account. Deleting a period record in Nometer also removes the entries Nometer wrote for it in Apple Health or Health Connect. Entries written by other apps can only be changed in the health app.

Photos, AI and media storage

For a calorie estimate, the image and text you submit are sent over an encrypted connection to our servers and processed by third-party AI model providers (service providers that process data on our behalf under contract). Meal photos are also saved to our cloud storage for cross-device backup and recovery, and for features you choose such as sharing.

Avatars, social images, Paipai photos and videos (including their audio), direct-message media, stickers, chat backgrounds and custom Nanami images are stored when you use those features. Messages to the Nanami AI companion and the context needed to answer them are processed, including by these AI model providers, to generate the response.

Account, social features and messages

Signing in with Apple, Google or an email verification code may provide us with an account identifier, email address and name. If you sign in with email, we send the verification code to that address. We store the display name, optional avatar and bio, member number, sign-in identities, sessions, device push token, sync records, friends, posts, interactions, reports and messages needed to provide the service.

If you subscribe to Nometer Pro, the App Store (iOS) or Google Play (Android) processes the payment. We receive your subscription status and purchase history through our subscription management provider so we can unlock paid features; we do not receive your payment card details. On iOS, our subscription management provider also processes ad attribution information and subscription events used to measure our advertising, as described in Section 8.

Sharing stays under your control. Settings manage visibility for meals, sleep, workouts, status, leaderboards, discovery and public promotion. Posts and profile data are shown to the audience you choose; direct messages are shown only to conversation participants. You can also block and report users or posts in the app, including the sender of a message in direct and group chats. Reports about messages are recorded against the sender's account.

Nometer has no minimum age requirement. Where the law of your country or region requires it, minors should use Nometer with the consent of a parent or guardian.

Beta applications

When you apply for beta access on our website, we store the email address, preferred platforms, page language, application source and consent time you submit. We use this information to manage the waitlist and send beta access and essential testing notices.

We do not use your beta application information for advertising. You can ask us to remove your application information at any time by emailing support@nometer.app.

Service operation and service providers

We process account, device and usage information, such as your device push token, to provide, secure and troubleshoot the service and to operate and improve its features. Nometer does not show ads in the app. Starting with version 1.0.1, the iOS app includes the Meta (Facebook) SDK, which starts only if you allow tracking, and uses Apple's ad attribution to measure and improve our own advertising. Section 8 explains what is collected, who receives it and how to turn it off.

Service providers process data on our behalf to run Nometer:

• Cloudflare: servers, databases, photo and media storage, video hosting, email delivery and AI request routing
• Third-party AI model providers (service providers that process data on our behalf under contract): meal recognition and Nanami's responses
• Apple and Google: sign-in, push notifications, and payments through the App Store and Google Play; Apple also provides Apple Ads attribution through AdServices (see Section 8)
• RevenueCat: subscription management, processing ad attribution information and, if you allow tracking on iOS, sending subscription events to Meta (see Section 8)

Our servers and these service providers may process and store data outside Japan, including in the United States. RevenueCat, Inc. is based in the United States and stores data in US data centers; Meta Platforms, Inc., described in Section 8, is also based in the United States. We update this policy when these practices change materially.

Ad measurement and tracking (iOS)

Starting with iOS version 1.0.1, we advertise Nometer on Apple Ads (App Store search ads) and on Instagram and Facebook (Meta). To learn which ads lead to installs, free trials and subscriptions, and to improve our campaigns, the iOS app handles data as described below. Nometer still does not show any ads in the app, and the Android app does not include these features.

Apple Ads attribution (Apple AdServices): when you open the app, it obtains an attribution token through Apple's AdServices framework and passes it to RevenueCat, our subscription management provider. RevenueCat uses the token to ask Apple whether the install came from an Apple Ads ad. Apple may return whether the install is attributed to Apple Ads, the campaign, ad group, keyword and ad identifiers, the country or region, whether the ad was tapped or viewed, and the conversion type; if you allow tracking, it may also include the date you tapped or saw the ad. RevenueCat stores this with your app user ID (an internal ID, not your name or email address) so we can count the trials, subscriptions and revenue each ad brings in. This standard attribution does not require tracking permission and does not use your advertising identifier (IDFA). Apple handles its own advertising data under Apple's privacy policy.

Meta ad measurement (only if you allow tracking): the iOS app includes the Meta (Facebook) SDK and asks for your permission through Apple's App Tracking Transparency prompt. The Meta SDK does not start unless you tap “Allow”. Only if you allow tracking:

• The Meta SDK sends Meta Platforms, Inc. app install and app open events, together with your device's advertising identifier (IDFA), a Meta anonymous ID, your IP address, and device and app information such as device model, iOS version, app version, language and time zone.
• RevenueCat sends Meta, through Meta's Conversions API, an event when you start a free trial, when a trial converts to a paid subscription, and when you make a first purchase or renew. Each event includes the time, product ID (for example nometer_pro_monthly), amount converted to US dollars and an order number generated by RevenueCat, together with the IDFA, Meta anonymous ID, IDFV (identifier for vendor), a hashed app user ID, IP address, app and device information, and your tracking permission status.

We have turned off the Meta SDK's automatic event logging, including automatic in-app purchase logging, and we do not send Meta any other events. We never send Meta your email address, phone number or name, or any meal records, meal photos, nutrition or calorie data, body profile, weight, health data, period records, messages, posts or conversations with Nanami. If you tap “Ask App Not to Track”, or tracking is restricted on your device, the Meta SDK does not start, the IDFA is not read, and RevenueCat does not send your events to Meta. If your body profile shows that you are under 13, the app does not show the tracking permission prompt, start the Meta SDK, or send events to Meta.

Meta uses this information to give us ad performance reports and attribution and to optimize the delivery of our ads, for example to show our ads to people likely to be interested in Nometer or to avoid showing them to people who already subscribe. Under Meta's Business Tools Terms, Meta may also use this information under its own privacy policy to improve ad delivery and to provide and improve Meta's products, and keeps this event data for up to two years. We do not upload customer lists, such as email addresses or phone numbers, to Meta.

We use this information only to measure and improve Nometer's own advertising. We do not sell your personal data for money and do not show third-party ads in the app. Under some US state privacy laws, sharing identifiers with Meta for advertising may be treated as “sharing” personal data or as “targeted advertising”; you can opt out at any time by turning off tracking as described below.

Consent and legal basis: we share information with Meta only based on the consent you give in the App Tracking Transparency prompt. Standard Apple Ads attribution does not use the IDFA; we process it as described in this policy to measure the performance of our own advertising.

Retention: attribution information and subscription records held by RevenueCat are linked to your internal app user ID and are kept as long as needed for subscription management and for accounting and legal obligations. Deleting your Nometer account deletes the data on our servers as described in Section 9, and we also ask RevenueCat to delete your customer record. If any of these RevenueCat records remain, you can ask us to delete them by emailing support@nometer.app, and we will do so unless the law requires us to keep them. Event data already sent to Meta is kept by Meta under its terms, for up to two years.

How to withdraw: you can turn off tracking for Nometer at any time in iOS Settings > Privacy & Security > Tracking, or turn off “Allow Apps to Request to Track”. After that, the app no longer reads the IDFA or starts the Meta SDK, and RevenueCat stops sending new events to Meta once it receives your updated setting the next time you open Nometer. Information already sent to Meta is handled under Meta's privacy policy, and you can contact Meta about it. Allowing or declining tracking does not change which Nometer features you can use.

Recipients and locations: RevenueCat, Inc. (United States; processes data on our behalf) and Meta Platforms, Inc. (1 Meta Way, Menlo Park, CA 94025, USA; receives data only if you allow tracking). Data is sent over encrypted connections when the events described above occur and is processed in the United States and other countries where these companies operate.

Third-party privacy policies: Apple Advertising & Privacy https://www.apple.com/legal/privacy/data/en/apple-advertising/ · Apple Privacy Policy https://www.apple.com/legal/privacy/ · RevenueCat Privacy Policy https://www.revenuecat.com/privacy · Meta Privacy Policy https://www.facebook.com/privacy/policy/

Your choices, retention and deletion

You can change sharing settings, remove or block friends, report or delete content, turn Cycle Care off or delete period records, and delete your account in Settings. On iOS, you can also turn off tracking at any time in Settings > Privacy & Security > Tracking (see Section 8). If you cannot access the app, you can follow the web instructions to request deletion.

Direct messages, including their images, are kept on our servers for 180 days for free users and up to 5 years for Nometer Pro users, and are then deleted from our servers. A conversation follows the longer period if either participant has Nometer Pro, but each person can only view messages within their own period. Messages already saved on your device stay there until you delete them. Other account data, including synced records and meal photos, is kept while your account exists.

When you delete your account, we delete your account and the data stored on our servers without undue delay, including your profile, synced records, meal photos, direct messages and their images, period records and Paipai videos. We also ask RevenueCat to delete your customer record. Copies in backups may remain for a limited time until they are overwritten, and we may keep information where the law requires it. Local records may remain on your device until another account replaces them, you clear app data, or you uninstall the app.

Who we are

Nometer is provided by REVU Limited Liability Company (合同会社 Revu), 西新宿水間ビル2F, 3-3-13 Nishi-Shinjuku, Shinjuku-ku, Tokyo, Japan. Representative: ZHANG XIAOTIAN. To ask about, access, correct or delete your personal information, email support@nometer.app.