Privacy Policy
Last updated: 13 September 2026
This privacy policy explains which personal data we process when you use the Nommly app (iOS, Android and web at www.nommly.de), for which purposes, and which rights you have. The German version is the legally binding one; this translation is provided for your convenience.
1
Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is: Dominik Kienzler Schwalbenweg 14 71334 Waiblingen, Germany Email: dkienzler88@gmail.com Phone: +49 156 79668271
No data protection officer has been appointed because the legal requirements for this do not apply. For any privacy question, contact us at the address above.
2
Data We Process
We only process data you provide yourself or that arises technically while you use the app:
•
Account data: name and email address from your Google or Apple account, the user ID of the sign-in provider, time of last login, language and app settings. With Sign in with Apple you can hide your email address; we then receive a relay address generated by Apple.
•
Shopping lists: items, quantities, notes, categories and completion status.
•
Recipes: title, ingredients, preparation steps and recipe photos you upload. Recipe photos are stored permanently until you delete the photo or the recipe.
•
Food diary: name and location of a meal, date, rating, description, photos and the transcript of your voice input. These entries and photos are stored permanently until you delete them.
•
Price data: items, prices, quantities and the store name recognised when you scan a receipt.
•
Health data: allergies, intolerances, pregnancy status and other dietary conditions you enter. We process this data only with your explicit consent (see section 8).
•
Photos and audio recordings for AI features: pictures of recipes, food or receipts and voice recordings you make to recognise items. These are processed only for the duration of the analysis and deleted afterwards. Only the recognised results (for example item names) are stored.
•
Subscription data: your plan (Free or Nommly+), subscription status, end of the billing period and your customer ID at Stripe. We do not receive payment details such as card numbers; these are held exclusively by Stripe.
•
Usage counters: number of AI, audio and image requests per calendar month, used to check the quotas of your plan.
•
Proof data: version and time of your acceptance of the terms of service and of your consent to the processing of health data.
•
Technical data: IP address, time of access, device type, operating system and app version in server logs and error reports.
3
Purposes and Legal Bases
We process your data for the following purposes:
•
Providing your account, shopping lists, recipes, food diary, price tracking, list sharing and the Nommly+ features: Art. 6(1)(b) GDPR (performance of a contract).
•
AI-based categorisation, image and speech recognition: Art. 6(1)(b) GDPR.
•
Health warnings based on your health profile: Art. 6(1)(a) in conjunction with Art. 9(2)(a) GDPR (explicit consent).
•
Billing of the Nommly+ subscription: Art. 6(1)(b) GDPR; retention of invoice data: Art. 6(1)(c) GDPR (tax law obligations).
•
Error monitoring, usage quotas, abuse prevention and IT security: Art. 6(1)(f) GDPR. Our legitimate interest is the stable and secure operation of the app.
•
Proof of acceptance of the terms of service and of consents given: Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
You are neither legally nor contractually required to provide your data. However, you cannot use the app without account data, and the health features are unavailable without health data. No automated decision-making within the meaning of Art. 22 GDPR takes place.
4
Sign-in with Google and Apple
You sign in with your Google account (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or your Apple ID (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland). The provider transmits your name, email address and a user ID to us. Google or Apple learns that you signed in to Nommly. Google and Apple are independent controllers for this processing; their privacy policies at policies.google.com/privacy and www.apple.com/legal/privacy apply.
5
AI Processing by Google Gemini
For categorising items, recognising food and recipes in photos, reading receipts, voice input and health checks we use the Gemini API of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The content to be analysed is transmitted to Google: item text, photos, audio recordings and, if you have enabled the health features, your health profile. Your name and email address are not transmitted.
We use the paid version of the Gemini API. Under Google's terms, content submitted through this version is not used to train Google's models and is processed only to provide the service. Google acts as our processor under Art. 28 GDPR. Processing may take place in the USA; the transfer is safeguarded by Google's certification under the EU-US Data Privacy Framework and by the EU Standard Contractual Clauses (Art. 45 and 46 GDPR).
6
Recipients and Processors
The following providers process data on our behalf (Art. 28 GDPR):
•
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany: hosting of servers and database. Location: Germany.
•
Google LLC, USA: Gemini API for the AI features (see section 5). Safeguarded by the EU-US Data Privacy Framework and Standard Contractual Clauses.
•
Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA: storage of recipe and food diary photos and of the temporary images for AI analysis (Cloudflare R2). Storage is restricted to the EU. Stored photos are accessible via an unguessable address under images.nommly.de. Safeguarded by the EU-US Data Privacy Framework and Standard Contractual Clauses.
•
Functional Software, Inc. (Sentry), 45 Fremont Street, San Francisco, CA 94105, USA: error monitoring and crash reports. We use Sentry's EU region; data is stored in the EU. Only technical device data and error information are transmitted, never names, email addresses or list contents.
•
Brevo (Sendinblue SAS), 7 rue de Madrid, 75008 Paris, France: delivery of transactional emails, for example to confirm an account deletion or a subscription cancellation. Your email address and the email content are transmitted.
The following recipients are independent controllers:
•
Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, and Stripe, Inc., USA: processing of payments for Nommly+. We transmit your email address and user ID to Stripe; you enter payment details directly at Stripe. Stripe processes this data as an independent controller, including for fraud prevention. Privacy policy: stripe.com/privacy.
•
Google and Apple as sign-in providers (see section 4).
•
Other users: when you share a shopping list, the invited people see the list contents as well as your name and email address; you in turn see their name and email address. When you create a recipe link, anyone with the link can view the recipe including photos and copy it into their own account. You can end shares and links at any time in the app.
We disclose data to authorities only where we are legally obliged to.
7
Transfers to Third Countries
Our servers and databases are located in Germany. Transfers to the USA occur for AI processing by Google, payment processing by Stripe and, within their corporate structures, at Cloudflare and Sentry. All of these companies are certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR). In addition we have concluded the EU Standard Contractual Clauses with them (Art. 46(2)(c) GDPR). Copies of these safeguards are available on request.
8
Health Data
Information about allergies, intolerances, pregnancy and other dietary conditions is health data within the meaning of Art. 9 GDPR. We process it only if you enable health mode and give your explicit consent when doing so. The data is used solely to check your shopping items, recipes and food diary entries for possible risks. For this check, your health profile and the content to be checked are transmitted to Google's Gemini API (see section 5). We do not share your health data with other users, not even when sharing lists.
You can withdraw your consent at any time with effect for the future by disabling health mode in the settings. Your health profile is then deleted immediately. The lawfulness of processing carried out before the withdrawal is not affected.
9
Device Permissions
The app requests the following permissions when needed:
•
Camera: photographing recipes, food, meals and receipts.
•
Photo library: selecting existing images for the same features.
•
Microphone: voice input for adding items and for food diary entries.
All permissions are optional. Without them, only the respective features are unavailable. Location data and contacts are never requested.
10
Web Version, Cookies and Local Storage
We do not use tracking, analytics or advertising services. The app stores only technically necessary data on your device: your login token and your app settings (in the protected system storage on iOS and Android, in local storage in the browser). During sign-in our server temporarily sets a technically necessary cookie that is deleted once sign-in is complete. This storage is permitted without consent under section 25(2) no. 2 of the German TDDDG.
11
Retention Periods
We keep your data only as long as necessary for the respective purpose:
•
Account data, shopping lists, recipes, food diary, price data, settings: until you delete the respective entry or your account.
•
Health profile: until you withdraw consent or delete your account.
•
Photos and audio recordings for AI analysis: deleted immediately after the analysis.
•
Recipe and food diary photos: until you delete the photo, the entry or your account.
•
Usage counters: per calendar month; deleted with the account.
•
Error reports at Sentry: 90 days.
•
Server logs with IP addresses: at most 14 days, unless a security incident requires longer retention.
•
Invoice and payment data at Stripe: ten years under sections 147 AO and 257 HGB (German tax and commercial law), also after account deletion.
•
Confirmation links for account deletion and subscription cancellation: valid for one hour.
When you delete your account, all your data including photos, shared lists and recipe links is irreversibly deleted; an active Nommly+ subscription is ended.
12
Your Rights
You have the following rights towards us:
•
Access to your stored data (Art. 15 GDPR).
•
Rectification of inaccurate data (Art. 16 GDPR).
•
Erasure (Art. 17 GDPR).
•
Restriction of processing (Art. 18 GDPR).
•
Data portability (Art. 20 GDPR): in the account settings you can export your data in a machine-readable format.
•
Objection to processing based on legitimate interests (Art. 21 GDPR).
•
Withdrawal of consents given, with effect for the future (Art. 7(3) GDPR).
To exercise your rights, an email to dkienzler88@gmail.com is sufficient. You can also delete your account yourself at any time in the account settings or, without signing in, at www.nommly.de/account-delete.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de. You may also contact the supervisory authority of your place of residence.
13
Minimum Age
Nommly is intended for persons aged 16 and over. Persons under 16 may use the app only with the consent of a parent or guardian (Art. 8 GDPR). We do not knowingly collect data from children under 16 without this consent.
14
Data Security
All connections between the app and our servers are encrypted with TLS. Database access is restricted to the application server. Login tokens are stored in the protected system storage on mobile devices. Error reports are transmitted without personal content.
15
Changes to This Privacy Policy
We update this privacy policy when the app or the legal situation changes. The current version is always available in the app and at www.nommly.de/datenschutz. We will inform you in the app about significant changes.