Privacy Policy

Summary

This policy explains how onechunk (“we”) handles information when you use the NomPal app for iPhone and Android (the “App”) or these web pages. NomPal has no accounts, and what you log stays on your phone. The App sends food photos to be analyzed, checks purchases with RevenueCat, and keeps a daily count of analyses on our server, as described below.

Information kept on your phone

• Your profile: age, sex, height, weight, and the goals you set.
• Your food, drink, and weight logs, with their photos and notes.
• Your settings and reminder times.

We can’t see this information. Deleting the App removes it from your phone. If you back up your phone (iCloud or a computer on iPhone, Google on Android), Apple or Google may keep a copy according to your backup settings.

Apple Health and Health Connect

If you choose to add calories burned to your daily goal, the App asks to read your active energy from Apple Health on iPhone or Health Connect on Android. It reads only that, writes nothing, and uses it on your phone to adjust the day’s targets. Health data never leaves your phone, is never used for advertising, and is never shared.

Photo analysis

When you take or choose a food photo, the App sends the photo, and any note you add, to our server on Cloudflare. Our server passes them to OpenRouter, which runs Google’s Gemini model to estimate the food and its nutrition, and returns the estimate to the App. When you ask for a correction, your note and the earlier estimate are sent the same way.

Our server doesn’t store photos, notes, or estimates. OpenRouter and Google process them under their own policies: OpenRouter’s Privacy Policy and Google’s Privacy Policy.

Our server

Photo analysis is for NomPal Pro subscribers, with a daily limit. To check both, each request carries a pseudonymous ID that RevenueCat creates for the App. For each ID, our server stores how many photos were analyzed each day and whether the subscription was active when last checked. Cloudflare processes your IP address to deliver requests.

Purchases and subscriptions

Apple or Google processes purchases and payment information. We never receive your card details. We use RevenueCat to check your plan and restore purchases; it receives the App’s pseudonymous ID and the purchase and subscription information needed for that. See Apple’s, Google’s, and RevenueCat’s privacy policies.

Camera, photos, and notifications

The App uses the camera to take food photos and reads only the photos you pick from your library. Reminders and “your photo is ready” alerts are scheduled on your phone, and nothing about them is sent to us.

No ads or tracking

The App has no advertising and no third-party analytics. We don’t sell your information, combine it with information from other companies, or track you across other companies’ apps and websites.

Support requests

If you email us, we receive your email address and what you choose to send, and use them to answer you. Mail to support@nompal.app is forwarded by Cloudflare to an inbox hosted by Google.

These web pages

Cloudflare serves these pages and processes the basic connection information needed to deliver and protect them, such as your IP address. They use no analytics or cookies.

Retention

Information in the App stays until you delete it or the App. We keep daily counts and subscription checks only as long as the daily limit and subscription check need them, and support emails as long as needed to resolve your request and meet legal obligations. Apple, Google, and RevenueCat keep purchase records under their own policies. Our providers may process information outside your country.

Your choices and requests

You can turn off the App’s access to Apple Health or Health Connect, the camera, photos, and notifications at any time in your phone’s settings. Deleting the App removes its data from your phone. For questions or requests about information we handle, email support@nompal.app. Depending on where you live, you may have other privacy rights.

Children

NomPal isn’t directed to children under 13, and we don’t knowingly collect information from them. If you believe a child has sent us information, email us.

Changes

We’ll post changes to this policy here with a new date.