Privacy Policy

Effective date: June 20, 2026 · Last updated: July 25, 2026

NomIQ is a product of Northstar Ventures LLC ("NomIQ," "we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. We built NomIQ to be private by default — we never sell your personal data, and we minimize what we collect.

1. Information we collect

Information you provide

• Account information — your email address and, optionally, your name when you create an account.
• Profile and goals — height, weight, age, dietary goals, and preferences you enter to personalize recommendations.
• Food and meal logs — meals you log manually, by search, or by photo, along with the nutrition data associated with them.
• Lab results / biomarkers — any lab values you choose to upload (e.g., blood glucose, cholesterol). You decide what to add.
• Waitlist email — if you join our launch waitlist, we store your email address solely to notify you about availability and early access.

Health data from Apple Health and Google Health Connect

With your explicit permission, NomIQ reads activity data (such as steps and active calories) and writes data you log (such as meals and weight) to Apple Health or Google Health Connect. This health data is processed on your device and is not transmitted to or stored on NomIQ servers. We do not use Apple Health or Google Health Connect data for advertising, and we never share it with third parties.

Photos and voice

When you log a meal by photo, the image is sent to our servers solely to identify food and estimate nutrition. When you log a meal by voice, the audio recording is processed to extract meal information. Neither photos nor voice recordings are used to identify you, stored beyond what is necessary for logging, or sold to anyone.

Third-party AI processing (OpenAI)

NomIQ uses OpenAI's API to power several AI-driven features. We ask for your explicit, in-app consent before any of this data is sent — you can review and grant (or decline) this consent from the AI features screen shown at first launch. The following data is sent to OpenAI:

• Meal photos — sent to OpenAI to identify foods and estimate nutrition.
• Voice recordings — sent to OpenAI (Whisper) to transcribe; the resulting transcript is then sent to OpenAI to parse into a structured meal entry.
• AI advisor chat messages — your messages, plus limited profile context (current weight, weight goal, recent weight trend), sent to OpenAI to generate personalized responses.
• Recipe and meal-plan prompts — your stated dietary preferences and restrictions, sent to OpenAI to generate suggestions.
• Lab report text — text extracted from lab reports you choose to upload, sent to OpenAI to extract biomarker values.

OpenAI processes this data solely to generate the response returned to the app. Per OpenAI's API data usage policy, data submitted through the API is not used to train their models. NomIQ does not share this data with any other third party.

Phone number (optional — for friend-finding)

If you choose to register your phone number to be discoverable by contacts, NomIQ converts your number into a one-way cryptographic hash (SHA-256) on your device before it ever leaves your phone. We store only the hash — the original phone number cannot be recovered from it. When you scan your contacts to find friends on NomIQ, the same on-device hashing is applied to your contacts' numbers. We never receive or store your contacts' plain-text phone numbers.

Friends and social features

If you enable the friends feature, you may set a display name and choose a wellness score visibility setting (private, friends, or public). Your display name and wellness score (if set to visible) may be shown to other NomIQ users who have your phone number in their contacts. You can change or disable this at any time in your account settings.

Information collected automatically

To keep the service reliable and secure, we may collect limited technical information such as device type, operating system version, app version, and crash diagnostics. We do not use third-party advertising or analytics trackers.

2. How we use your information

• To provide core features — logging meals, calculating macros, and syncing with your health apps.
• To generate personalized nutrition recommendations and insights.
• To send service-related communications (e.g., launch notifications if you joined the waitlist, or account messages).
• To maintain security, prevent abuse, and fix bugs.
• To comply with legal obligations.

3. Food database

Nutrition information is sourced in part from the U.S. Department of Agriculture (USDA) FoodData Central. When you search for a food, your query may be used to retrieve nutrition data; we do not send your identity along with these lookups.

4. How we share information

We do not sell your personal information. We share data only in these limited cases:

• Service providers — trusted vendors who help us operate (e.g., cloud hosting, email delivery), bound by confidentiality and data-protection obligations.
• Legal requirements — when required by law, subpoena, or to protect rights and safety.
• Business transfers — if NomIQ is involved in a merger or acquisition, data may transfer subject to this Policy.

5. Data retention

We retain your account information and logs for as long as your account is active. You may delete your account at any time, after which we delete or anonymize your personal data, except where retention is required by law. Health data stored locally on your device is removed when you delete the app or revoke permissions.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Texas residents and residents of other U.S. states with applicable privacy laws may exercise these rights by contacting us. You can also:

• Revoke health app permissions at any time in your device settings.
• Unsubscribe from non-essential emails using the link in any message.
• Request deletion of your account and data by emailing us.

7. Children's privacy

NomIQ is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

8. Security

We use industry-standard safeguards — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, but we work hard to protect your data.

9. International users

NomIQ is operated from the United States. If you access the service from outside the U.S., you understand your information may be processed in the U.S., where data-protection laws may differ from those in your country.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new version here and update the "Last updated" date. Material changes will be communicated through the app or by email.

11. Contact us

Questions about this Policy or your data? Reach us at [email protected].