Privacy Policy
The short version. NomAI is an offline calorie tracker. What you log stays in a database on your phone. The AI model runs on your phone. There are no accounts, no ads, no analytics, and no NomAI servers, so we don't collect, receive, sell, or share your personal data.
Who we are
Eklavya Studios publishes NomAI, a free and open-source Android app for logging meals and estimating calories and macronutrients. This page is the privacy policy for the app and for this website. The app's source code is public at github.com/breejesh/nom.ai, so you can check what it does.
What the app stores, and where
All of the following is stored only in the app's private storage on your phone. We never receive it.
| Data | Why |
|---|---|
| Meals you log: names, food items, portions, calories, protein, carbs, fat, and the time logged | To show your daily totals, journal, and stats |
| Profile you choose to enter: name, weight, height, age, activity level, daily calorie goal | To greet you and suggest a daily calorie target |
| Settings: theme, meal reminder times, which AI model you chose | To remember your preferences |
| Coach chat history, where that feature is available (kept for 30 days) | To give the on-device coach context |
Meal and body information can be health-related. It is processed only on your device to provide the app's features.
Photos and the camera
If you scan a meal, the app opens your phone's own camera app or photo picker. NomAI does not request the camera permission. The photo you choose is resized and passed to the AI model on your phone. A camera capture is kept as a single temporary file in the app's cache and is replaced by the next one. Photos are not saved to your meal log and are never uploaded.
The on-device AI model
NomAI uses Google's Gemma 4 model through Google's LiteRT-LM runtime, which runs entirely on your phone. When you set up AI, the model file is downloaded through Google Play's asset delivery service, the same way Play delivers app updates. Google handles that download under the Google Privacy Policy. No meal text, photos, or profile information is sent with it. If you install NomAI from outside Google Play, you can import the model file yourself instead.
Backups
- Android backup. If Android backup is turned on for your phone, Android may copy NomAI's database to your Google account and restore it on a new phone. Google stores and encrypts this backup on your behalf. We can't access it. You can turn it off in your phone's backup settings.
- Manual export. "Export" creates a ZIP file of your database and opens Android's share sheet so you can save it wherever you choose, such as Google Drive or a local folder. The file is not encrypted, so keep it somewhere private. "Import" reads a file you pick and replaces the data on the phone.
Notifications and permissions
- Notifications are used only for meal reminders you turn on. They are scheduled on your phone.
- Alarms and restart (exact alarms, run at startup) keep reminders on time after a reboot or time-zone change.
- Internet is declared for Google Play's model download library. The app sends no personal data over the network.
What we don't do
No accounts or sign-in. No advertising or advertising IDs. No analytics, crash-reporting, or tracking SDKs. No selling or sharing of data with data brokers, advertisers, or anyone else. No profiling.
This website
This site is a static page hosted on Google Firebase Hosting. It sets no cookies and has no analytics. Like any web server, Firebase may keep standard access logs, such as IP address and browser type, for security and operations. Fonts are loaded from Google Fonts, which receives your IP address when you visit.
Children
NomAI is intended for adults aged 18 and over and is not directed at children. Because the app collects no personal data, we don't knowingly collect data from children. A parent who has concerns can contact us.
Your choices and rights
You control all of your data on the phone. You can edit or delete any meal, change or clear your profile, delete the downloaded AI model in Settings, or remove everything by clearing the app's storage or uninstalling. See Your data & deletion. Depending on where you live, laws such as the EU and UK GDPR or India's Digital Personal Data Protection Act give you rights to access, correct, delete, and port your data. Because we hold none of it, you can exercise those rights directly in the app. If you have a question or complaint, email us and we will reply within 30 days. You can also contact your local data protection authority.
Security
Data is kept in the app's private storage, which other apps can't read. AI processing happens on the device. Downloaded model files are checked against a known SHA-256 fingerprint before use. Your phone's screen lock and encryption protect the data at rest. Please keep exported backup files safe.
Changes
If this policy changes, we will update the date above and the copy linked from the app and the Google Play listing. If a change means data would leave your device, we will ask for your consent in the app first.