Privacy & terms

Your body is your business. Here's exactly what Nomi stores, shares, and forgets.

The short version

We only store what you log.
We never sell or share your data with anyone outside the two services that run Nomi.
You can delete everything from Settings → Account at any time.

What we store

When you use Nomi, these are the tables that hold your data:

Your account — your email if you registered, a display name if you chose one, your timezone, the date you created the account. That's it. No name, no phone, no address, no birthdate.
Your logs — one row per day you logged: mood, symptoms you ticked, energy level, flow, and any note you wrote.
Period dates — the first day of each period you confirmed. Used to predict your next cycle.
Your pairing — if you're paired with a partner, one row linking your two accounts. Either of you can unpair instantly.
Push subscriptions — the browser-provided endpoint we send notifications to. Opaque; doesn't identify you to anyone else.
Notification preferences — what you opted into, quiet hours, nothing more.
Suggestion customisations — the per-symptom messages you edited or muted.

What we don't store

No analytics. No page-view counts, no click tracking, no session recording.
No third-party ad pixels. Ever.
No device fingerprints.
No IP address logs beyond what Cloudflare's edge keeps for its own infrastructure protection — we never read them and we never store them in our database.
No advertising identifiers. There are no ads.
No raw health data you didn't explicitly log. We don't connect to Apple Health, Google Fit, or any wearable.

Where it lives

Your data lives in two Cloudflare products: Cloudflare D1 (a relational database) for your logs and account, and Cloudflare KV (a fast key-value store) for short-lived tokens — magic-link tokens (10 minutes) and pairing codes (30 minutes). Both are encrypted at rest.

Who else sees it

Exactly two companies besides us:

Cloudflare — hosts Nomi, runs the code, stores the database. Standard infrastructure provider.
Resend — sends your magic-link email if you register. That's the only thing Resend ever sees; it never receives your logs.

That's it. We don't share data with anyone else, ever.

Your rights

Delete everything. Settings → Account → Reset account wipes your logs, period dates, pairing, push subscriptions, and your user row immediately. No cooling-off period. No "are you sure?" purgatory beyond one confirmation dialog.
Correct anything. Every log is editable from the calendar. Your email and timezone are editable from Settings.
Export your data. Not automated in v1 — we'll build a one-click export soon. Until then, if you want a copy of your data, email us and we'll send it.
Ask questions. Email hello@nomi.flip.sk. A human reads every message.

Retention

Your logs stay until you delete them or reset your account.
Magic-link tokens: 10 minutes.
Pairing codes: 30 minutes.
Rate-limit counters: 1 hour windows.
Cloudflare automated backups (point-in-time restore): 30 days. When you reset your account, your rows are deleted immediately; backups roll off within 30 days.

Contact

Email hello@nomi.flip.sk — a real inbox a human reads. For technical reports, file an issue on our GitHub.

Terms of use

Short version:

Nomi is provided as-is, with no warranty.
Nomi is free. There is no payment, no subscription, no trial.
You must be at least 16 to use Nomi.
Don't abuse the service (e.g. spamming pair codes to strangers). We can suspend accounts that do.
These terms and your use of Nomi are governed by the laws of Slovakia.
If we change anything here, we'll update the date below.

Changes to this page

We'll update the date below when we change anything material.

Last updated: 2026-04-20.