1. Introduction

Welcome to Nomia ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our community event and meal planning application.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Create or join community groups
• Participate in events or meal planning
• Send messages or communicate through the platform
• Contact us for support

This personal information may include: name, email address, date of birth (for age verification), profile information, phone number (when voluntarily provided for group directories), physical address (when voluntarily provided for group profiles), children's first names and birthdays (when voluntarily provided for group profiles), and any content you choose to share within the application.

Usage Information

We use Firebase Analytics to automatically collect certain usage information when you use our application, including app sessions, screen views, device model, operating system version, and general engagement metrics. This data is collected in aggregate and does not directly identify you.

Device Identifiers

On Android devices, Firebase Analytics may access your device's Advertising ID (GAID) for analytics attribution purposes. This identifier is used solely for understanding how users find and engage with our app — it is never used to serve advertisements.

Push Notification Tokens

If you enable push notifications, we collect a device token through Firebase Cloud Messaging (FCM) solely to deliver notifications about events and activities in your groups.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process your registration and manage your account
• Facilitate community interactions and event planning
• Send you notifications about events and activities in groups you belong to
• Respond to your comments, questions, and requests
• Improve our services and user experience based on feedback
• Analyze app usage patterns to identify popular features and areas for improvement
• Comply with legal obligations

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy:

• Within Your Community Groups: Information you share within groups is visible to other group members
• Essential Service Providers: We share information only with essential service providers necessary to operate our application:
  • Supabase (database hosting and user authentication)
  • Firebase Analytics by Google (app usage analytics — Google Privacy Policy)
  • Firebase Cloud Messaging by Google (push notification delivery)
  • Netlify (web application hosting)
• Legal Requirements: We may disclose information when required by law or to protect our rights and safety

5. Analytics and Advertising Identifiers

Nomia uses Firebase Analytics to understand how our app is used and to improve the experience. Firebase Analytics may collect the following:

• App usage events (e.g., screen views, session duration, feature engagement)
• Device information (model, operating system version, app version)
• Android Advertising ID (GAID) for analytics attribution

Important: Nomia does not serve advertisements. The advertising identifier is used solely for analytics attribution (understanding how users discover our app). We do not use it for ad targeting, behavioral profiling, or any advertising purpose.

Analytics data is processed by Google under their Privacy Policy. You can learn more about how Google uses this data at How Google uses information from sites or apps that use our services.

Your Choices

You can reset or delete your Android Advertising ID at any time through your device settings (Settings → Privacy → Ads). Doing so does not affect the functionality of the app.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encrypted Data Transmission: All data is transmitted over secure HTTPS connections
• Enterprise Database Security: Your data is stored using Supabase's enterprise-grade security infrastructure with encryption at rest
• Secure Hosting: Our application is hosted on Netlify's secure, globally distributed infrastructure
• Authentication Protection: User authentication is managed through Supabase's secure authentication system
• Access Controls: Strict database access controls ensure only authorized systems can access your data

However, please note that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access and receive a copy of your personal information
• Update or correct your personal information
• Delete your account and personal information (see Data Retention section for details about group content)
• Withdraw consent where processing is based on consent
• Object to processing of your personal information

8. Data Retention

Personal Information

We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Account Deletion and Group Content

When you delete your account, we will remove your personal profile information and direct references to your identity. However, content you created within groups (such as messages, events, meetings, comments, and other contributions) will remain as part of the group's collective content and will continue to be available to group members.

This content becomes part of the group's shared history and community record. Your name and direct personal references will be anonymized or removed from this content, but the content itself will remain until:

• The group is completely deleted by a group administrator
• Individual content items are manually removed by group administrators
• We are legally required to remove specific content

This policy ensures continuity of group discussions, event planning, and community activities while respecting your right to personal data deletion.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We require users to be at least 13 years old to create an account, and we verify age during the registration process through date of birth collection. We do not knowingly collect personal information directly from children under 13.

Information About Children Provided by Parents

Parents or guardians may voluntarily choose to share limited information about their children (such as first names and birthdays) in their group profiles to facilitate community planning activities. This information:

• Is provided entirely at the parent or guardian's discretion
• Is limited to non-sensitive information (first names and birthdays only)
• Is visible only to members of the groups where it is shared
• Can be updated or removed by the parent or guardian at any time
• Is subject to the same security measures as all other personal information

If we learn that we have collected personal information directly from a child under 13 without parental consent, we will promptly delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: