Nyamly

Privacy Policy

Last updated 14 September 2026

What's stored on your device only

Your meal log, water log, weight history, scan history and meal photos are stored locally on your device. Meal photos you attach to a log entry stay on your phone and are never synced to iCloud. If you turn on photo estimates, the photo you take for an estimate is sent to Google — see "Photo estimates" below.

Photo estimates (optional, on your consent)

Photo estimates let you photograph a meal and get an estimated dish name, weight, calories and macros back. This feature is off until you say yes on a dedicated screen the first time you use it, and it never runs without that consent.

What is sent: the photo you just took, reduced in size, with location and camera details removed — and, if you choose to type one, a short optional hint about the photo (up to 200 characters), sent to Google exactly as you typed it. Nothing else — not your name, your diary, your goals, your weight or anything that identifies your device, unless you type it into the hint yourself. Please don't write anything in the hint that you wouldn't want sent to Google, such as a name or a health detail.

Who receives it: Google LLC, as a processor, through the Gemini API, on servers in the United States.

How long it's kept: Nyamly does not store the photo on its own servers beyond the moment needed to process the request and return your estimate. Google keeps the prompt and its response for up to 55 days for abuse monitoring; flagged content may be reviewed by authorized Google staff. Google does not use your photos to train its models, and there is no way to shorten or opt out of that 55-day window.

What Nyamly's own server keeps: to enforce the free and paid scan limits and prevent abuse, Nyamly's server also keeps a small record for each user: a salted, scrambled version of an identifier — either your iCloud account's opaque record name, or, if iCloud isn't available, an identifier generated and stored only on your device — used as the key for your scan counters; how many estimates you've requested today and this month, how many of your free onboarding estimates remain, and the timestamps needed to enforce those limits; the version and date of the consent you gave; and a salted, scrambled version of a code identifying your device's App Attest key, used to stop one device from claiming more than one free allowance. This record never contains the photo itself or the estimate it produced — those aren't stored on Nyamly's server at all. Legal basis: performing the service you asked for, and Nyamly's legitimate interest in preventing abuse (GDPR Article 6(1)(b) and (f)).

How long Nyamly keeps it: Nyamly deletes this record automatically. Your daily estimate counts are deleted after 35 days and your monthly counts after 14 months. The record itself — the scrambled identifier, your remaining free estimates, the version and date of your consent, and the scrambled App Attest key code linked to it — is deleted once you have gone a full year (365 days) without requesting a photo estimate. You can also ask us to delete it sooner, at any time, by emailing support@nyamly.fit. Because Nyamly stores only scrambled values, Settings › Photo estimates lets you copy the identifier behind your record so you can include it in that request. Nyamly also keeps a record of your device's App Attest key itself, used to verify your device is genuine; it is deleted automatically 13 months after your device was last seen.

Transfers outside the EEA: Google LLC is certified under the EU-U.S. Data Privacy Framework, and Google's Data Processing Addendum for this service additionally incorporates the EU Standard Contractual Clauses as a fallback safeguard. A copy of that addendum is available at business.safety.google/processorterms.

Legal basis: your explicit consent (GDPR Article 6(1)(a) and, because a meal photo can incidentally reveal special-category information, Article 9(2)(a)).

Your choice: you can decline or turn photo estimates off at any time in Settings › Photo estimates, as easily as you turned it on. Declining or withdrawing costs you nothing else in the app — barcode scanning, search and manual logging keep working exactly as before. Withdrawing stops future photos from being sent; it can't recall photos already sent before you withdrew.

Apple Health

If you enable it, Nyamly writes your logged weight, and the calories, protein, fat and carbohydrates from your meal log (including the food's name, attached to the calorie entry), and the water you log, to Apple Health (HealthKit), and reads your weight and your recent workouts back from Health so the app can stay consistent with what you already track there. Health data stays on your device and inside Apple's Health system — Nyamly's servers never see it, but any other app you've granted Health access to can see what Nyamly writes there. You can revoke this permission at any time in iOS Settings → Privacy → Health.

Typed-text estimates

If you type a dish description instead of taking a photo, only that typed text is sent to Google's Gemini API to get an estimate back — no photo is sent, since none was taken. Everything under "Photo estimates" above about who receives it, how long it is kept, and your rights applies the same way to a typed description.

Analytics, crash reporting and subscriptions

Firebase Analytics and Crashlytics (Google LLC): once you consent on the in-app analytics prompt, the app sends Google Analytics usage events (such as which screens you open and which features you use) and, if the app crashes or hits a handled error, a crash or error report, so Nyamly can see what's working and fix bugs. Collection is off by default and only turns on after you say yes. You can turn analytics off at any time in Settings, as easily as you turned it on — that stops future events and reports from being sent; it can't recall ones already sent. You can also lodge a complaint about this processing with your local data protection authority (see "Data deletion" below for that right in full). No advertising identifiers or ad-personalization data are collected.

RevenueCat: if you purchase Nyamly Pro, RevenueCat processes and validates the subscription with the App Store on Nyamly's behalf, so the app can tell whether your account is subscribed. It receives a pseudonymous identifier that Nyamly's server derives for your account (not tied to a single device) and your purchase/subscription status — not your name, email or payment details, which Apple handles directly.

What leaves your device

Barcode lookups and food search queries are sent to Nyamly's backend to retrieve product data (from Open Food Facts and the other sources listed on the homepage). The app authenticates these requests using Apple's App Attest, not an account or personal profile — Nyamly does not require you to create an account or sign in.

IP address: like any web service, Nyamly's server sees the IP address your device connects from. It is written to the server's access logs for security and troubleshooting. In addition, when your device proves to Nyamly's server that it is a genuine copy of the app (Apple App Attest — normally once per install), a salted, scrambled version of that address is counted for up to 30 days, to stop automated abuse of the free photo estimates. The address itself is never stored by that check. Legal basis: Nyamly's legitimate interest in keeping the service secure (GDPR Article 6(1)(f)). Access logs are kept for 14 days.

What Nyamly does not do

• No account creation or sign-in is required to use the app.
• No advertising SDK is currently integrated into the app.
• No data is sold to third parties.
• No personal health information is stored in iCloud.

Data deletion

Deleting the app removes all locally stored data (meal log, water, weight history, scan history, photos). To request deletion of any data Nyamly's backend may hold associated with your device, email support@nyamly.fit.

If EU/UK/EEA data protection law applies to you, you also have the right to: access the data Nyamly's backend holds about you; have inaccurate data corrected; request restriction of, or object to, processing based on Nyamly's legitimate interest; and receive, in a portable format, the data you provided. Email support@nyamly.fit to exercise any of these. You also have the right to lodge a complaint with your local data protection authority.

Children's privacy

Nyamly is not directed at children and does not knowingly collect data from children.

Changes to this policy

If this policy changes, the "last updated" date above will change and the new version will be posted at this URL.

Contact

Nyamly is published by an individual, not a company:
Ihor Baranov
108 Thomas Frisby Jr Cres
Markham, ON L6C 3L2
Canada

Questions about this policy: support@nyamly.fit

← Back to Nyamly