1. 我們是誰
Nomvio 由 Tsun yue Chiang（一位香港個人開發者，下稱「我們」）開發及營運。
如對本政策或你的資料有任何問題，請電郵 support@nomvio.app 聯絡我們。
2. 簡短版
- 你的飲食記錄、體重同大部分資料只留喺你部手機入面。
- 餐點相片只會喺你要求 AI 辨認嗰陣先傳送出去分析 — 我哋嘅伺服器唔會保留相片。
- 我哋冇任何分析追蹤、冇廣告、冇 tracking。
- 你嘅體重永遠唔會傳去伺服器、唔會俾拍檔睇到、唔會出現喺分享卡或者挑戰入面。冇例外。
3. 我哋處理咩資料、點解
3.1 只留喺你裝置入面嘅資料
以下資料只儲存喺你 iPhone 入面（App 自己嘅資料庫），唔會傳俾我哋：
- 飲食記錄（食物名稱、營養數值、日期、餐別）
- 你嘅體重記錄同體重趨勢
- 連續打卡日數（streak）、目標、健身模式設定、自訂食物同「我嘅餐」
- App 設定同語言選擇
刪除個 App，就會刪走晒以上所有資料。
3.2 餐點相片 — 只為 AI 分析而傳送
當你㩒掣要求分析餐點相片（或者打字記餐）嗰陣：
- 相片會經加密連線傳去我哋嘅伺服器，再轉交阿里雲通義千問視覺 AI（DashScope，新加坡）做分析。
- 我哋嘅伺服器唔儲存任何嘢：佢只係轉交相片、收返估算嘅卡路里同蛋白質／碳水／脂肪數值，再傳返俾你個 App。我哋唔會保留你相片嘅任何副本。
- 打字分析淨係會傳你打嗰段文字。
- 所有辨認結果都要你自己核對、㩒確認先會入帳 — 個 App 永遠唔會自動入帳。
3.3 拍檔同步（「同行」）— 自願開啟，先會有
拍檔同步預設係關閉嘅。如果你選擇開啟同拍檔連結，我哋嘅伺服器只會儲存：
- 你自己揀嘅顯示名稱
- 經安全雜湊處理嘅同步令牌（我哋唔會儲存任何可讀密碼 — 呢個功能根本冇密碼）
- 用嚟連結拍檔嘅邀請碼
- 你嘅打卡日子（邊幾日有記餐）同每日卡路里總數
- 你目前嘅連續打卡日數（streak），同挑戰參與記錄（邊個挑戰、開始日同日數 — 挑戰進度係用上面啲打卡摘要即時計出嚟，唔會另外儲存多啲嘢）
以下資料永遠唔會為同步而傳去伺服器 — 而且我哋嘅伺服器就算收到都會主動丟棄：
- 你嘅體重
- 食物名稱同餐點詳情
- 餐點相片
你嘅拍檔只會睇到你分享設定容許嘅嘢（例如：淨係打卡日子，或者打卡＋卡路里總數）。任何設定之下，體重都唔屬於分享範圍。
3.4 Apple 健康 — 讀取唔離開裝置；回寫屬自願開啟，預設關閉
經你授權，Nomvio 可以由 Apple 健康讀取體重、步數、活動消耗同今日嘅運動記錄（種類同時長），喺 App 入面顯示趨勢同意日活動。
- 由健康 App 讀返嚟嘅數值只留喺你部裝置，唔會傳去我哋嘅伺服器。
- 回寫功能屬自願開啟，預設係關閉嘅。 如果你開啟咗（1.2.0 或之後版本），你記低嘅餐會同時以飲食樣本（卡路里、蛋白質、碳水、脂肪）寫入你自己嘅 Apple 健康；你改餐或者刪餐，嗰邊會同步更新。關閉嗰陣，你可以揀埋刪走 Nomvio 寫入過嘅所有資料。
- Nomvio 永遠唔會讀返健康 App 入面嘅飲食資料，亦永遠唔會寫入體重。
- 回寫只係由 App 寫入你自己裝置上面嘅健康資料，成件事唔會傳任何嘢去我哋嘅伺服器。
- 你可以隨時喺 iOS 設定／健康 App 入面收回授權。
3.5 條碼查詢
當你掃描產品條碼嗰陣，淨係條碼號碼會傳去 Open Food Facts 查詢產品資料，查詢唔會附帶任何個人資料。
3.6 優惠同意食指南
個 App 會由我哋伺服器下載一個餐飲優惠清單（標題、價錢、到期日同意象圖）。下載呢個清單唔會傳送任何個人資料。如果你㩒入去睇優惠，商戶頁面會喺 App 內置瀏覽器打開；去到嗰版之後，適用嘅係商戶自己嘅私隱政策。
3.7 購買同訂閱
訂閱由 Apple 經 App Store 出售同處理。我哋永遠唔會見到或者儲存你嘅付款卡資料。Apple 會俾返訂閱狀態我哋（例如你嘅 Pro 訂閱係咪生效中），等個 App 可以解鎖 Pro 功能。
4. 我哋永遠唔做嘅事
- 我哋永遠唔會收集分析或者使用追蹤數據。Nomvio 冇內置任何分析 SDK、廣告 SDK 或者追蹤技術，亦唔會存取廣告識別碼（IDFA）。
- 我哋永遠唔會將你嘅資料賣俾或者同第三方分享作推廣用途。
- 我哋永遠唔會將你嘅體重、餐點詳情或者相片上載作儲存、廣告或者用戶分析。
- 我哋永遠唔會用你嘅相片去訓練 AI 模型。
5. 資料保留同刪除
- 裝置內資料： 留喺你部手機，直至你喺 App 入面刪除記錄，或者刪走成個 App。
- 餐點相片： 我哋嘅伺服器唔保留（只轉交分析，見 3.2）。
- 同步帳號資料： 如果你開咗拍檔同步，你嘅顯示名稱、雜湊令牌同打卡／卡路里同步資料會留喺同步伺服器，直至你要求刪除。
- 想停止同某位拍檔同步：喺 App「同行」版面用解除連結功能。解除連結只會喺雙方記錄入面移除拍檔關係，唔會刪除你嘅同步帳號。
- 想刪除成個同步帳號（顯示名稱、雜湊令牌、邀請碼同已儲存嘅打卡摘要）：請電郵 support@nomvio.app，並提供你嘅顯示名稱同邀請碼（喺「同行」版面睇到）作識別 — 同步帳號冇電郵冇密碼，邀請碼係我哋手上唯一嘅識別資料。我哋會刪除成筆帳號記錄。
6. AI 估算唔係醫療建議
所有由 AI 分析得出嘅卡路里同營養數值都係估算，可能唔準確，只供一般資訊同意人記錄用途。佢哋唔係醫療、飲食或者健康建議，亦唔可以代替醫生、營養師或者其他合資格專業人士嘅意見。包裝食物嘅權威數值請以包裝上嘅營養標籤為準；任何健康或者飲食決定，請先諮詢專業人士。
7. 兒童私隱
Nomvio 唔係為 13 歲以下兒童而設，我哋亦唔會喺知情之下收集兒童嘅個人資料。如果你認為有兒童經拍檔同步提供咗資料俾我哋，請電郵 support@nomvio.app，我哋會刪除。
8. 政策修訂
如果我哋修訂本政策，會更新呢一版同埋上面嘅生效日期。重大修訂亦會喺 App 嘅更新說明入面提及。
9. 聯絡
Tsun yue Chiang
香港 Hong Kong
電郵 Email：support@nomvio.app
1. Who we are
Nomvio is developed and operated by Tsun yue Chiang, an individual developer based in Hong Kong ("we", "us").
If you have any questions about this policy or your data, contact us at support@nomvio.app.
2. The short version
- Your meal logs, weight and most of your data stay on your phone.
- Meal photos are sent for AI analysis only when you ask for a scan — they are not kept on our server.
- We run no analytics, no ads and no tracking of any kind.
- Your weight is never sent to our server, never shown to a partner, and never appears on share cards or in challenges. Ever.
3. What data we handle, and why
3.1 On your device only
The following are stored locally on your iPhone (in the app's own database) and are not sent to us:
- Meal logs (food names, nutrition values, dates and meal groups)
- Your weight entries and weight trend
- Streaks, goals, fitness mode settings, custom foods and saved meals ("My Meals")
- App preferences and language setting
Deleting the app deletes all of this data.
3.2 Meal photos — sent only for AI analysis
When you tap to analyse a meal photo (or type a meal for text analysis):
- The photo is sent over an encrypted connection to our server, which forwards it to Alibaba Cloud's Qwen vision AI (DashScope), located in Singapore, for analysis.
- Our server stores nothing: it forwards the image, receives the estimated calories and protein/carbs/fat values, and returns them to your app. No copy of your photo is kept by us.
- Text-only analysis sends only the text you typed.
- Nothing is logged until you review the result and tap confirm — the app never auto-logs a meal.
3.3 Partner sync ("Together" / 同行) — optional, only if you turn it on
Partner sync is off by default. If you choose to enable it and link with a partner, our server stores only:
- A display name you choose
- A securely hashed sync token (we never store a readable password — there is no password)
- An invite code used to link partners
- Your check-in days (which days you logged) and daily calorie totals
- Your current streak count, and challenge participation (which challenge, its start date and length — progress is computed from the check-in summaries above; nothing extra is stored)
The following are never sent to the server for sync — and our server actively discards them if a client ever tried to send them:
- Your weight
- Food names and meal details
- Meal photos
Your partner sees only what your sharing setting allows (for example: check-ins only, or check-ins plus calorie totals). Weight is not part of partner sharing in any setting.
3.4 Apple Health — reads stay on device; write-back is optional and off by default
With your permission, Nomvio can read weight, steps, active energy and today's workouts (type and duration) from Apple Health to show your trends and activity inside the app.
- Values read from Apple Health stay on your device and are never sent to our server.
- Write-back is optional and off by default. If you turn it on (version 1.2.0 or later), the meals you log are also written into your own Apple Health as dietary samples (energy, protein, carbohydrates and fat), and edits or deletions are kept in sync. When you turn it off, you can also delete everything Nomvio has written.
- Nomvio never reads your dietary data back from Apple Health, and never writes your weight.
- Write-back goes only from the app into your own Health data on your device — nothing about it is sent to our server.
- You can withdraw Health access at any time in iOS Settings / the Health app.
3.5 Barcode lookups
When you scan a product barcode, only the barcode number is sent to Open Food Facts to look up the product. No personal data is attached to the query.
3.6 Deals and guide content
The app downloads a list of food deals (title, price, expiry date and images) from our server. Downloading this list sends no personal data. If you tap a deal, the merchant's page opens in an in-app browser; the merchant's own privacy policy applies to that page.
3.7 Purchases
Subscriptions are sold and processed by Apple through the App Store. We never see or store your payment card details. Apple provides us with subscription status (for example, whether your Pro subscription is active) so the app can unlock Pro features.
4. What we never do
- We never collect analytics or usage-tracking data. Nomvio contains no analytics SDKs, no advertising SDKs and no tracking technology, and does not access the advertising identifier (IDFA).
- We never sell or share your data with third parties for marketing.
- We never upload your weight, meal details or photos for storage, advertising or profiling.
- We never use your photos to train AI models.
5. Data retention and deletion
- On-device data: kept on your phone until you delete entries in the app or delete the app itself.
- Meal photos: not retained by our server (forwarded for analysis only — see 3.2).
- Sync account data: if you enabled partner sync, your display name, hashed token and check-in/calorie sync data remain on our sync server until you ask for deletion.
- To stop syncing with a partner: use the unlink option in the app ("Together" page). Unlinking removes the partnership on both sides only — it does not delete your sync account.
- To have your whole sync account deleted (display name, hashed token, invite code and stored check-in summaries): email support@nomvio.app and include your display name and your invite code (shown on the "Together" page) so we can identify the account — sync accounts have no email address or password, so the invite code is the identifier we hold. We will delete the account record.
6. AI estimates are not medical advice
All calories and nutrition values produced by AI analysis are estimates. They may be inaccurate and are provided for general information and personal tracking only. They are not medical, dietary or health advice, and are not a substitute for advice from a doctor, dietitian or other qualified professional. Always check packaged food labels for authoritative values, and consult a professional about any health or dietary decision.
7. Children
Nomvio is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us data through partner sync, contact support@nomvio.app and we will delete it.
8. Changes to this policy
If we change this policy, we will update this page and change the effective date above. Significant changes will also be noted in the app's release notes.
9. Contact
Tsun yue Chiang
Hong Kong
Email: support@nomvio.app