NomNak Privacy Policy
Effective date: May 23, 2026
Last updated: June 16, 2026
NomNak (“NomNak,” “we,” “us,” or “our”) operates the NomNak mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the App.
By using NomNak, you agree to this Privacy Policy. If you do not agree, do not use the App.
1. Who we are
Controller: Matthew Hefferon
Contact: matt@nomnak.com
Website: https://nomnak.com
2. Information we collect
2.1 Information you provide
| Data | Examples | Why we collect it |
|---|---|---|
| Account | Email address, password (via our auth provider), username, profile photo | Create and manage your account |
| User content | Restaurant photos (“spots”), Love / Ok / Skip ratings, captions, saved restaurants | Core App features, feed, profile, map |
| Social | People you follow, likes on posts | Social features and notifications |
| Support & reports | In-app reports, blocks, and emails you send when contacting support | Safety, moderation, customer support |
2.2 Information collected automatically
| Data | Examples | Why we collect it |
|---|---|---|
| Location (when in use) | Approximate device location while you use search or map features | Show nearby restaurants and distances |
| Usage & diagnostics | App interactions, crash logs, device type, OS version | Operate, secure, and improve the App |
| Identifiers | Internal user ID assigned by our authentication provider | Account security and service operation |
We do not collect location in the background unless we clearly disclose and obtain permission for a specific feature in the future.
2.3 Safety, reports, and blocks
When you report content or a user, we collect the report details (what was reported, reason, optional context, your account ID, and timestamps) so we can review and moderate the service.
When you block a user, we store the block relationship so we can hide their content from you and process safety-related reports. If you unblock someone, we remove the block; related block reports may be closed in our review queue.
We process this information to operate NomNak, enforce our Terms, protect users, and meet legal obligations. Reports are accessed by authorized NomNak personnel for moderation. We retain reports and moderation records as long as needed for safety, legal, and operational purposes.
For safety concerns: matt@nomnak.com
2.4 Information from third parties
- Sign in with Apple / Google: Name and email (per your choices with Apple/Google).
- Restaurant data: Names, addresses, and place identifiers from mapping/place services when you search or select a venue.
2.5 Push notifications
If you turn on notifications in NomNak, we collect and store a device push token linked to your account. We use it to send you activity alerts, for example when someone adds you as a friend, likes your spot, or saves your spot, and to update the app icon badge with your unread activity count.
What we collect: A push notification token, your device platform (iOS), and your association with your NomNak account.
Why we use it: To deliver push notifications and badge counts for activity you already see in the in-app Activity feed.
Where it's stored: In our database, tied to your account. Tokens are removed when you sign out or delete your account.
Who helps us deliver notifications: Notifications are sent through the Expo Push Notification Service, which delivers them through Apple Push Notification service (APNs).
Your choices: You can turn off notifications anytime in iOS Settings. The in-app Activity feed still works without push notifications.
3. How we use information
We use information to:
- Provide the App (feed, profiles, passport, saves, search, map, posting, likes, follows).
- Send push notifications and badge counts for in-app activity when you opt in (see Section 2.5).
- Authenticate you and keep your account secure.
- Show content from people you follow and personalize discovery where described in the App.
- Respond to support requests and review reported content.
- Enforce our Terms of Service and protect users and the public.
- Comply with law and respond to lawful requests.
- Improve reliability, fix bugs, and develop new features.
4. How we share information
We do not sell your personal information. We share information only as follows:
| Recipient | Purpose |
|---|---|
| Service providers | Host infrastructure, authentication, storage, maps, and place search (see Section 5). They process data on our instructions. |
| Other users | Content you choose to make visible (e.g. public posts, profile, username, avatar) is shown to other NomNak users per your use of the App. |
| Legal & safety | When required by law, to protect rights and safety, or to investigate abuse. |
| Business transfers | In connection with a merger, acquisition, or asset sale, subject to this Policy. |
5. Service providers (processors)
We use trusted vendors to run NomNak. They may process data in the United States and other countries:
| Provider | Role |
|---|---|
| Clerk | Account sign-in (email, Apple, Google), session management |
| Supabase | Database, file storage for spot photos, application backend |
| Place search and restaurant metadata (Google Places) | |
| Mapbox | Map display |
| Expo Push Notification Service | Delivers push notifications via Apple Push Notification service (APNs) when you opt in |
| Apple / Google | Sign-in and app distribution platforms |
Each provider’s use of data is also governed by their own privacy policies.
6. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or port your data, or to object to or restrict certain processing.
In the App
- Profile & username: Edit in Settings.
- Delete account: Profile → Settings → Delete account. This deletes your NomNak profile and associated content in our database (including stored spot photos), then removes your authentication account.
- Location: Deny location permission in iOS Settings; you can still use many features via manual search.
- Push notifications: Turn off in iOS Settings → NomNak. The in-app Activity feed still works without push.
- Photos: Deny camera permission; you may still pick images from your library where supported.
Contact us at matt@nomnak.com to exercise privacy rights. We may need to verify your identity.
California (CCPA/CPRA): We do not sell personal information. See Section 4.
EEA/UK (GDPR): Legal bases include contract (providing the App), legitimate interests (security, improvement), and consent where required (e.g. location). You may lodge a complaint with your supervisory authority.
7. Retention
We keep information while your account is active and as needed to provide the App, resolve disputes, enforce terms, and meet legal obligations. When you delete your account, we delete or anonymize associated NomNak data within a reasonable period, except where we must retain limited information by law or for legitimate security purposes.
Backups may persist for a limited time before being overwritten.
8. Security
We use technical and organizational measures appropriate to the nature of the data (encryption in transit, access controls, etc.). No method of transmission or storage is 100% secure.
9. Children
NomNak is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact matt@nomnak.com and we will delete it.
10. International users
If you use NomNak from outside the United States, your information may be processed in the U.S. and other countries where our providers operate, which may have different data protection laws than your country.
11. Third-party links
The App may link to external sites or services (e.g. restaurant pages). We are not responsible for their privacy practices.
12. Changes
We may update this Policy. We will post the new version at https://nomnak.com/privacy and update the “Last updated” date. Material changes may be notified in the App or by email where appropriate.
13. Contact
Questions about this Privacy Policy or urgent safety issues:
Email: matt@nomnak.com
Support: https://nomnak.com/support