1. About nomi

nomi ("we", "us", "our") is a loyalty card platform connecting customers with independent cafés. This Privacy Policy explains how we collect, use, and protect your personal information when you use nomi.

By using nomi you agree to the collection and use of information as described in this policy.

2. Information we collect

Account information

When you create an account we collect your name, email address, and optionally your suburb.

Loyalty & usage data

We record your loyalty card stamps, reward redemptions, promo redemptions, and which cafés you visit through the app. This is necessary to provide the core service.

Location data

The Map feature accesses your device location only while the map is open and only to show nearby cafés. We do not track your location in the background and do not store precise location history.

Push notification tokens

If you enable push notifications, we store a device token to deliver café promotions and updates to you. You can disable notifications at any time through your device settings.

Device & log data

We automatically collect basic technical data (device type, OS version, app version, crash reports) to fix bugs and improve the app. This data is not linked to your identity.

3. How we use your information

We use your information to:

• Create and manage your account
• Record and display your loyalty stamps and reward redemptions
• Show you relevant cafés and promotions
• Send push notifications about new promotions from cafés you follow (with your consent)
• Send account-related emails (e.g. password reset)
• Improve app performance and fix issues
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising outside of the nomi app.

4. Third-party services

We use the following trusted providers to operate nomi:

• Supabase — secure database and authentication (data stored in Australia/EU)
• Mapbox — map rendering (your location is sent to Mapbox only while using the map)
• Expo — push notification delivery (device token shared only to send notifications you have opted into)

Each provider has their own privacy policy. We only share the minimum data necessary for each service to function.

5. Data retention

We retain your account and loyalty data for as long as your account is active. If you delete your account, your personal data is permanently removed within 30 days. Anonymised, aggregated data may be retained for analytics.

6. Your rights

You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at hello@nomistamps.com or use the Delete Account option in Settings.

7. Children's privacy

nomi is not directed at children under 13. We do not knowingly collect personal information from children under 13. Contact us at hello@nomistamps.com if you believe a child has provided their information and we will delete it promptly.

8. Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure cloud infrastructure, and access controls. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of nomi after changes constitutes acceptance of the updated policy.

10. Contact us

For any privacy questions or requests:

hello@nomistamps.com