The short version: Nibbly collects only what it needs to run your calorie ring and account. Your meals, weight, and photos are private to you. We do not sell your data, and we do not use it for third-party advertising or cross-app tracking.
On this page
This Privacy Policy explains how Nibbly ("Nibbly", "we", "us", or "our") collects, uses, and protects your information when you use the Nibbly mobile application and this website (together, the "Service"). By using the Service, you agree to the practices described here.
1. Who we are
Nibbly is operated by Lyubomir Genchev, located at Suvorovo, Varna (Bulgaria). For the purposes of the EU General Data Protection Regulation (GDPR), we are the "data controller" of your personal data. You can reach us anytime at nibblyapp@gmail.com.
2. Information we collect
We collect the following categories of data, all of which are linked to your account:
| Category | Examples | Why |
|---|---|---|
| Account data | Email address, display name, authentication identifier. If you use Sign in with Apple, we receive the identifier Apple provides and, if you allow it, your name and a relay email address. | Create and secure your account |
| Health & fitness data | Age, sex, height, current and goal weight, activity level, calorie and macro goals, logged meals and their nutrition values, daily progress, streaks. | Power the core calorie-ring and streak features |
| Meal photos | Photos you take or select for AI scanning, and the estimates derived from them. | Estimate the calories and macros of your meal |
| Purchase data | Subscription status, plan, trial state, and renewal/expiration events (via our payment partner). We never receive or store your full payment card details. | Manage your subscription and unlock access |
| Usage & analytics | First-party product events such as onboarding steps viewed, meals logged, rings closed, and milestones reached, plus a device-generated anonymous identifier used before you sign in. | Understand and improve the product |
| Technical data | Device type, operating system version, app version, and diagnostic information needed to run and troubleshoot the app. | Reliability and support |
We do not knowingly collect precise location, contacts, browsing history, or data from other apps, and we do not track you across other companies' apps or websites.
3. How we use your information
- To provide the Service — calculate your calorie goal, fill your ring, track streaks, and store your meals and progress.
- To run AI meal scanning — process your meal photos to return editable calorie and macro estimates.
- To manage your subscription, free trial, and premium access.
- To improve and develop features using aggregated, first-party product analytics.
- To provide customer support and respond to your requests.
- To keep the Service secure, prevent abuse, and comply with legal obligations.
We do not use your health data to make automated decisions that produce legal or similarly significant effects about you.
4. Legal bases for processing (GDPR)
Where the GDPR applies, we rely on the following legal bases:
- Contract — to deliver the Service you sign up for (your account, ring, and subscription).
- Consent — for processing health-related data you provide and meal photos you submit for AI analysis. You can withdraw consent at any time by deleting the data or your account.
- Legitimate interests — to secure the Service, prevent fraud, and improve our product using first-party analytics, balanced against your rights.
- Legal obligation — where we must retain or disclose data to comply with law.
5. Who we share your information with
We do not sell your personal data. We share it only with the service providers that make Nibbly work, and only as needed to operate the Service:
6. Service providers (sub-processors)
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database, and secure storage of meal images | Account, health & fitness data, meal photos |
| RevenueCat | Subscription and entitlement management | Purchase data, user identifier |
| Apple | App distribution, Sign in with Apple, and in-app purchases | Account identifier, purchase data |
| AI provider Google Gemini | Analyzing meal photos to estimate nutrition | Meal photos submitted for scanning |
Each provider processes data on our behalf under contractual data-protection terms. We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the Service.
Note on AI scanning: when you use AI meal scanning, the photo you submit is sent to our AI provider to generate an estimate. Only submit photos of food you're comfortable processing this way. You can always log meals manually without using a photo.
7. How long we keep your data
We keep your data for as long as your account is active. If you delete a meal or photo, it is removed from your active records. If you delete your account, we delete or irreversibly anonymize your personal data within 30 days, except where we must retain limited records to comply with legal, tax, or accounting obligations, or to resolve disputes.
8. Security
We protect your data with industry-standard measures, including encryption in transit, row-level access controls that restrict each user's data to that user, and scoped storage so you can only access your own meal images. No method of transmission or storage is 100% secure, but we work to protect your information and continuously improve our safeguards.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data (much of which you can edit directly in the app).
- Delete your data or your entire account.
- Object to or restrict certain processing.
- Withdraw consent at any time, without affecting prior processing.
- Request a portable copy of your data.
- Lodge a complaint with your local data protection authority.
You can delete your account from within the app (Profile & Settings) or by emailing nibblyapp@gmail.com. We respond to verified requests within the timeframe required by applicable law.
10. Children & age requirement
Nibbly is not directed to children. Because the app handles health and body-metric data, you must be at least 16 years old to create an account. We do not knowingly collect data from anyone under 16. If you believe a minor has provided us data, contact us and we will delete it.
11. International data transfers
Your data may be processed in countries other than your own, including where our service providers operate. Where data is transferred out of the European Economic Area or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
12. US state privacy rights
If you are a resident of California or another US state with a comprehensive privacy law, you have the right to know what personal information we collect, to request deletion, and to correct it. We do not sell or "share" personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA), and we do not process it for cross-context behavioral advertising. To exercise your rights, email us using the address below.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the revised policy.
14. Contact us
Questions about this policy or your data? Contact us at nibblyapp@gmail.com, or write to Lyubomir Genchev, Suvorovo, Bulgaria.