Privacy Policy

Last updated 30 October 2026

NomaSports works with data about your body. That makes this document part of the product, not paperwork. It describes what we actually store, and it is written against the code — not against what a policy usually says.

NomaSports is run by R.SPACE TECHNOLOGY LTD, a company in the United Arab Emirates. "We" in this document means that company.

In short

You can use NomaSports without giving us anything: no email, no sign-up. We store what you log and what you allow us to read. We never write to Apple Health. We do not use advertising, we do not run third-party analytics, and we do not sell anything to anyone. Features that use an outside AI service stay off until you allow them (see "Who else sees it").

What we collect

Without an account. Open the app and we create an anonymous profile so your sets have somewhere to live. It holds no name, no email and no phone number. If you later create an account, the same profile becomes yours — your history is not migrated or reset.

If you sign in to an account you already had — since 21 September 2026. Then the anonymous profile cannot become that account (one identity belongs to one profile), so instead what you recorded as a guest on this phone moves into your account: sets, sessions, food, water, protein answers, check-ins, symptoms, weight before and after training, supplements, the readings and workouts from Apple Health. Where your account already has an entry for the same day or the same set, the account's entry stays and the guest's copy is dropped. The anonymous profile is then deleted. The move needs a one-time ticket the app takes while you are still the guest; it expires in fifteen minutes and cannot be used to take anyone else's data. Before that date the guest's records simply stayed behind on the phone, and the app said so.

Account. Email address, and a password we never see in readable form. If you sign in with Apple or Google, we receive the identifier that provider returns — with Apple that may be a relay address rather than your real one. With Apple we also keep a token, only so that we can disconnect Sign in with Apple when you delete your account.

About you. Sex, training experience, goal and interface language. Sex is asked because starting loads depend on it; it can be skipped. If you fill them in: year of birth, height and target weight, used for your daily energy and protein.

Your time zone, read from your phone and updated automatically when it changes. Without it, "today", the days since your last session and the quiet hours for notifications would follow someone else's clock. We keep only the current zone, not a history of where you have been. Your phone alone remembers the last change, so the app can tell you that your clock moved; deleting your account erases that too. For two days after such a change, when the app asks for today's weight it also tells our server by how many hours the clock moved — only the number of hours, never the zones or a place. The server uses it for that one answer and does not store it, and it is never sent to an AI provider.

Training. Sessions and sets: movement, weight, repetitions, duration and time. This is the memory the app is built around. Since 29 September 2026 that includes load outside the gym — a run, a ride, a swim, an hour on court — with its length and distance, whether you type it, say it ("ran five") or it comes from Apple Health. A short spoken phrase like that is understood on the phone; only the kind, minutes and kilometres are saved.

Weight before and after training, if you enter it — since 29 September 2026. Two numbers for a day. The app shows you the difference and nothing more: it does not turn it into advice. They sit in an isolated table your app can only reach through two narrow functions that check it is you, and go to no model and no vendor.

What you answer in one tap. Once a day the app may ask whether you got enough protein, or how a muscle group feels after your last session — fresh, sore, or very sore. One tap, and ignoring it is a valid answer. These answers change what the app suggests next; they never change the weights it calculates for you.

The morning check-in, only if you open it yourself. From 4 to 21 September 2026 the app offered a short morning check-in every day: energy, mood and soreness on a five-point scale, plus cramps and bloating. Since 21 September it is not offered any more. It stays reachable from "How you are today" on your own page, for the mornings you want to note something; nothing prompts you, and nothing counts the mornings you don't. We stopped offering it because the answer changes no weights or targets (it only feeds the comparisons in your Body Book and experiments, which only you see) and a form that appears every day is the fastest way to make people stop looking. What replaces it — a single yes/no when your measurements disagree with each other, at most once every few days — will be described here before it ships.

Heavy after food or drink — since 20 September 2026. A third tick joined the two: whether what you ate or drank sat heavily. It is the first answer in a loop we are building — the app says what to eat and drink around training, you say in one word how it went. It lives in the same isolated table as cramps and bloating, reachable only through the same narrow function, goes to no model and no vendor, and today changes nothing: it is recorded and shown back to you. When it starts to change what the app suggests, it will be because a named specialist signed the rule, and this paragraph will say so first.

Until that date this section said there was no daily form, no mood diary and no symptom log. That stopped being true the day the check-in shipped, and we are saying so here rather than quietly deleting the sentence.

Energy, mood and soreness are stored in their own table that only you can read. Cramps and bloating are kept apart from even that — in an isolated table your app has no direct access to at all: it can only reach them through one narrow function that checks it is you. We separated them on 4 September 2026, before a single row existed, because for the people this app is built for those two are cycle-adjacent, and cycle data has lived apart here from the first day. They go to no model and no vendor. Today they change nothing at all in the app — not your weights, not the order of what's suggested; they are recorded and shown back to no one but you. If that ever changes, this paragraph changes first.

Supplements, if you list them. What you tell us you take — the kind from a fixed list, the name you write on it, and how many times a day. We use it for one thing: telling you when you have named the same substance twice. We do not know what is inside any product and never guess at it. This is health data, it sits in its own table with the same owner-only access, and it goes nowhere outside.

From Apple Health, with your permission. Sleep, heart rate variability, resting heart rate, body weight, steps and exercise minutes. Since 29 September 2026 also your workouts from other apps and watches, except strength sessions: for each one the kind (run, ride, swim, court, walk and so on), when it started and ended, its length and distance — not the route, not your heart rate during it, not the app that recorded it. For steps, the first time you connect we also read the last three weeks, so your usual number of steps is known from the start instead of three weeks later. We only read. We never write anything into Health.

Read on your phone and kept there. Some things the app works out only on the phone and never sends anywhere: your steps hour by hour (to notice long stretches without steps), the times you went to bed over the last two weeks (to show your usual bedtime), and when you last logged caffeine, if another app writes it into Health (to show how long before sleep that was). These describe your daily routine, so they stay with you.

We do read what you eat, if some other app writes it there: energy, protein, carbohydrates, fat and water. We use it to explain how what you ate landed on your sleep and your load. You already keep that diary somewhere; we would rather read it than ask you a second time. Turn those categories off in Health and everything else keeps working.

Food you log in NomaSports — since October 2026. When you photograph a plate, a label, a barcode or a supplement jar, or say what you ate, the photo or the recognised words are sent to our AI provider (OpenAI or Anthropic, see below) to read the numbers, and are not stored by us afterwards. What we keep on our server is the result you confirmed: the name, portions, calories, protein, fat, carbohydrates and the time. The app shows daily calories and protein from that log, and your supplement tick-offs with the protein and calories you entered per serving. A barcode is looked up by its digits only in the open Open Food Facts database, which receives the barcode number and our server's address, nothing about you.

From Whoop or Oura, if you connect them. Sleep, heart rate variability, resting heart rate, recovery or readiness score, steps, and the length of workouts you recorded — so the app knows you trained and doesn't ask where you have been. Plus the access tokens needed to fetch all this. Tokens are stored on our server and are never sent to your phone or anyone else. We ask those providers for nothing beyond this list: not your name, not your email, not your body measurements.

Sensitive. If you turn on cycle tracking: the start date of your last period and your average cycle length, and the moment you turned tracking on — that is your consent. Turning tracking off withdraws it: the dates and the consent are deleted, not just hidden. If you mark your periods in Apple Health, the app asks — separately, only when you turn tracking on — to read them, and works out two numbers on your phone: the day your last period started and your usual cycle length. Only those two numbers reach our server; your day-by-day record stays in Health. If you note physical limitations: the movements to avoid. These live in a separate, isolated table that the app cannot read directly — only through two narrow functions that return your own row — are excluded from any analytics, and are never sent to an AI provider.

Social and marketplace, if you use them. Your public name, username, photo and bio; posts with photos or video and their captions; comments, likes, follows and direct messages; your shop, its products and contact details; reviews and helpfulness votes; reports you send and people you block.

If you apply to be a specialist. What you write about yourself — education, years, what you work with — and, for physiotherapists and doctors, a licence number and the authority that issued it. Plus our decision on the application: its date, who signed it, and the reason if it was not accepted. Your specialisation and what you wrote about yourself become visible to everyone once the application is signed; the licence number, the issuing authority and the reason for a refusal do not — they stay between you and us. Applying is entirely your choice, and the application is deleted with your account.

Subscription, if you buy one. Apple tells us the subscription's identifier, which plan it is, whether it is active and when it runs out — and whether it was a real purchase or a sandbox test. We never see your card, your Apple ID or your name. What you paid stays between you and Apple; we only ask them whether your access is on.

Notifications. If you allow them, a device token from Apple so we can deliver a push.

Morning digest — since 29 September 2026. If notifications are on and your sleep reached the app in the last day and a half, one push between 8 and 10 in the morning your time: how you are today, in the same words the app shows, and what the day's plan says now. It is assembled on our server from codes, not written by an AI, and no AI provider sees it. We keep the text, the codes it was built from, when it was delivered and whether you opened it — in its own table, separate from the messages that invite you back, so it never counts against them. "Stop morning digests" on the notification turns it off.

Engagement. When you last trained, how long the gap is, which messages we sent you and whether you came back. This is how the app knows to write first after a break.

Crash reports. If the app closes unexpectedly, the next time you open it we send the app and iOS version, the reason it stopped and the top twelve lines of the stack, together with your account id. No screen contents, no text you typed, no training or health data. We keep the id because otherwise we cannot tell whether something breaks for one person a hundred times or for a hundred people once. There is no third-party crash SDK: this is our own code sending to our own server. You can turn it off in Settings.

Water you log yourself. One number a day: how much you drank, in millilitres, against the date. You enter it by tapping a glass — we do not read it from anywhere, and we do not infer it. It is stored with your account and used for one thing: the progress bar next to today's target. It goes to no one outside, and it is deleted with your account.

What you post in the community. Groups you start or join, challenges you enter and the progress you type into them, meet-ups you create or say you are going to — with the place and time you wrote. Other signed-in people see this: that is the point of it. People who are not signed in do not, and anyone you have blocked does not. Progress in a challenge is a number you type, not something we measure.

Community rules. Before your first post, comment, message, review or group we ask you to accept the community rules and to confirm that you are 16 or older. We keep that answer with the version of the rules you saw, so that we can show it if it is ever needed.

What we do not collect

Location. Your contacts. Advertising identifiers. There is no analytics SDK and no advertising SDK in this app. Our own code has no third-party dependencies at all; the one exception is Apple Pay, which uses Stripe's own library — see "Who else sees it" below. We do read the food you log in other apps through Health (see above), but we never ask you to count it. If you set a goal, the app shows a rough daily calorie estimate, as “about N kcal”, and never for people under 18.

Voice. When you log sets by voice, recognition runs entirely on your iPhone. The audio never leaves the device and never reaches us.

A short phrase that names the exercise, such as "bench press forty by twelve", is understood on the phone, and only the exercise, weight and repetitions are saved. If you do not name the exercise, the phone continues the last strength exercise you logged today. If it cannot tell which exercise you mean, it asks you to name it and sends nothing. A long phrase ("three sets of twelve, then four with the dumbbells") is more than the phone can work out, so the recognised text of what you said after the command word goes to our server and on to our AI provider, which returns the sets it found. That happens only if you allowed AI services (Settings, AI services). Without that permission the text stays on the phone and nothing is written. The recording never leaves your phone, and we do not store the text. If you would rather nothing left the device at all, keep AI services off and say short phrases with the exercise name, or type the set in. Both write the same thing to your log.

Once you have allowed the microphone, it listens only in the ways you turn on.

The phone cannot tell whose voice it hears: someone next to it who says the command word can add a set, and every set can be undone. In a conversation it hears anyone near you, so use it where you are happy to be heard. iOS shows a recording indicator the whole time. You can turn the microphone off from the top of the I'M screen, from Today, from Settings, from the exercise screen or from the lock screen card. If you turn it off, it stays off the next time you open the app. Closing the app stops it. It also pauses when a call or another app needs the microphone, when the phone is very hot, or, with the screen off, when the battery is at 10% or lower and not charging. Low Power Mode alone does not stop it. After a pause because of heat or a low battery it resumes when you open the app.

Camera. A photo of a machine, a plate, a food label, a supplement jar, a cardio display or a blood-test report is sent to our AI provider to be read, and is not stored by us afterwards. We have not arranged a zero-retention agreement with the providers: what they keep, and for how long, is set by their own terms.

Blood-test reports — since 11 October 2026. If you upload a report (a photo, a PDF or a file), it is sent to be read by our AI provider. It is not kept on our server and not written to our logs. The reading is shown to you to check, and the results stay only on your phone, excluded from the cloud backup. A report usually carries your name, birth date and the lab's details; we ask the provider to read only the values, but we cannot stop the report itself from containing them — crop them out if you prefer. Signing out or deleting your account erases these results from the phone. Printed ranges (“low”, “in range”, “high”) are the ones your lab printed, not our judgement.

Spoken good morning and your answer — since 13 October 2026. If you switch it on, the greeting text with your first name is sent to a speech service (ElevenLabs) to make the voice, and the sound file is kept on your phone for a few days. It is the same voice and the same service as Noma's spoken replies, and it follows the voice you picked in Settings. Your spoken answer is recognised on the phone; only its text is sent to our server and our AI provider to work out how you feel, when you went to bed and woke up, and what you said about the night. That text is not kept on the server. Your note and tags stay on your phone; the energy, mood, soreness and sleep hours it yields are saved to your account, like a manual check-in and a manual sleep entry. If your phone has no offline dictation for your language, voice answers are switched off rather than sent to Apple.

Noma's voice — since October 2026. In Settings you can pick the voice Noma answers with out loud. Your choice is saved in your profile so it follows you to another phone. We also record which voice you picked and in which app language, with no text, to learn which voices people like; if you delete your account, that record stays without a link to you. The samples you hear while choosing are ready-made files and send nothing about you. When you ask Noma “what now?”, one phrase goes to a speech service (ElevenLabs) to turn it into a voice: a version of the advice written for speaking, without the numbers we work out from your weight. It is sent only after you have allowed AI services in the version of the text that names ElevenLabs. No name, no email, no account id goes with it. Since 23 October 2026 Noma's short spoken replies in a voice conversation (such as “Saved”, “Water added”) are voiced the same way. Since 24 October 2026 Noma can also answer in her own words (see “Talking to your assistant” below), and ElevenLabs voices those answers too, after you allow AI services in the version of the text that names them (the text of 29 October 2026). Such an answer can mention what you logged and named: food, water, workouts and their numbers. It can also say a word about your state, like "you slept less than usual", and repeat a name you said yourself. It never contains your email, your weight, your hours of sleep, your heart rate or your cycle. Your iPhone's own voice is no longer used: if the speech service is off or does not reply, Noma's answer is shown as text only. Your state summary is never read out loud; Noma says “Here's your state” and shows it. The finished audio is kept on your phone for a while so the same sentence is not ordered twice, and is erased when you sign out. The spoken good morning uses the same voice. It is the one exception to “no name goes with it”: its text carries your first name, and only when you switched the greeting on. The voices are AI-generated.

Personal experiments — since 16 October 2026. If you start an experiment (for example "no caffeine after 2 pm"), your account stores which experiment it is, when it started, how many days it runs and which days you marked as done. The comparison with your own sleep and mood is calculated on your phone from data your account already holds. Nothing is sent to an AI provider, and the result is an observation about your own days, not advice from a doctor. You can stop an experiment at any time; deleting your account deletes it too.

Widget — since 14 October 2026. The Today widget shows a summary written by the app into a folder shared only between the app and the widget on this phone: readiness, sleep, steps, today's plan and recent days. It is not sent anywhere and is erased when you sign out.

“Check with yourself” and “Report a problem”. What you write there — including how you feel, an injury, alcohol or anxiety, if you mention it — goes to a table that the owner of NomaSports can read, and is kept until you delete your account. Do not write anything there you want to keep private.

Talking to your assistant — since 24 October 2026, for a few test accounts first. The assistant is called Noma unless you give it another name (for example "Kira"). When you start a conversation, or call it by name, and say something the phone does not understand by itself, such as "hi, how are you" or "I ate this", the recognised text of that phrase goes to our server and on to Anthropic (or OpenAI) so the assistant can understand it and reply. With the phrase go these things:

Never your name, email, weight, cycle, health limits or lab results.

The last few lines of the conversation are kept only on your phone. Outside Stay in touch they are erased after ten quiet minutes or when you sign out; in Stay in touch they stay until that mode ends or you sign out. The assistant only asks for actions: log food or water, log your sleep from the times you say, open the camera, show a card with your day, find videos in the app feed, open a screen, set your goal, undo. The app carries them out the same way as the buttons, each with "Undo". If it asks for a photo, the photo is read the same way as a food photo you take yourself. We do not store the text of the conversation. Our server keeps only the time, the size of the request and its cost, and, if a provider fails, a short note about why. Short commands (a set, water, a screen) are still understood on the phone and are not sent. This needs AI services allowed in the version of the text dated 29 October 2026; without it the assistant stays silent and the rest of the app works as before. At first this is switched on only for a few test accounts; for everyone else the app works as described above.

What the assistant remembers — since 29 October 2026. If you say "remember that I have a nut allergy" or answer "yes" when the assistant asks "Remember that ...?", we keep one short line: a goal, a food preference, a habit, or something you cannot eat or do not like (an allergy can be kept this way, as a food you avoid). It is 3 to 160 characters, and we keep at most 30 per person. Our server checks that you asked; the AI model cannot write one on its own. We never keep an illness or diagnosis, a medicine, pregnancy, fasting, weight, sleep, heart rate or blood pressure, cycle, other people and their names, addresses, emails, links or phone numbers, or anything about pain or injury. The notes are stored on our server with your account. With each phrase you say, up to 12 of them go to Anthropic (or OpenAI) so the assistant can use them. Say "forget about ..." and it is deleted. You can also delete your account, and every note goes with it.

Your products — since 29 October 2026. If you photograph a label or scan a barcode and log what you ate, the assistant remembers the product by itself, so it does not have to ask every time. We keep a short name taken from your words, for example "Protein", and the numbers printed on the label. Say "don't remember this" and it does not. Say "forget my protein" and it is deleted. That means calories, protein, fat and carbohydrates per serving, per 100 grams or per package, the serving and package weight, and the barcode digits if the app read them. We keep at most 20 products. We do not keep the photo or the text of the label.

While a label is open, the app sends its name and numbers to our server with each phrase you say, so our server can count how much you ate. A label stays open for 10 minutes after you photograph it. Logging what you ate does not close it. A photo of another label, ending the conversation or signing out does. In the reply to the photo itself, the AI model sees the numbers on the label, because it has to say them to you. In the phrases that follow, it sees only the name, what the numbers refer to (100 grams, a serving or a package) and the weight of a serving and of a package.

Up to 10 saved products, with their names and numbers, go to Anthropic (or OpenAI) along with your phrase. Say "forget my protein" and the product is deleted. Deleting your account removes them all.

Form check from video — since 26 October 2026, for a few test accounts first. If you ask the assistant to check your form, or answer "yes" when it offers, you film a short video or pick one from your library. The phone cuts 6 to 12 frames out of it and deletes the file at once; the video itself and the sound never leave your phone. The frames go to Anthropic (or OpenAI) in that one reply, with the time of each frame and the name of the exercise, and they are not kept on our server: not in the database, not in files, not in logs. The first time, the app asks for a separate permission for this, and you can forget it in Settings. The assistant does not diagnose, does not predict injuries, and does not comment on your body, clothes or surroundings; if you mention pain or dizziness, it declines before any frame is sent. There are at most 10 form checks a day per person.

Questions you ask the app. In the question box you can ask a few things in your own words — why today's weight is what it is, whether to train, what to do today, why your recovery reads low, how a movement is done, what has changed. The box covers that list only: anything outside it, the box declines rather than improvises, and questions about pain, injury, medication or eating are declined without leaving your phone. Talking to your assistant is different: it takes any phrase, as described above, with its own refusals for the same topics.

Most of those answers are worked out on your device or by our own engine, with no AI involved at all. Where an AI provider is used, it is given the conclusion we already reached and short reason codes such as `short_sleep` — never your sleep hours, your heart rate variability or any other raw measurement, and never anything from the sensitive table. Its job is to put our conclusion in ordinary words; if its answer adds a number we did not supply, we discard the whole answer and you see ours. Decisions about load are never written by it.

How we use it

To tell you what to do today, to remember your working weights, to explain what your recovery means and act on it, to write to you after a break, and to run the social and marketplace features you choose to use. If you turn on "Help improve NomaSports" (below), also to make recognition more accurate. Each feature's own use is described in its section above.

Loads are calculated by a deterministic engine from a fixed table of constants — not by an AI model, and not from your personal data beyond your own training history and recovery.

### Help improve NomaSports (optional, off by default)

In Settings there is a separate switch, "Help improve NomaSports". It is off until you turn it on, and it is not part of accepting these terms. If you turn it on, when you correct what the app recognised (food, a package, a machine) we may keep the photo and your corrected answer, without your name or email, under a hidden identifier that is not shown to other people but lets us find and delete it when you ask, to make recognition and advice more accurate and to help build our own models that run on our servers.

We never take this way: blood tests, how you feel, notes, sleep, cycle, voice recordings or the contents of your journal. We do not give this material to outside companies to train their models.

We record when you turn the switch on or off and which version of this text you saw. Turning it off stops collection from that moment; to delete what was already sent, write to hello@nomasports.com. We do not collect anything this way until the feature is released; the switch records your choice in advance.

Who else sees it

AI services need your permission first. Part of NomaSports understands you and speaks to you with the help of AI services from three other companies: Anthropic, OpenAI and ElevenLabs. Before anything is sent to them, the app asks you once, on a separate screen that says what is sent, what is not and to whom. Until you say yes, nothing goes to them: our servers refuse the call, and the rest of the app (manual entry, short commands, advice with ready-made text) keeps working. You can take the permission back at any time in Settings → AI services. If we change what is sent, the app asks again.

Every company above handles your data under its own terms. We have not signed separate data-protection agreements with the AI providers and we have not arranged zero retention with them, so assume the text and pictures you send them can stay with them for a time. We do not give any of them your data to sell or to advertise to you.

Other people using NomaSports see what you deliberately publish: your public profile, posts, comments, shop, products and reviews. Your training log, your health data and your cycle data are never visible to them.

Where it is stored

On Supabase infrastructure in the Mumbai region (ap-south-1, India). Access to your rows is enforced by the database itself, on every table, so one person cannot read another's data even if the app asked it to.

What you send to the AI services (including the text that ElevenLabs turns into Noma's voice) is processed by those companies in the countries where they operate, including the United States. This means your data can leave the country you live in. We tell you so, and we ask your permission first.

How long, and how to delete it

We keep your data while your account exists. Some technical records are removed automatically. Counters of AI calls go after two days. Error reports go after ninety days. The log of refused AI calls goes after sixty days; it holds the time and the kind of refusal and, when a provider fails, a short note about why, never what you said. The log of voices played goes after 400 days; it has no text and no account id. The record of which voice people picked goes after a year. Settings → Delete account (without an account: Settings → Delete my data) removes it immediately and for good: training, workouts from Health, weight before and after training, health signals, cycle data, posts, photos and videos, shop, products, reviews, messages, the notes your assistant remembers, the products you saved with it, and the tokens of any wearable you connected. Connected providers are disconnected first. We do not keep a copy for ourselves. The database provider keeps automatic backups for up to seven days, then they are overwritten; we do not restore a deleted account from them. Material you chose to contribute under "Help improve NomaSports" is deleted with the account too.

You can also remove parts at any time without deleting the account: disconnect Whoop or Oura in Settings, revoke Apple Health access in the iOS Settings app, delete individual posts, products and reviews.

Your rights

You can ask what we hold about you, correct it, delete it, or withdraw a permission you gave earlier. Write to the address below.

Children

NomaSports is not intended for people under 16.

Changes

If this policy changes in a way that affects what we collect or who sees it, we will say so in the app before the change takes effect.

Contact

hello@nomasports.com

NomaSports is not a medical service and does not give medical advice. Its recommendations are deliberately conservative, and they do not replace a doctor or a coach.