Privacy Policy

Introduction

This Privacy Policy explains how NUME GROUP LLC collects, uses, and shares information when you use NÜME. It describes the data we process and the service providers we use to operate the App.

1. Who is responsible

NUME GROUP LLC, a Florida limited liability company, is responsible for personal information processed through NÜME. Website: numedaily.com. Email: help@numedaily.com. Mailing address: 255 S Orange Avenue, Suite 104-2192, Orlando, FL 32801, United States.

If you use NÜME from outside the United States, including Latin America, your information is processed in the United States and by the service providers listed in section 8. Depending on where you live, you may have additional rights under local law. Contact help@numedaily.com to exercise them.

In-app purchases on iOS are billed by Apple Inc. under Apple’s terms. We do not receive your full card number. Google Play, if you use Android, bills under Google’s terms.

2. Information we collect

Account: name, email, sign-in identifiers (Sign in with Apple or Google if you use them), password hash if you use email, profile photo if you add one, language, timezone.

You type or confirm: height, weight, body-fat % if you enter it, goals, food logs, workout logs, notes, group chat, lab PDFs and photos.

Device: type, OS version, and a push token if you allow notifications.

Product events (for example, whether a feature was used) are stored in our own database. We do not run a third-party advertising or analytics SDK in the mobile App. This policy covers that App, not a website advertising program. The App does not respond to browser Do Not Track signals.

3. Apple Health (HealthKit) and Health Connect

Only if you turn health sync on. You can revoke it later.

HealthKit types we request to read:
workouts; steps; heart rate; resting heart rate; heart-rate variability (SDNN); sleep analysis (including stages when the source provides them); active energy; Apple exercise time; walking/running distance; weight; height; body-fat percentage; lean body mass; VO2 max; respiratory rate; sleeping wrist temperature; biological sex; date of birth.

Health Connect types we request to read:
exercise sessions; steps; heart rate; resting heart rate; sleep sessions; active calories; distance; weight; height; body fat; VO2 max.

We may write workouts you log in NÜME back to Apple Health. We do not write weight or body fat to Apple Health.

Purpose: coaching (ü), the Home screen (energy, recovery, effort), training as a source of sessions, and — only with your group settings — Liga. Sleep is used for your Home screen and for ü. Sleep is not a Liga column.

Sync: readings are sent to our API (api.numedaily.com) so your account is not limited to one device.

Revoke: iOS Settings → Health → Data Access & Devices → NÜME; or turn sync off in NÜME Settings. Android: Health Connect settings.

HealthKit and Health Connect data is not used for advertising, is not sold, and is not shared with data brokers.

4. How we use information

We use it to:

• Operate your account and show your day (Home, nutrition, training, labs)
• Let ü answer with today’s numbers and, if you send one, a menu or plate photo
• Sync health readings you allowed, so coaching and history work on our servers
• Operate Groups / Liga with only the metrics you have not hidden
• Charge Premium through Apple or Google via RevenueCat (subscription status, not your card)
• Send email (verification, reset) and push (morning recovery, meal or workout reminders, group) if you leave those on
• Understand, in our own database, whether a feature works, and to fix bugs

We do not sell your health data. We do not sell your information to advertisers.

5. Groups and Liga

Joining a group is optional. Members of that group see your display name, avatar if any, messages you send, and Liga fields you have not hidden.

Liga fields: recovery number, daily effort (0–100), today’s exercise kcal. Not sleep. You can hide each; hidden is shown as private, not as a zero.

Optional, off until you turn them on: streak, challenges, nutrition details, weight.

Joining is consent for those members to see what you left visible. Other members are not NÜME staff.

6. Labs

If you upload a blood-work PDF or photo, we store the file and the extracted markers to show educational context in the App and, if you ask, in ü.

Educational only. Not a diagnosis. Not a substitute for a physician. Not for emergencies.

7. AI (ü) and OpenRouter

To generate a reply, we send relevant context (what you logged, synced health summaries, a photo you attached, lab markers you uploaded) to our servers and to OpenRouter (openrouter.ai).

OpenRouter routes the request to a model provider. Models used today, depending on the feature: Google Gemini 2.5 Flash (including Premium Flash and vision for menu or plate photos), with fallbacks that may include OpenAI (GPT-4o / GPT-4o-mini) and Anthropic (Claude 3.5 Sonnet). Voice synthesis uses OpenRouter’s speech endpoint.

OpenRouter states that it does not train on our prompts unless we opt in; we have not opted in. We do not train our own models on your health data. Our OpenRouter workspace is configured so requests are not routed to paid or free endpoints that train on request data, and not to free endpoints that publish prompts.

We keep ü conversation history on your account so you can re-read it, until you delete the account (section 11). We do not train our own models on that history.

ü is not medical advice.

8. Service providers

To operate NÜME we use:

• Railway — hosts the API (api.numedaily.com).
• Neon — Postgres database.
• Cloudflare R2 — photos (profile, meals, labs, group covers). Production bucket: nume-uploads.
• OpenRouter — AI gateway; then Google, OpenAI, and/or Anthropic as model providers (section 7).
• Apple Inc. — App Store / Apple ID billing, HealthKit, Sign in with Apple, push via APNs.
• Google — Sign-In if you use it; Health Connect on Android; Google Play billing if you subscribe on Android.
• RevenueCat — maps the store purchase to Premium on your NÜME account.
• Expo (EAS) — Expo push tokens so we can notify you.
• Resend — transactional email (for example, verification and password reset). Mail is sent as NÜME; replies go to help@numedaily.com.
• RapidAPI / ExerciseDB — public exercise catalog for training cards, not your health log.

We do not use advertising SDKs. If we add a new service provider, we will update this section.

We may also disclose information if the law requires it (a valid court order or subpoena, for example), to protect someone’s physical safety, or to investigate fraud or abuse of the App. We will try to notify you unless the law forbids it.

If NUME GROUP LLC is sold, merged, or transfers the App, personal data needed to keep operating NÜME may go with the successor, still under this policy (or a successor policy we will present in the App).

9. We do not sell health data

We do not sell personal data or health data to advertisers, brokers, or anyone else. We do not share personal information for cross-context behavioral advertising. There is no third-party advertising SDK in the mobile App. NÜME is supported by subscriptions, not by selling your information.

If you want written confirmation that we do not sell or share your information, email help@numedaily.com.

If a U.S. state privacy law gives you rights to know, access, correct, delete, or opt out of sale or sharing, you can use the App and help@numedaily.com as described in section 10. We will not treat you differently for asking.

10. Your control

Correct profile and logs in the App.

Delete the account in Settings → Delete account.

Request an export by emailing help@numedaily.com.

Turn off notifications in Settings, and health sync as described in section 3.

Those paths are available wherever you live. Depending on where you live, you may have additional rights under local law. Contact help@numedaily.com to exercise them.

App Store and Google Play privacy labels, when published, should match this policy.

11. Retention

We keep account data while the account is open. After you delete the account, personal data, logs, measurements, coach messages, group messages tied to you, and photos are targeted for permanent deletion within 30 days, except records the law or the stores require us (or Apple or Google) to keep, such as a purchase receipt we never fully held.

Canceling Premium in the store does not by itself delete the NÜME account.

12. Children

NÜME is not for anyone under 16. It is not directed at children under 13 (COPPA). We do not knowingly collect their data. If we learn that we did, we delete the account and the data we have on it.

13. Where data goes

Traffic to our API uses TLS. Email-account passwords are stored hashed.

The API, database, file storage, and AI gateway are United States and global cloud services (section 8). If you use the App from outside the United States, your information is processed in the United States and by the service providers listed in section 8.

NUME GROUP LLC is not a HIPAA covered entity or business associate. Lab files you upload are not protected health information under HIPAA. This policy governs that data.

If we learn of a security incident that applicable U.S. law requires us to report, we will notify you (typically at the email on the account) as that law requires.

14. Changes

We may update this policy. Material changes will be presented in the App. Continued use after that notice is acceptance, except where applicable law requires a new consent for health data.

15. Contact

help@numedaily.com

NUME GROUP LLC
255 S Orange Avenue, Suite 104-2192, Orlando, FL 32801, United States

16. Copyright notices (DMCA)

The service provider is NUME GROUP LLC. If you believe user-uploaded material in NÜME (photos, PDFs, messages) infringes your copyright, send a notice to NUME GROUP LLC at help@numedaily.com and 255 S Orange Avenue, Suite 104-2192, Orlando, FL 32801, United States.

The designated agent for NUME GROUP LLC is listed in the U.S. Copyright Office DMCA directory. Notices sent to the email and mailing address above will be received. The full notice procedure is in the Terms of Service.