Last updated: September 30, 2026
Noomi ("we", "us") is operated by Mehmet Fatih Demirci, an independent developer (stvy.io). Questions about this policy: hello@noomiapp.site.
This is a plain-language policy. If anything here contradicts what the app actually does, that is a bug on our side — tell us and we will fix it.
Your account. When you first open Noomi we create an anonymous account so your taste profile has somewhere to live. If you sign in with Apple we store the identifier Apple gives us and the email address Apple shares — which may be a private relay address if you chose to hide your real one.
What you tell us about your taste. Ratings, the tags you pick, notes you write, your watchlist and watched list, titles you mark as not interested or dropped, and the answers you give during onboarding: the name you want us to use, your country, your age range, what you want from Noomi, the languages you watch in, how you feel about subtitles and the topics you're interested in. Your answer to the gender question and your profile photo stay on your device; we do not receive them. This is the product; there is no version of Noomi that works without it.
How you use the app. Which titles you open, how long a card stays on screen, which recommendation you acted on, and which screen an action came from, along with your device type (phone or tablet) and iOS version. We use this to tell whether the recommendations are actually good.
What you ask the advisor. Messages you send to the AI advisor and the context we send with them (your taste profile and candidate titles).
Your preferences. Region, streaming services, content interests, and notification settings.
Subscription status. Whether you have an active subscription, handled through RevenueCat. We never see your payment details — Apple handles payment.
Crash diagnostics. When the app crashes we receive a technical report (device model, OS version, and where in the code it failed). These are not linked to your account.
| Service | What it does | What it sees |
|---|---|---|
| Supabase | Database, authentication, server functions | Your account and everything above |
| Anthropic | Powers the AI advisor, curation and written taste summaries | Your advisor messages, what you type when you ask for tonight's picks, any free-text viewing history you paste in, and a summary of your taste profile (including your country, languages and stated interests) |
| OpenRouter | Passes AI requests on to the model that answers them (Anthropic's or Google's) and keeps them working if one route is unavailable. An Anthropic model may be hosted by Anthropic, Amazon Web Services or Google Cloud | The same data as the Anthropic and Google rows, only to pass it on. OpenRouter does not keep the content of these requests |
| Google (Gemini) | Builds your personal selection of picks, reached through OpenRouter | Your ratings, the notes you added to them, and a summary of your taste profile |
| Voyage AI | Turns an advisor request into a search the catalog can answer | A short search phrase written from your advisor message |
| Resend | Sends the confirmation email when you save your account with an email address | Your email address |
| RevenueCat | Subscription state | An account identifier and purchase status |
| Sentry | Crash reporting | Technical crash data, not linked to your account |
| Cloudflare | Bot protection at sign-up and sign-in | Network-level signals only |
| Apple | Sign in with Apple, payments | Handled by Apple under Apple's own policy |
We also request title metadata, artwork and streaming availability from TMDB and JustWatch. Those are outbound requests about titles — they do not carry anything about you.
On our servers in Singapore (Supabase, AWS region ap-southeast-1) and locally on your device. Data in transit is encrypted.
Your ratings, library, taste profile and advisor history: as long as your account exists. Usage data (how you use the app, and the log of AI requests we make for you) is kept for up to 13 months, then deleted; only anonymous daily totals remain.
When you delete your account we erase everything linked to you from our own servers immediately, and it cannot be undone. Records of what AI requests and purchases cost us are kept only after your identity has been permanently removed from them. Aggregated statistics that cannot be traced back to you may remain.
One thing deletion cannot reach right away. Anything that was sent to our AI provider — your advisor messages, pasted viewing history, and taste summaries — also sits on their systems for a short period, and deleting your Noomi account does not shorten it. Anthropic deletes API inputs and outputs within 30 days of receiving or generating them. If a request is flagged under their usage policy, they may keep it for up to two years. Anthropic does not use commercial API data such as ours to train their models. When a request goes through OpenRouter, OpenRouter does not keep its content, and the cloud provider hosting an Anthropic model keeps it no longer than Anthropic would. Requests that build your picks go to Google's Gemini model; Google may keep them for up to 55 days to detect abuse and does not use them to train its models.
We tell you this because "we deleted everything instantly" would be true of our own servers and misleading about the whole picture.
If you are in the EEA or the UK, our legal basis is performance of the contract (giving you recommendations) and legitimate interest (keeping the service working and free of abuse). You have the right to access, correct, export, restrict or erase your data, and to complain to your local supervisory authority.
If you are in California, we do not sell or share personal information as those terms are defined by the CCPA.
Noomi is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has created an account, write to hello@noomiapp.site and we will remove it.
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.