Updated 5 November 2026

Privacy policy

This policy covers the NOMAE website at nomae.com.au, orders placed on it, NOMAE accounts, and account, social and optional AI features in the NOMAE app. The NOMAE service is operated by Eamon Thomas, an Australian sole trader trading as NOMAE FIT (ABN 46 229 118 548), based in Brisbane, Australia. Contact us at support@nomae.com.au for privacy questions or requests.

Your workout history and raw tracker movement data stay on your phone, even if you sign in. Connecting Apple Health or Health Connect is optional, and the information NOMAE reads from them is not sent to NOMAE's servers, except the dates of other workouts if you choose to count them in Friends (see below). Online features, including orders, social features and optional AI, handle other information as explained below.

Visiting the website

When you visit, our hosting provider (Cloudflare) processes technical information such as your IP address, requested URLs, browser information and request times to deliver the website, protect it and diagnose problems. The site asks Cloudflare which country your connection comes from to show availability information; that is not stored.

We also keep anonymous daily counts of website page views, approximate browser-tab visits, clicked buttons and visits from tagged campaign links. Only the date, event type and a short page, source or campaign label are stored in these counts. We do not store cookies, IP addresses, device identifiers, full referrer URLs or visitors' browsing histories in these analytics. If you choose to sign up or purchase, the order or signup can carry first- and last-touch source labels so we can see which posts led to customers. These simple website statistics are separate from the optional Meta and ChatGPT advertising pixels below.

Orders

When you order, Stripe processes your payment. We receive your name, email address, phone number, delivery address, what you ordered and the payment status; we never see or store your full card number. We also record which page or ad link brought you to the site, so we know which pages and ads work. We use this to fulfil, deliver and support your order, process cancellations and refunds, and keep records that tax and consumer law require. Orders are stored in Cloudflare D1. Delivery details are shared with the courier delivering your order. To buy postage labels we may pass your name, delivery address, email address and phone number, with the parcel size and weight, to Shippo (Popout, Inc.), which passes them to Australia Post. See Shippo's privacy policy. See Stripe's privacy policy. We email you about your order through Resend: the confirmation, shipping, delivery, cancellation, refund and return updates, plus a check-in and a request for a review after it arrives. If you tick the box for news and offers at checkout, we add your email to our list, and if you don't finish paying we may send you up to two reminders with a link back to your checkout. Every email that isn't about an order you've placed has an unsubscribe link at the bottom; use it, or reply "unsubscribe", and we won't send another.

Google Customer Reviews: after an order, your order page may show a box from Google offering a short survey about buying from NOMAE. When that box is shown, the page passes Google your email address, order number, delivery country and estimated delivery date. Google emails you the survey after that date only if you choose to take part, and may publish your rating as part of NOMAE's seller rating on Google. Google handles this under its privacy policy. Taking part is optional and never affects your order.

NOMAE accounts

You can sign in on the website or in the app with Google, Apple or an emailed link. Firebase Authentication (Google) processes the identity information needed to sign you in; Google or Apple also process the sign-in under their own terms. NOMAE never receives your Google or Apple password. On the website, an account lets you see your orders, which we match to your account identifier and to the verified email address you signed in with. When you're signed in to an app version that supports it, the app saves your companion's look (its name, shape, colours, eyes, fur length and what it wears) to your account, so the website can show the same companion when you sign in here. The website keeps a copy in your browser and removes it when you sign out. Its personality, memories and your chats stay on your phone. The look is deleted with your account.

Anonymous website improvements

We count page visits, links clicked, product questions opened, checkout stages and optional one-tap answers to what visitors need before deciding to buy. These are stored as totals by day and category, without recording your name, email address, IP address or a visitor identifier in this analytics table. Answers are voluntary and help us decide which information to improve. We do not treat a click as proof of what someone believes.

Optional website behaviour analytics

With your permission, we may use Microsoft Clarity to understand how people use our public product pages through click and scroll heatmaps and masked session recordings. Clarity sends website interaction and technical browser information to Microsoft, and may use analytics cookies. Inputs and sensitive content are masked by default. NOMAE does not run Clarity on account, order, support or admin pages, and does not use Clarity on website experiences targeting under-18s. Clarity runs only on public informational pages after you tap OK or Allow on the measurement notice. See Microsoft's privacy statement.

Ad measurement

To learn which ads bring people to NOMAE, and to show ads to people likely to be interested, the website loads the Meta Pixel unless you turn it off. The ChatGPT Ads Measurement Pixel loads only after you tap OK or Allow. They record page views and actions such as starting checkout, ordering, signing up for updates or tapping through to the App Store, and set first-party cookies (such as _fbp, _fbc, __oppref and __obref) to connect a visit to an ad.

The quiz. If you take the quiz our emails link to, we keep your three answers (what you’re after, where you lift and how you keep track) with the email, ad or link that brought you, without your name, email or IP address. While ad measurement is on, those answers also go to Meta, through the Meta Pixel and its Conversions API with the identifiers described below, so we can measure the quiz and show you relevant ads. If you order, they’re saved with your order.

While ad measurement is on, we may send the same signup or confirmed order event to Meta's Conversions API, and to OpenAI's if you tapped OK or Allow, to improve measurement. Meta can receive hashed email, phone, name and account identifier, general delivery location, IP address, browser user agent and eligible ad click identifiers. OpenAI receives only supported information such as hashed email and account identifier, city, postcode, country, IP address, browser user agent and eligible ad reference identifiers. Both can receive the conversion type and order value. We do not send health data or your workout history to advertisers. The stored IP address and user agent are deleted once the conversion has been processed. See Meta's privacy policy and OpenAI's privacy policy.

Your choice. The Meta Pixel is on until you turn it off; Clarity and the ChatGPT pixel need your OK. Use Ad measurement settings (also in the footer) to turn all of it off at any time. If your browser sends a Global Privacy Control signal we treat it as off. When it is off, the pixels are not loaded and we send no server events about you. Ad measurement is never used in the app, and workouts and Apple Health data are never shared with advertisers.

Email updates

If you sign up for NOMAE email updates, we store your email address, the page you signed up from, the date and, if you're outside Australia, the country you choose, in Cloudflare D1, and may add it to our mailing list provider, EmailOctopus (Three Hearts Digital Ltd), to send development, availability and launch news. EmailOctopus may process delivery, open and click activity. You can unsubscribe using the link in any marketing email, or request removal by contacting us. Suppressed addresses are retained to honour unsubscribes. See EmailOctopus's privacy policy. Stripe can send payment receipts when receipt delivery is configured. NOMAE order updates and support replies are handled from our support mailbox; they are not marketing.

NOMAE app accounts and social features

The core workout and tracker features work locally on your phone without an account. NOMAE's account and social API uses Cloudflare Workers and Cloudflare D1. It may store your account identifier, username, display name, optional avatar reference, friend relationships and requests, blocks, your weekly goal, crew memberships (crews are private groups, called competitions in earlier versions), the fixed cheers you send and receive, and the days you trained: your own calendar date and whether a tracker counted any of it, sent when you check in or when a workout finishes (you can turn that off in Friends). Earlier app versions also sent, for each competition you joined, each day's totals of sets logged and reps counted by the tracker. From app version 3.3 you choose what friends see in Friends settings: days only; workouts (a summary of each finished workout: library exercise names, set counts, each exercise's top set, which sets a tracker counted and how many new bests); or workouts and weights (the same with weights, plus your best estimated lift for each library exercise, used to compare lifts with friends who also share weights). Even on days only, each workout's set and new-best counts are stored so crew quests can add them up. The summary is built on your phone; your notes, workout names and the names of exercises you made yourself are never sent. You see as much of a friend as you share yourself, and sharing less removes what is stored straight away. If you turn on notifications, the app sends a push token for your device and your time zone offset (so nothing arrives at night); Apple (APNs) or Google (Firebase Cloud Messaging) deliver them. Your friends and crew members see your name, username, your companion's look (not its name), the days you trained, your streaks and what your sharing level allows; only members of a crew see its name and progress. Friends has no posts, messages, photos or public profiles. Workout sessions and routines are not synced to NOMAE servers, and raw tracker movement traces are not uploaded. AI training context when you use chat is described below. Account and social data is used to provide sign-in, profiles, friends, blocks, crews and streaks, prevent abuse, and operate and secure the service.

From app version 3.4, Friends also stores: duels you start or accept with a friend (who is in it, which of the fixed contests, the week, both scores, both weekly goals as they were when it was accepted, and the result), scored from the trained days and workout summaries described above; gym plans (the friend, the day, one of five fixed times, and their answer, in or not today); if you turn on "Show when I'm training", the time you opened a workout, removed when it ends and after three hours at most; and which of eight fixed badges you've earned, worked out on your phone from your own history. If you turn on "Count runs and games in Friends" (off unless you turn it on), a workout of 20 minutes or more that another app saved to Apple Health counts as a trained day: only its date is sent, never its type, length, distance or any other Health reading. Deleting a workout in the app removes its summary, and that trained day if nothing else was recorded on it. Only accepted friends see any of this, and Friends still has no free text beyond names.

On your phone: workouts, the tracker and the voice coach

Workouts, routines, custom exercises, records and tracker movement traces are stored in the app on your phone. The app connects directly to the NOMAE tracker only to receive its motion data and battery level; that data is processed on the phone and is not uploaded. The voice coach plays recorded audio through your headphones; it does not use the microphone and records nothing.

NOMAE AI requires sign-in and internet. Before your first AI message, the app asks permission to share your messages and training context with the services below. If you decline, nothing is sent. After you allow sharing, training context is included with each message. Turn sharing off in Settings → AI sharing and memory to require permission again.

Coach in the app (on iPhone and Android) sends your questions, any photo you add and up to four recent exchanges through NOMAE's Cloudflare API to Anthropic, which runs Coach on Claude. NOMAE does not store or log prompts or replies. Anthropic does not train on them and deletes them within 30 days, unless its systems flag a conversation for breaking its usage policy or the law requires longer. Anthropic processes them only to write the reply, under its Commercial Terms and Data Processing Addendum, which protect them at least as well as this policy does. Nothing is sent until you allow it on the screen in the app that names Anthropic and lists what is sent. A photo is sent only with the question you add it to, is not stored by NOMAE, and stays on your phone only for the current chat.

Coach requests include your first name if you set one. Chat automatically includes training preferences, current workout, saved routines, summaries covering all saved training history, and a bounded sample of relevant recent and historical sets: exercise, date, load, reps, count source and signal warnings, plus available travel and time-under-load measurements for unadjusted, uninterrupted tracker sets. Raw motion traces, notes, Apple Health and Health Connect readings and account identifiers are not included in provider requests.

NOMAE does not store or log AI prompts or replies. Billing, service and abuse-prevention metadata, including NOMAE's per-account usage counters, may be retained. Your Coach chats are saved on your phone, separately for each account, until you delete them (Coach › Chats) or delete your account. Starting a new chat or closing the app does not delete them. Useful training preferences you explicitly state may be saved as AI memories on your phone and included in future requests. View, edit or delete them in Settings → AI memory. Memories are local app data, not provider-retained chat, and may be included in device backups. Editing or deleting a memory resets the current conversation to remove stale context. A request already transmitted cannot be recalled.

Coach purchases and tracker trials

Apple handles Coach payments and refunds. NOMAE stores Coach purchase records, including transaction and subscription status, tracker serial claims and trial records in Cloudflare D1 to restore purchases, provide access and enforce the one-time tracker trial per tracker and per account. We do not receive your full payment card details.

Referrals: when an order is placed through your invite link (nomae.com.au/f/your-username), the shop tells the app service the order's reference and your username so you get a month of Coach, and takes it back if the order is refunded. We record which order earned it; we don't tell you who ordered, and the buyer only sees your username in the link.

When you speak to Coach, speech is recognised on your device. The recognised text is included in your Coach request; the speech recording is not sent to NOMAE or the AI provider.

Apple Health

If you choose to connect Apple Health on iPhone, NOMAE requests permission to read today's step count, exercise minutes and active energy for today's activity on the Train tab; workouts saved by other apps in the last five weeks (their type, start and finish times and distance), to show your runs and sports beside your lifting; and your body weight (the latest reading and the earliest in the last 90 days), to show your weight and estimate the energy a workout used. It also requests permission to write finished Strength Training workouts with their recorded start and finish times and, when Health has your body weight, an estimate of the active energy used. You control which requested Health data types to allow. Information read from Apple Health stays on your iPhone: NOMAE does not upload it, store it on its servers, share it with others, use it for advertising or marketing, or include it in NOMAE AI requests. The one exception is yours to choose: with "Count runs and games in Friends" on, the date of a qualifying workout is sent as a trained day, as described above, and nothing else about it. You can turn off saving workouts or showing Health activity in NOMAE Settings, and change or revoke access in Apple Health at any time.

Health Connect (Android)

If you choose to connect Health Connect on Android, NOMAE requests permission to read only today's steps, exercise sessions (to total exercise minutes) and active calories burned for the Home screen, and to write finished Strength Training exercise sessions with their recorded start and finish times and the workout name. It does not request any other Health Connect data. Information read from Health Connect stays on your phone: NOMAE does not upload it, store it on its servers, share it with or sell it to others, use it for advertising, marketing or credit decisions, or include it in NOMAE AI requests. You can turn off saving workouts or showing activity in NOMAE Settings, and change or revoke NOMAE's access in Health Connect at any time. NOMAE's use of Health Connect data follows the Health Connect Permissions policy, including its Limited Use requirements.

Feedback sent from the app

If you use Send feedback or Report a problem in the app, we receive the topic you choose and your message, the app screen you sent it from, an email address if you choose to give one, and, unless you switch it off, the app version, operating-system version, phone model, language setting, whether a tracker is connected and its firmware version. If you are signed in, your account identifier is attached. Your workouts are not included, with one exception you choose: if you switch on “Include this set's numbers” when reporting a set, that one set's movement name, weight, rep counts and signal quality are sent with your message. The movement recording itself is never sent. Feedback is stored in Cloudflare D1 with a one-way hash of your network address, used only to limit abuse.

Reports and moderation

If you report a person or a crew in the app's social features, we receive the reason you chose, any details you add, your account identifier and what you reported. The person you report is not told who reported them. Reports are actioned by the NOMAE team within 24 hours, and we may remove names, crews or accounts that break the rules. If you report a NOMAE AI reply, we receive the reason you chose, the text of that reply, which model wrote it, and the app and device details described under feedback; this is how a reply you flag reaches us, and nothing else from the chat is sent.

If you contact us

If you review the tracker, we store your rating, what you write, the name you choose to show and which order it belongs to in Cloudflare D1. The review, that name and the date are published on the tracker page and may appear in search results; your email address and order number are never shown. We may reply in public. You can change your review from your account or your review link, or ask us to take it down. We take down reviews that are abusive, share personal details or are spam. The tracker page can also show Google reviews of NOMAE, loaded from Google when you scroll to them; your browser then loads the reviewers' profile photos from Google, which receives your IP address. See Google's privacy policy.

If you email us or use our support or order-request forms, we receive your email address, message and anything you include, and use it to respond. Form enquiries and request status are stored in Cloudflare D1. We keep them while resolving the enquiry and for a reasonable support-record period. Administrative actions are recorded in a restricted audit log. Please don't send card details, passwords or sensitive health information. Our inbox uses Google Gmail. See Google's privacy policy.

Sharing and overseas processing

Information is handled by the people running NOMAE and the providers named above: Cloudflare (hosting, database), Stripe (payments), Google Firebase (sign-in), EmailOctopus (email), Shippo (postage labels), Meta and OpenAI (website ad measurement, if on), Anthropic (Coach in the app), and couriers. Some of these process information outside Australia, including in the United States and Europe. We do not sell personal information. We may disclose information where required by law.

Account deletion

You can delete your NOMAE account in the app under Settings, or by emailing support@nomae.com.au. NOMAE then deletes your social profile and associated records, revokes its access to your Apple or Google sign-in and deletes your authentication account. Order records are kept for as long as tax and consumer law require (usually five years) and are then deleted.

Security and retention

Access to orders, subscribers and enquiries is limited to people who need it. Payments are handled by Stripe and never touch our servers. No transmission or storage is completely secure. Mailing-list information is kept while you're subscribed and as needed to honour unsubscribes. Providers may keep logs and backups on their own schedules.

Your choices and complaints

Email support@nomae.com.au to request access to, correction of or deletion of your information, or to complain. We may need to verify your identity, and we aim to respond within 30 days. If unresolved, you can contact the Office of the Australian Information Commissioner.

Changes

We'll update this policy when what we handle changes, and show the new date at the top.