Privacy policy
What Nomi collects, why, who processes it, and the choices you have.
Last updated 3 November 2026.
Nomi is a vocabulary app: a new word each day, short reviews, and small games that help you keep what you learn. It's made by Teacake ("we", "us"). For any privacy question or request, email support@nomiwords.com.
We collect what Nomi needs to teach you words and keep your progress safe, plus a little about how the app is used so we can make it better. We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
What we collect, and why
| What | Why | Where it goes |
|---|---|---|
| Your learning: the words you learn, save or mark as known, your answers and review history, memory strength, streak, goal, level and settings | The core of the app | On your phone, and backed up privately to your Nomi account (Google Firebase) |
| Account: a random account id made when you first open Nomi, and a short account code you can quote to us. If you sign in with Apple or Google, the email address they share with us (Apple can give us a private relay address instead). Our server also notes which sign-ins the account has, whether it's on iPhone or Android, and the app version | To back up your progress and restore it on a new phone, and to find your account if you ask us to delete it | Firebase Authentication, and our server (Cloudflare) |
| Profile: the name you choose to show other learners, whether you appear on leaderboards, and a profile photo if you add one | So the daily leaderboards can show who played | Our server (Cloudflare). Photos are stored in Google Firebase and checked automatically when you add them (see below) |
| Daily game results: for the Daily Inkling and Kindred, each day's guesses, whether you solved it, hints or mistakes, time taken and the points scored | To check and rank the day's results, and keep your records | Our server (Cloudflare) |
| Rewards: the quills, satchels and curios you've earned, which curios you wear and show, and the milestones that earned them (a streak's length, an Unravel chapter, a personal best, a win or a Freeplay board) | To check and keep what you've earned, and show your chosen curios on your profile | Our server (Cloudflare) |
| Reports and blocks: profiles you report (the reason and any note you add) and profiles you block | To keep the leaderboards civil | Our server (Cloudflare) |
| Emails you send us: your address, the subject and what you write (any attachments are not kept), including "Report a problem" from the app | To answer you, and to find your account if you quote its code | Our server (Cloudflare) keeps the text for our support inbox and passes the email on to our own mailbox |
| Sentences you check: with "Try it" (Pro), the word and the sentence you write when you ask Nomi to check it | To tell you whether you've used the word well | Our server (Cloudflare), which has it checked by an AI model run by Cloudflare (Workers AI). Not kept (see below) |
| Purchases: what you bought, when, and whether it's active (a transaction id, the product and its renewal date). Never your card details | To unlock Pro on your account and restore it | Apple or Google take the payment. Our server (Cloudflare) checks the receipt with them and records your Pro status against your account id |
| Usage data: app opens, screens viewed, key actions (for example "session finished" or "word saved"), purchases made in the app, app version, device model and operating system, a random id for this install of the app, and your approximate location (country or city), which Firebase works out from your IP address | To see what helps people learn and where they get stuck | Firebase Analytics, collected without the advertising identifier, never used for ads and never used to track you across apps. You can switch it off (see below) |
| Diagnostics: crash reports and error logs, with the device model, operating system and app version at the time, and a random id for this install of the app | To find and fix bugs | Firebase Crashlytics |
Backup and your account
Nomi backs up your learning automatically so a lost or new phone doesn't cost you your words or your streak. To begin with, the backup belongs to an anonymous account with no email attached. If you sign in with Apple or Google, the same account is linked to that sign-in so you can restore it on another device. Only your account can read its backup.
What other learners see
Everyone plays the same Daily Inkling word and Kindred puzzle, and the leaderboards rank the day's, the week's and all-time results. When you appear on them, other learners see the name you chose, your profile photo (or a drawing of Nomi if you haven't added one), and your result: your rank, whether you solved it, tries, hints, time and points. Tapping your name opens your profile card: the curios your Nomi wears and the ones you've chosen to show, how many you've found, and your best placements. They never see your words, your email or your account.
- Appearing is up to you. "Show me on leaderboards" is on unless you switch it off, which you can do when you choose your name and at any time after. With it off, you still see your own place; nobody else does.
- Names. A name can't be a web address, pretend to be Nomi, or contain words our filter blocks.
- Photos. Optional. When you add one, it is checked automatically by an AI model run by Cloudflare (Workers AI) for nudity, sexual content, violence or hate symbols. A photo it refuses is not stored. If the check is unsure, the photo is kept but only you can see it until we have looked at it ourselves. You can remove your photo at any time.
- Reports and blocks. You can report a name, photo or result, or block someone so you no longer see them; they aren't told. We review reports, and a profile reported by several people is hidden until we have. We may reset a name, remove a photo or hide a profile that breaks the rules.
Checking your sentences
When you ask "Try it" to check a sentence, the word and the sentence you wrote are sent to our server, which asks an AI model run by Cloudflare (Workers AI) whether the word is used well, and sends you its answer. The sentence and the answer are used for that check only: we don't store them or write them to our logs. To limit checks to 30 a day we keep a count of how many your account asked for that day, under a one-way fingerprint of your account id, and delete it within two days. A sentence with strong language isn't sent to the model at all. Only send sentences you're happy to have checked this way.
Things that stay on your phone
- Pronunciation. Words are read aloud by your phone's own text-to-speech.
- Reminders. Your daily reminder is scheduled on your phone. We don't run a server that sends you notifications.
Word list updates
Nomi may download updated word lists from our server. Those requests carry the app's version and nothing about you.
Legal basis (UK and EU)
We use your data to provide the app you've chosen to use (our contract with you): your learning, backup, account, purchases, profile, daily game results, rewards and the sentences you ask us to check. We rely on our legitimate interests for usage data and diagnostics, which we use in aggregate to improve and secure the app, and for checking photos and handling reports, which keep the leaderboards safe for everyone. You can turn usage data off in Settings → Privacy, and leave the leaderboards at any time.
Your controls
- Usage data. Switch Settings → Privacy → Share usage data off and Nomi stops sending usage data from then on. Crash reports are sent either way, so we can fix bugs.
- Delete. Delete your account and everything in it, on your phone and on our servers: Settings → Account → Delete account & data. No longer have the app? See how to delete your account.
- See and correct. Your words, progress, settings and profile are all visible in the app, and you can change or remove any of them.
- A copy of your data. Email us and we'll send you everything we hold about you.
- UK and EU users have rights of access, correction, erasure, restriction, portability and objection under the UK GDPR and EU GDPR, and can complain to the Information Commissioner's Office or their local regulator. California users have rights under the CCPA/CPRA. We don't sell or "share" personal information.
How long we keep it
Your learning and its backup stay until you delete them or your account. Your profile, photo, daily game results, rewards, blocks and reports stay until you change or remove them or delete your account, which removes them all, including reports others made about you. When an account is deleted we keep only a note that it happened: when, whether every part was removed, and a one-way fingerprint of the account id that can't be turned back into it. Purchase records are kept for as long as your subscription needs them and as long as tax law requires. Emails you send us are kept while we need them to help you. Usage data and diagnostics are kept by our providers for their standard periods, then deleted or aggregated.
Keeping it safe
Data is encrypted in transit, and backups can only be reached by their own account. Your account id never appears on the leaderboards; other learners know you only by a random profile id. No system is perfectly secure, but we take reasonable steps to protect your information.
Who processes it, and where
Our providers are Google (Firebase), Cloudflare (our server, the automated photo check and the sentence check), and Apple and Google for purchases. They may process data outside your country, including in the United States, under appropriate safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
Children
Nomi is made for adults and isn't aimed at children. We don't knowingly collect data from children under 13. If you think a child has given us their data, email us and we'll delete it.
Changes
We may update this policy. We'll change the date at the top and, for anything material, tell you in the app before it applies.