Norra

Privacy Policy

Last updated: 4 October 2026

This policy explains what Norra (“we”, “the app”) collects, why, who it goes to, and how to get rid of it. It covers the Norra iOS app and this website.

The short version. Your food log, measurements and weight history are stored on your phone, not on our servers. Meal photos, and a short summary of your day when you ask for meal suggestions, are sent to an AI provider to be processed — and are not stored by us. We do not sell your data, and we never use your health information for advertising.

1. What we collect

Data	Why
Account identifier An anonymous ID created on first launch	To keep your data attached to you without asking you to create an account.
Body measurements Sex, age, height, weight, activity level, goal weight	To calculate your daily calorie and protein targets. Optional, and stored on your device. They are not sent to our servers.
Weight history	To show your trend and correct your target against what your body actually does. Stored on your device.
Food log Items, estimated calories and macros, times	To show your day and your history. Stored on your device. We do not keep a copy of your log.
Preferences Goal, diet, allergens	Sent with each analysis so recommendations respect them.
Photos you capture	Analysed to identify the food or read the menu. See section 3.
Usage events Screens viewed, scans started, purchases, and when you correct a result	To understand where the app is confusing or broken. A correction records that you changed a portion, renamed an item or removed one — never what the item was.
Meal-suggestion context Only when you use the suggestions feature	To suggest what to eat next we send how many calories you have left, the meals you logged today, the foods you log most often, any suggestions you recently skipped, anything you typed into the request box, and your country from your device’s region setting. This is a summary derived from your log — the log itself is not uploaded, and nothing is kept after the suggestion is returned.
Subscription status	To unlock paid features. Payment itself is handled by Apple — we never see your card.

2. What we do not collect

Your name, unless you send it to us in an email.
Your location. Norra has no location permission and never asks for one. We see the country your phone is set to, which is not the same thing.
Your contacts, calendar, or microphone.
Payment card details. Apple processes all purchases.
Screen recordings. Session replay is switched off in our analytics.

3. Your photos

When you scan a meal or a menu, the image is resized on your device and sent to our server, which forwards it to an AI vision provider for analysis. The provider returns a description; we return that to your app.

We do not keep the image. It is not written to our database or to any file storage. What we record is the analysis result and technical details of the request — which provider answered, how long it took, whether it succeeded.

A copy of the photo stays on your device so your log has thumbnails. Deleting the entry in the app deletes that copy.

Our AI providers may retain inputs briefly for abuse monitoring under their own policies. We use one or more of: Alibaba Cloud (Qwen), Google (Gemini), OpenAI.

3a. Meal suggestions

When you ask what to eat next, we send an AI provider a short summary of your day: calories and protein remaining, the meals you logged today, the foods you log most often, and any suggestions you recently skipped — along with your goal, diet and allergens.

If you type a request into the suggestions box (“use up the chicken”, “no rice again”), that text is sent with it. Write only what you are comfortable sharing with an AI provider — it is a free-text field and we do not filter what you put in it.

We also send your country, taken from your phone’s language and region setting, so suggestions use food you can actually buy where you live. This is not location tracking. Norra never requests location access, has no location permission, and cannot see where you are beyond the country your device is already set to.

Your food log itself is not uploaded, and we do not store the summary after the suggestion comes back. It is sent only when a set of meal ideas is made: on the free plan that is at most twice — once when you first open your Today screen, and once more only if you ask for other ideas. With Pro, new ideas are made on your Today screen as your day changes.

4. Who else receives data

Service	What they get
Supabase Authentication and database	Your anonymous account ID, subscription status, technical records of each scan (which AI provider answered, how long it took, and whether you corrected the result — not the food), and any feature suggestion you choose to send us
AI providers Alibaba Cloud, Google, OpenAI	The photo and your goal, diet and allergens for a scan; the day summary described above for a meal suggestion
RevenueCat Subscription management	Your account ID and subscription status
PostHog Product analytics	Your account ID and usage events
Apple	Payment and billing, under Apple’s own privacy policy

We do not sell your personal data, and we do not share it for advertising.

5. Health data

Your measurements, weight and food log are health-related, and we treat them that way. They are used only to run the app’s features. They are never used for advertising, never sold, and never shared with data brokers.

Norra does not currently read from or write to Apple Health. If that changes, this policy will be updated first.

6. How long we keep it

What is on your device stays there until you delete it or remove the app.

On our side, technical scan records are kept for up to 24 months for abuse prevention and cost monitoring, and your account and subscription record last as long as your account does. Ask us to delete it and it goes within 30 days, apart from anything we are legally required to retain.

7. Deleting your data

You can delete individual meals at any time in the app.

Deleting the app removes your food log, measurements and weight history from the device. That is the only copy, and it is gone.

To also remove your account and everything held against it, use Settings → Delete my account in the app. It is immediate and permanent. If that fails for any reason, email support@trynorra.app and we will do it within 30 days.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your data, and to object to it. If you are in the EEA or UK, our legal bases are: performance of a contract (running the app you signed up for), consent (optional measurements and analytics), and legitimate interests (security and abuse prevention).

If you are in California, we do not sell or share personal information as those terms are defined by the CCPA/CPRA.

Exercise any of these by emailing support@trynorra.app.

9. Children

Norra is not intended for anyone under 13, and we do not knowingly collect their data. Users under 18 are not given weight-loss targets — the app calculates a maintenance target instead.

10. Security

Data in transit is encrypted with TLS. Database access is restricted by row-level security so one account cannot read another’s rows. AI provider credentials are held on our server, never in the app. No system is perfectly secure, and we will notify affected users of a breach as required by law.

11. International transfers

Our providers operate in the United States and elsewhere. Where data leaves the EEA or UK, transfers rely on Standard Contractual Clauses or an adequacy decision.

12. Changes

If we change this policy materially we will post the new version here, with an updated date, before the change takes effect.

13. Contact

Norra is operated by Hassan Ahmed, a sole trader based in Pakistan, who is the data controller for the purposes of the GDPR and equivalent laws.

Write to support@trynorra.app about anything at all — a privacy request, data deletion, or a question about this policy. We answer every one.