Last updated: 4 September 2026.
First Five provides family organisation, planning, product scanning, Kimi and subscription features. Contact First Five at support@nomiapp.net about your information.
Creating an account stores your email address, a one-way password hash, account identifier, consent choices and session records on our service. Your password is not stored in readable form. On iPhone, your sign-in token is stored in the device Keychain.
New family setup starts by creating an account or signing in so your setup and Plus access remain connected to one identity. When you explicitly consent during account creation, First Five sends your saved app data to its service so you can restore it after changing devices or reinstalling the app. This may include names, pregnancy and cycle dates, children's details, allergies, family preferences, appointments, plans, notes, Kimi history and Vault photos. These records are linked to your account. Only add family information you have authority to provide.
We use account information to provide the account service and protect it from abuse. Cloud backup, including health-related pregnancy, cycle and allergy information, is based on your explicit consent. You can withdraw this consent and remove your cloud backup in the account controls while keeping the account and Plus access. Withdrawing consent does not affect processing that already occurred. Records already held on a device remain there until you delete them, clear the app or remove it.
Kimi sends your message and relevant family or product context to the First Five service to generate a response. Scanning may send barcodes, ingredient-label text, product facts and correction reports for lookup, mapping and scoring. If you choose to contribute an unknown product, product and label images and neutral product facts may be retained in the shared product bank for future scans.
Apple processes payments. RevenueCat processes your First Five App User ID and purchase or subscription status to provide Plus. When signed in, the App User ID is your account identifier. First Five does not receive your full payment-card details. An account can also have a server-granted entitlement, such as a review account with Plus enabled.
DigitalOcean hosts the First Five service, account database and AI inference path. If password recovery is enabled later, its transactional email provider will process the destination email address for that request. Apple and RevenueCat provide purchases and restoration. Product lookup sources include CHOMP, Open Food Facts, Open Beauty Facts, Open Products Facts and Wikidata. See Data Sources & Licences.
Information is used to provide app features, personalisation, customer support, security and reliability. First Five does not sell family data, use it for third-party advertising or track you across other companies' apps and websites. We limit service access to what is needed for these purposes.
Cloud account and backup records are retained while you keep the account or backup. You can export your saved data and delete your account from the app. Account deletion removes your active cloud profile, sign-in sessions, reset tokens and account entitlements; it removes identifying account fields and matching private service records and anonymises attribution on shared product contributions. Hosting backup copies may remain until the provider's backup retention cycle ends. They are not used for normal account access.
Sign-in sessions expire after 90 days. If password recovery is enabled later, reset links expire after one hour and can be used once. Temporary CHOMP responses are cached for less than 24 hours. Shared product facts may remain while useful to the product bank. Apple and RevenueCat retain their purchase records under their own policies. Service logs are used to operate and protect the service.
Signing out clears the current account's data from that device after pending changes are handled; it does not delete your cloud account. Deleting your First Five account does not cancel an Apple subscription. Manage billing separately in Apple account settings.
You can ask for access, correction, export, deletion, restriction of processing or object to processing where applicable by contacting support@nomiapp.net. You can withdraw optional backup consent in the app. You may also raise a concern with the UK Information Commissioner's Office or your local data-protection authority.