Privacy Policy

Last updated: January 3, 2026

EXCIT3D GmbH ("we", "us", or "our") operates the nouri. mobile application. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our app.

1. Data Controller

The data controller responsible for your personal data is:

EXCIT3D GmbH
Mankhauser Straße 1
42699 Solingen, Germany
Email: nouri@excit3d.de

2. Data We Collect

We collect the following types of data:

• Account Data: Email address and password when you create an account
• Inventory Data: Food items, quantities, expiry dates, and categories you add
• Receipt Images: Photos of receipts you upload for AI processing
• Recipe Data: Recipes you import or create
• Usage Data: App usage statistics and crash reports

3. How We Use Your Data

We use your data to:

• Provide and maintain the nouri. service
• Process receipts using AI to extract food items
• Send expiry notifications
• Improve our service and fix bugs
• Process subscription payments

4. Data Processing

Receipt images are processed using OpenAI's GPT-4 Vision API to extract food items. Images are sent to OpenAI's servers for processing and are not stored by OpenAI beyond the processing period. We do not use your data to train AI models.

5. Data Storage

Your data is stored securely using Supabase, with servers located in the European Union (Frankfurt, Germany). All data is encrypted in transit and at rest.

6. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase: Database and authentication provider
• OpenAI: AI processing for receipt scanning
• RevenueCat: Subscription management
• Apple: App Store and payment processing (iOS)
• Google: Google Play Store and payment processing (Android)

7. Household Sharing

If you join a household, your inventory, recipes, and shopping list may be shared with other household members. You can control sharing settings for each category in the app.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to data processing
• Withdraw consent at any time

To exercise these rights, contact us at nouri@excit3d.de.

9. Data Retention

We retain your data as long as your account is active. When you delete your account, all associated data is permanently deleted within 30 days.

10. Security

We implement industry-standard security measures including:

• TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Row-level security for database access
• Regular security audits

11. Children's Privacy

nouri. is not intended for children under 16. We do not knowingly collect data from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: nouri@excit3d.de
Address: EXCIT3D GmbH, Mankhauser Straße 1, 42699 Solingen, Germany