Effective date: October 21, 2026
The main points
Mindon LLC ("No Food Cravings," "we," "us," or "our") runs the No Food Cravings web app at www.nofoodcravings.com (the "Service"). Our mailing address is 30 N Gould Street, Ste R, Sheridan, Wyoming 82801.
This policy explains what personal information we collect, why, who sees it, how long we keep it, and the choices and rights you have. It applies to the Service and to emails we send you. It doesn't apply to other companies' websites, even if we link to them.
We collect only what you type into the app and a small amount of technical data. We don't buy data about you from anyone.
If you are a woman and you choose to answer, we collect whether you have a monthly cycle and the date your most recent period started. We use it only to show how your cravings change across your cycle. You can skip these questions and still use every other part of the app.
Square processes your payments. You enter your card details on Square's payment form. Square stores your card, not us. We receive only what we need to manage your subscription, such as whether it is active, the plan, the dates, and the payment status. For how Square handles your card, see Square's privacy notice.
Records of the emails we send you, such as when an email was sent and whether it was delivered.
About your notes. The craving note is free text. Don't put anything in it that you don't want us to store, such as other people's information or details about medical conditions that the plan doesn't need.
We use your information to:
We don't use your information for advertising. We don't build profiles of you to make automated decisions that have legal or similarly significant effects on you. The app's calorie targets are a simple calculation from your answers, not a decision about you.
If we want to use your information for a new purpose that isn't compatible with the ones listed here, we will tell you first and, where the law requires, ask for your consent.
Several things we collect are "consumer health data" under state laws such as Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), and Connecticut's Data Privacy Act. They are also "sensitive personal information" under California law. This includes your weight, goal weight, height, calorie targets, food restrictions, craving ratings and notes, plan check-offs, first-bite times, and cycle data.
For the full details, see our Consumer Health Data Privacy Policy.
We share personal information only with these service providers (also called processors). They host and run the Service for us. Our contracts limit them to using your information to provide their service to us.
| Provider | What it does for us | What it can see |
|---|---|---|
| Supabase | Database | All account, profile, and daily data |
| Render | Runs our servers | All data as it passes through our servers, plus request logs and IP addresses |
| Vercel | Hosts the website | Request logs and IP addresses |
| Resend | Sends our emails | Your email address, the content of the emails we send you, and delivery records |
| Square | Takes payments | Your email address, your card details, and payment history |
| Sentry | Tracks errors in the app | Your email address, your account ID and technical details when something breaks. Not your health data |
We may also disclose information:
We don't sell your personal information. We don't "share" it for cross-context behavioral advertising. We haven't done either in the last 12 months.
We and our service providers store and process your data in the United States.
We don't use advertising cookies. We don't use third-party ad trackers, tracking pixels, or social media plugins.
We save a few items in your browser's local storage to keep you signed in and to remember your settings. These are needed for the app to work. If you clear them, you will be signed out.
We don't use an analytics tool today. If we add one, we will update this policy before we turn it on, name the tool, and explain what it collects. We will not let an analytics tool receive your health data.
Your browser may send a Global Privacy Control signal. Because we don't sell or share personal information, there is nothing to opt out of today. We will still treat the signal as a valid opt-out request.
Some emails may mention your progress, such as a milestone. Email isn't fully private. If you don't want this, turn off milestone emails.
| Information | How long we keep it |
|---|---|
| Account, profile, plan, and daily entries | While your account is open. If your trial ends or your subscription ends and you don't come back, we keep your account for 12 months so you can pick up where you left off. Then we delete it. |
| Data after you delete your account | Deleted from our live systems within 30 days. Removed from backups within 12 months as old backups are overwritten. |
| Subscription and payment records | As long as tax and accounting laws require, usually 7 years. We keep only what those laws need, not your health data. |
| Email delivery records | 12 months |
| Server and request logs | Kept by our hosting providers for their standard periods, usually a few days to a few weeks. |
We may keep information longer if the law requires it or to resolve a dispute, and only for as long as that need lasts.
No system is perfectly secure. Use a strong password you don't use anywhere else, and tell us right away if you think someone has gotten into your account.
If we learn that someone got unauthorized access to your personal information, we will investigate and fix the problem. We will notify you, and regulators where required, without unreasonable delay and within the time the law sets. We will tell you what happened, what information was involved, what we are doing, and what you can do.
We are not a doctor, a health plan, or a health care provider, and we don't work for one. That means HIPAA, the federal health privacy law, doesn't apply to No Food Cravings. We still treat your health data as sensitive and protect it as this policy describes.
Wherever you live, you can ask us to:
We will not treat you differently for using any of these rights. We will not charge you more, give you a lower quality service, or deny you the Service because you made a request. If you delete your data, though, we can't keep running a plan that depends on it.
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you these rights:
In the last 12 months we collected these categories of personal information, from you and your browser, for the purposes in section 3. We disclosed each only to the service providers in section 5.
How long we keep each category is in section 9.
California's "Shine the Light" law lets you ask which businesses we shared your information with for their own direct marketing. We don't do that.
These states have laws for consumer health data. Your rights under them, and how we meet them, are in our Consumer Health Data Privacy Policy.
Colorado, Virginia, Oregon, Texas, and other states give residents similar rights to access, correct, delete, and get a copy of personal information, and to opt out of sale, targeted advertising, and profiling. We honor these requests for everyone, wherever you live.
Verification. To protect your data, we confirm a request comes from you. Usually that means replying from your account's email address, or confirming a link we send there. We use the information you give us for verification only to verify you.
Authorized agents. Someone can make a request for you if you give them signed, written permission. We may still ask you to confirm your identity with us directly.
Timing. We will respond within 45 days. If we need more time, we can extend that once by up to 45 more days, and we will tell you why within the first 45 days. Requests are free, up to twice in any 12 months.
Appeals. If we turn down your request, in whole or in part, we will tell you why. You can appeal by emailing support@nofoodcravings.com with "Privacy appeal" in the subject line within 60 days of our answer. We will answer your appeal in writing within 45 days (60 days for Colorado residents) and explain our decision. If you are unhappy with the result, you can contact your state attorney general. California residents can also contact the California Privacy Protection Agency.
The Service is only for adults 18 and older. We don't knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has created an account, email support@nofoodcravings.com.
We may update this policy. We will change the date at the top when we do. If a change is material, we will tell you by email or in the app before it takes effect. We will not use health data we already hold in a new way without asking for your consent first.
For questions about this policy or your data, contact us at: