Privacy policy
Last updated: 19 September 2026
Nibbld is made by Wyse Holdings Pty Ltd (ABN 18 689 831 552), Melbourne, Australia ("we", "us"). This policy explains what the Nibbld iOS app and this website collect, why, who it's shared with, and the choices you have. Contact us at arok@wyseholdings.com.
The short version
- No account is needed. Your full order history stays on your phone unless you sign in to back it up.
- Some features use our servers without signing in (your crew, invites, how your spending compares), and they only receive what's listed below.
- AI features are optional. If you allow them, some data is sent to Claude, an AI model made by Anthropic. Screenshots and photos are never stored by us.
- We don't sell your data, show ads, or track you across other apps or websites.
- You can delete everything, on your phone and on our servers, from inside the app at any time.
What stays on your phone
Your imported orders, reveal, check-ins, savings goals, fakeaway progress and settings are stored on your device. If you pick the gym focus, workouts are read from Apple Health on your phone only and never leave it.
What we collect
| Data | When | Why |
|---|---|---|
| An account identifier | Created the first time you use a feature that needs our servers (for example the Stats tab, invites or AI). It's anonymous. If you use Sign in with Apple, Apple gives us a stable identifier for your Apple ID. We don't ask Apple for your name or email. | To keep your data separate from other users and let you restore it. |
| Your yearly delivery spend (as one number), currency and country or region setting | After your reveal. | To show how your spending compares with other people's. Nobody sees your individual number. |
| Your crew details: first name (if you gave one), clean-day streak and the amount you've kept | When you open the Stats tab. Your name is only sent once you're linked with a friend through an invite code. | To show the leaderboard to the friends you've swapped codes with, and only them. We never share what you spent. |
| Invite codes and who used whose code | When you open or use an invite. | To link your crew. |
| Weekend challenges you join | When you join one. | To track the challenge. |
| Food delivery order history (restaurant, date and time, items summary, amounts, fees), reveal stats, goals and streaks | Only if you sign in with Apple to back up your data. | To restore your data and run your weekly roast. |
| Usage events (for example "import completed"), with amounts grouped into ranges, plus basic device and app details | While you use the app. | To understand which features work. Sent to TelemetryDeck under a hashed, anonymous identifier. |
| Crash reports: what the app was doing when it crashed, with device model and iOS version | If the app crashes or hits an error. | To find and fix bugs. Sent to Sentry, with no screenshots, names or other personal information. |
| Bot-protection signals | Before an account is created. | An invisible hCaptcha check stops automated sign-ups. |
| Purchase status and history | From Apple when you subscribe or restore, managed through RevenueCat with your anonymous account identifier. | To unlock Pro and keep it on a new phone. We never see your payment details. |
| Your email address (website only) | If you join the waitlist on this site. | To tell you when Nibbld launches. Email us to be removed. |
We also keep a short technical record of when each account uses our AI and server features, to prevent abuse. Our hosting provider logs IP addresses for security.
AI features (Claude by Anthropic)
Nibbld asks for your permission before sending any data to a third-party AI. If you allow AI features, we send the following to Anthropic's Claude API through our servers:
- Screenshots you upload, with today's date, your currency and the delivery app you picked, to read the orders in them.
- Restaurant names, to sort them into cuisines. The resulting cuisine for each restaurant name is cached without any link to you.
- Summary statistics (for example total spend, order count, fees, top cuisines and restaurant, share of late-night orders), to write your food personality and weekly roast.
- Fridge photos (Pro), only if you take one, to suggest meals.
We don't store screenshots or photos, and we don't send your name, email or Apple ID. Anthropic processes this data under its commercial terms, which do not permit training its models on it. Anthropic may retain it for a limited period for safety and abuse monitoring, as described in Anthropic's privacy policy. You can turn AI features off at any time in Settings. With AI off, cuisine sorting and your personality are worked out on your phone instead, and screenshot import isn't available.
Screen Time (Pro blocker)
The blocker uses Apple's Screen Time APIs. The apps and websites you pick are represented by opaque tokens that Apple gives the app. We can't see which apps they are, and this information never leaves your device.
Who we share data with
- Supabase hosts our database and servers in Sydney, Australia.
- Anthropic processes AI requests if you allow AI features.
- TelemetryDeck receives anonymous usage events.
- hCaptcha checks that new accounts aren't bots.
- Sentry receives crash reports.
- Apple handles Sign in with Apple, Apple Health and in-app purchases.
- RevenueCat manages subscriptions: it receives your purchase history and your anonymous account identifier, never your name or payment details.
- Vercel hosts this website and measures anonymous page visits.
- Friends in your crew see your first name, clean days and amount kept, as described above.
Some of these providers may process data outside Australia. We don't sell personal information or share it for advertising. We may disclose information if required by law.
Retention and deletion
Data on your phone stays until you delete it or the app. Data on our servers is kept while your account exists. Settings → Delete all my data permanently deletes your orders, stats, goals, crew details, invites and account from your phone and our servers, whether or not you signed in. Deleting your data doesn't cancel a subscription. Manage that in your Apple ID settings.
Your rights
We handle personal information in line with the Australian Privacy Principles. Depending on where you live (for example under the GDPR, UK GDPR or California law), you may also have rights to access, correct, delete or export your personal information, or to object to or restrict certain processing. Most of this can be done in the app. For anything else, email arok@wyseholdings.com and we'll respond within 30 days. If you're not happy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority.
Children
Nibbld isn't directed at children under 13 (or 16 where local law requires), and we don't knowingly collect their personal information.
Security
Order history on your phone is stored with iOS data protection. Data in transit is encrypted, and each user's data on our servers is isolated with database access rules.
Changes
We'll update this page and the date above if this policy changes, and tell you in the app about significant changes.