Privacy Policy
Last updated: July 23, 2026
Overview
No Rebound is a family organizer application owned and operated by John Osowski. This Privacy Policy explains what personal information we collect through the No Rebound iOS app and website (getnorebound.com), how we use it, and what rights you have.
By using the Service, you agree to the practices described here. If you do not agree, please stop using the Service.
What We Collect
We collect the following categories of information. This list is comprehensive — if we collect it, it's here.
Account information
- Name and email address (required to create an account)
- Password (stored only as a one-way hash — we never see or store your plaintext password)
- Optional profile details you choose to add, such as an avatar or member color
Content you create in the app
- Calendar events, reminders, and recurring schedules
- Meal plans, saved recipes, and dinner selections
- Shared lists (groceries, to-dos) and their items
- Family chat messages and any photos you attach
- Weight entries, calorie logs, and activity data you input
- Household details such as member names, birthdays, and color assignments
- Prompts and inputs you send to AI-powered features (e.g. "Dinner From My Fridge")
Technical & usage information
- Device type, operating system version, and general app version (for troubleshooting)
- Push notification tokens (only for accounts that enable push)
- Approximate location, if you grant permission — used solely to fetch local weather
- Anonymous website analytics (pages viewed, session duration, referrer)
- Basic server logs (IP address, request timestamps) retained for security and abuse prevention
Purchase information
- Subscription status (Free, Pro, trial state) — received from Apple's In-App Purchase system
- We do not receive, store, or process credit card numbers or other payment details. Apple handles all billing.
What we do not collect: government IDs, Social Security numbers, credit card numbers, precise/continuous GPS location, contacts from your phone, photos from your camera roll unless you explicitly attach one to a chat message, or health data from Apple Health or third-party fitness devices.
How We Use It
We use the information above to:
- Operate the Service — display your data on your devices, keep your household in sync, deliver reminders and push notifications
- Authenticate you and secure your account
- Process subscription status via Apple In-App Purchase
- Generate AI responses (for example, dinner suggestions from ingredients you type) — see Third Parties below
- Send transactional emails (verification, password reset, subscription confirmations)
- Send occasional product update emails, only if you opt in — you can unsubscribe at any time
- Detect abuse, fraud, and technical problems, and improve the Service through anonymized usage analytics
- Comply with legal obligations when required
We do not sell your personal information. We do not rent or trade it. We do not run advertising or share your data with advertisers.
Household & Sharing
Data that stays private to your account (not shared with your household) includes: your weight entries, your calorie logs, your account email, and your password.
Data that is shared with everyone in your household includes: calendar events, meal plans and dinner selections, shared lists, family chat messages, and household member details.
You can remove a household member at any time. Doing so revokes their access to shared data going forward but does not delete messages or events they authored — you can delete those individually.
Third-Party Services
We rely on the following third parties, each governed by its own privacy policy:
- Apple — In-App Purchase and push notification delivery. (policy)
- Anthropic — AI-powered features. When you use a feature like "Dinner From My Fridge" or a chat prompt, the text you send is transmitted to Anthropic to generate a response. Anthropic does not train models on API traffic per their commercial terms. (policy)
- Google Analytics — anonymous website usage analytics. (policy)
- Google Ads — conversion tracking for our marketing campaigns. (policy)
- Pexels — royalty-free imagery displayed alongside meal suggestions. Requests are made server-to-server; your identity is not shared with Pexels.
- National Weather Service — weather data. Only the approximate location you provide is sent, and no account identifier.
- Hostinger — our hosting provider, which stores our servers and databases.
We do not share your data with any third parties for advertising, marketing, or profiling purposes.
Email Communications & Push Notifications
By creating an account, you consent to transactional emails from us — account verification, password reset, subscription receipts, and critical service notices. These cannot be unsubscribed from without deleting your account, since they are required to operate the Service.
You may also opt in to product updates and tips. You can unsubscribe from those at any time using the link at the bottom of any such email.
If you enable push notifications, we send reminders and alerts you have configured (event reminders, chat messages, etc.). You can disable push notifications any time in iOS Settings > No Rebound > Notifications. See our Terms of Service for important limitations on notification reliability.
Cookies
Our website uses cookies for the following purposes only:
- Session cookies — to keep you logged in as you move between pages
- Preference cookies — to remember lightweight settings (for example, whether you have dismissed a banner)
- Analytics cookies — set by Google Analytics to measure site usage anonymously
We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser settings; some parts of the Service may not function correctly if you do.
Security
We protect your data with reasonable technical and organizational measures, including:
- HTTPS/TLS encryption for all traffic between your device and our servers
- Passwords stored only as one-way hashes; we cannot retrieve your password
- Access to production data restricted to the owner (John Osowski) and required service providers listed above
- Regular security review of authentication, API endpoints, and third-party integrations
No system is perfectly secure. If you become aware of a security issue, please report it to hello@getnorebound.com and we will investigate promptly.
Data Retention & Account Deletion
We retain your account and its data while your account is active. You can delete your account at any time from Settings > Delete Account within the app.
When you delete your account:
- Your account is immediately deactivated and can no longer be logged into
- Your personal data — including calendar events, meal plans, lists, chat messages, weight and calorie entries, and household details — is permanently deleted within 30 days
- Anonymized analytics and aggregated statistics that cannot identify you may be retained
- Subscription billing stops at the end of your current period (managed by Apple)
We may retain limited records (e.g. that an account existed and was deleted) where required for legal, tax, security, or fraud-prevention purposes.
Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your data (in most cases, using in-app account deletion satisfies this)
- Export a copy of Your Content
- Object to or restrict certain processing
- Withdraw consent for optional marketing communications
- Lodge a complaint with a data protection authority
To exercise any of these rights, email hello@getnorebound.com. We will verify your identity before acting on the request.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with information, please contact us at hello@getnorebound.com and we will delete it.
Parents adding children as household members are responsible for the information they choose to add on the child's behalf (for example, a child's name, birthday, or activities). Do not add sensitive information about a child that you are not comfortable sharing within the family.
International Users
Our servers are located in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have data-protection laws different from those in your jurisdiction.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, notify users through the app or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.