Privacy Policy — nana

Last updated: 14 July 2026

This Privacy Policy explains how CFHMF LLC ("nana", "we", "us") collects, uses, and shares information when you use the nana mobile app and website (the "Service") — a platform where home cooks ("Nurturers") share and sell homemade food and where people ("Enjoyers") discover it.

1. Who is responsible for your data

The data controller is CFHMF LLC, 2795 E. Cottonwood Parkway, Suite 300 #1189, Salt Lake City, Utah 84121, United States. For any privacy question or request, contact us at app@thenana.app.

2. Information we collect

Information you provide

• Account & profile: email address, username, display name, bio, profile photo, cover photo, and (for cooks) an explainer video, specialty, tagline and US state.
• Cook fulfillment details: your pickup and/or delivery address (street, city, ZIP, country) and delivery radius. Full addresses are kept private and are only revealed to a buyer after an order is placed.
• Content: photos and videos of food, captions, hashtags, comments, and other content you post.
• Messages: the direct messages you send to other users.
• Taste preferences: the food preferences and quiz answers you provide, used to personalise your feed and recommendations.
• Support & feedback: anything you send us directly.

Information collected automatically

• Usage & interaction analytics: we record in-app events (for example screens viewed, likes, follows, orders and other actions) to understand and improve the Service. Limited analytics may be collected during anonymous browsing sessions before you create an account.
• Approximate location: derived from addresses you enter (via geocoding), used to match cooks and buyers by distance. We do not continuously track your device location.
• Device & technical data: standard information such as IP address, device type and app version, used for security and reliability.

Payment information

Payments and subscriptions are processed by Stripe. We do not store your full card details; Stripe processes them under its own privacy policy. We retain only identifiers (such as a Stripe customer / subscription ID) needed to manage your account.

3. How we use your information

• Provide and operate the Service (accounts, feed, posts, messaging, orders).
• Connect Enjoyers with nearby Nurturers and personalise recommendations.
• Process subscriptions and order-related functionality.
• Power in-app AI assistance ("OROS") — see below.
• Keep the platform safe (content moderation, abuse prevention, security).
• Understand usage and improve the product (analytics).
• Send you service communications (e.g. password resets, notifications).

4. AI features (OROS)

Some features use Anthropic (the Claude API) as a processor — for the OROS assistant, content-moderation triage, and translation. When you use these features, the relevant content (for example your chat messages, a dish description, or text to translate) is sent to Anthropic to generate a response. This content is processed to provide the feature and is subject to Anthropic's terms.

5. When we share information

We do not sell your personal information. We share it only:

Recipient	Purpose
Other users	Your public profile and content; your full pickup address is shared with a buyer only after an order.
Stripe	Payment and subscription processing.
Anthropic	AI assistant, moderation and translation features.
Google Maps Platform	Geocoding and address autocomplete for fulfillment.
Amazon Web Services (SES)	Sending transactional email (e.g. password reset).
Apple / Google	App distribution and, during testing, TestFlight.
Legal / safety	Where required by law or to protect users and the platform.

6. Data retention

We keep your information for as long as your account is active. When you delete content or your account, we apply a soft-delete and then remove or anonymise the data within 30 days, except where we must retain it for legal, security or accounting reasons.

7. Your rights & choices

• Access, correct or delete your profile information in the app.
• Delete your account, which removes your public content.
• Depending on where you live (e.g. the EU/EEA under GDPR), you may have rights to access, rectify, erase, restrict, port, or object to processing of your data. To exercise these, contact app@thenana.app.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their data.

9. International transfers

Your information may be processed in countries other than your own, including by the service providers listed above. Where required, we rely on appropriate safeguards for such transfers.

10. Governing law

This Privacy Policy and any dispute relating to it are governed by the laws of the State of Utah, United States, without regard to its conflict-of-laws principles.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above.

12. Contact

Questions? Email app@thenana.app or write to CFHMF LLC, 2795 E. Cottonwood Parkway, Suite 300 #1189, Salt Lake City, Utah 84121, United States.