Nomhub

Nomhub privacy policy

Last updated: November 7, 2026

In short

Nomhub is a recipe app by Ohhi. This page explains which data the app uses, where it is kept, who processes it, how long it is kept and what you can do about it.

  • Your recipes live on your device. You don't need an account, and without one nothing reaches us.
  • No ads, no tracking and no third-party analytics or crash-reporting services.
  • Signing in with your Ohhi account is optional. Nomhub then syncs your recipes with that account, and you only share within your own Ohhi circle.
  • Having a page read or a recipe thought up (Ohhi Plus) only happens after you have explicitly agreed to it in the app. Something then goes to OpenAI through ohhi.nl; exactly what is described below.

On your device

Your recipes, with their ingredients, steps, notes and photos, are kept in a database on your device. Pasted text in another language is translated on the device (with ML Kit). Delete the app and all of this is gone.

Nomhub asks for access to the camera and your photos only to add a photo to a recipe or to scan a page. The app does not ask for access to your microphone or your location, and collects no advertising ID or other device identifiers.

With your Ohhi account (optional)

You can sign in to Nomhub with your Ohhi account (on iPhone and iPad through the Ohhi app). Nomhub then syncs with your own account:

  • your recipes, with their ingredients, steps and notes, and their photos;
  • your lists and your regular groceries;
  • comments on shared recipes.

Nomhub then also knows your account's email address. Sharing only happens within your own Ohhi circle: the people you share a folder with can find, cook and save a recipe you share. People on a shared list only see the name and the ingredients of your recipes.

For everything kept with your Ohhi account, Ohhi is the data controller (see Contact, at the bottom), and Ohhi's terms of use apply to your account.

Having a page read (Ohhi Plus)

Scanning comes with Ohhi Plus. Before the first scan the app explicitly asks for your permission, naming ohhi.nl and OpenAI. Without it nothing leaves your device; you can switch it off later in your profile. Typing a recipe or pasting text always works.

  • The photo of the page goes to ohhi.nl, where it is resized in memory and stripped of metadata such as location and camera.
  • ohhi.nl sends the photo to the OpenAI API and asks OpenAI not to store the request. OpenAI does not train on it and, under its own policy, keeps API input for at most 30 days to detect abuse.
  • ohhi.nl does not keep the photo and logs nothing about what is on it.
  • The recipe comes back to your device as text. You check it first and change whatever you like in the form.

Having a recipe thought up or refined (Ohhi Plus)

This also comes with Ohhi Plus, and the app asks for a separate permission first, again naming ohhi.nl and OpenAI. You can switch it off later in your profile.

  • What is sent: your typed request, the short suggestions you tap, the number of servings, the language and your measurements. When refining, the text of the recipe goes along too (title, ingredients and steps).
  • Never your name, your photos or your other recipes.
  • ohhi.nl sends it to the OpenAI API on the same terms as a scan, and keeps nothing of your request or the recipe.
  • The answer is a draft on your device. It only becomes a recipe when you tap Save.

Comments, reporting and blocking

Comments on a shared recipe are visible to the people in that circle. You can report any comment: the report goes to Ohhi's moderators with the reason, and the writer is not told who reported it. You can block the writer: you then no longer see their comments, and they can no longer comment on what you share. You can delete your own comments, and as the owner of a recipe any comment on it.

Where your data is kept and who processes it

What belongs to your Ohhi account is kept by Ohhi on servers in the European Union. Ohhi does not sell your data and does not pass it on for marketing. Ohhi uses these processors, all under a data processing agreement:

  • Hetzner Online GmbH (Germany/Finland): hosting and storage of your data and photos.
  • BunnyWay d.o.o. (Slovenia): Bunny CDN, which sits in front of the website and the app and delivers photos quickly; it processes, among other things, your IP address and the requested URL.
  • OpenAI, L.L.C. (United States): only to have a page read or a recipe thought up or refined, and only with your permission (see above).

For a processor outside the EU/EEA, Ohhi relies on the European Commission's standard contractual clauses or a valid adequacy decision.

How long data is kept

  • On your device: until you delete it yourself or delete the app.
  • With your Ohhi account: your recipes, photos, lists, regular groceries and comments are kept as long as your account exists. When you delete your account, Ohhi deletes all of it straight away, together with your email address and the rest of your account: in practice within minutes, with no recovery window. What you added to someone else's shared list stays on that list, without your name. A recipe someone else saved as their own copy belongs to them.
  • Scanned pages and recipe requests: ohhi.nl does not keep them. It only records that a request was made (your user ID, how long it took and its size), never what it contained. OpenAI keeps API input for at most 30 days.
  • Reports: until a moderator has dealt with the report. After that, only the fact that there was a report and its outcome are kept, without your note.
  • Blocks: until you unblock the person or one of you deletes their account.
  • Security logs: Ohhi records sign-ins and actions such as uploading, deleting and sharing with IP address and user agent, sometimes also with your email address. These records are deleted automatically after 90 days, even if you delete your account earlier.
  • Error reports: if something goes wrong on Ohhi's server, Ohhi keeps a technical report on its own server: your user ID, the type of error and the route, no email address, IP address or content. It is deleted after 90 days.

Deleting your data and account

  • Signing out stops syncing and sharing. Your recipes stay on the device.
  • On your device: delete the app and your local data is gone.
  • Your Ohhi account is deleted in Nomhub through Profile → Account → Delete account, or in the Ohhi app. The recipes on your device stay until you delete the app.

Your rights

You have the right to access, correct, delete, restrict and transfer your data, and to object to its processing. Email support@ohhi.nl for this; we reply within 30 days. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

When we change this policy, the date at the top changes with it.

Contact

The data controller is Geraedts Holding B.V., the company behind Ohhi (Chamber of Commerce no. 88631036), Hengstdalseweg 109, 6523 ED Nijmegen, Nederland. Questions about Nomhub or your privacy: support@ohhi.nl.