Noom Privacy Policy

This is Noom's privacy policy explaining how the weight-loss and wellness app collects and uses your personal health data, including your weight, food logs, exercise habits, and health conditions. The most important thing to know is that Noom shares your sensitive health information with third-party advertising and analytics partners, which is not typical for health apps and could expose your personal wellness data to marketers. You can request deletion of your data or opt out of certain data sharing by contacting Noom at privacy@noom.com or through your account settings.

This document is Noom's Privacy Policy governing the collection, use, and sharing of personal data by Noom Inc. when users interact with its weight management and behavior-change platform, relying on consent and legitimate interest as legal bases. The policy obligates Noom to disclose data practices and grants users rights to access, delete, correct, and export their data, while Noom retains broad discretion to share data with third-party service providers, analytics vendors, and advertising partners. Notably, Noom collects sensitive health and biometric data — including weight, food intake, exercise habits, and health conditions — and uses this data for advertising and analytics purposes, which represents elevated risk beyond typical consumer app data practices. The policy engages GDPR (EU/EEA users), CCPA/CPRA (California residents), and potentially HIPAA-adjacent considerations given the nature of health data collected, though Noom disclaims HIPAA applicability as a non-covered entity. Material compliance considerations include the adequacy of consent mechanisms for sensitive health data processing, cross-border data transfers under GDPR Chapter V, and California's treatment of health data under the California Consumer Privacy Act as amended by CPRA.