Licenses and data notices

Software

Original opennosh software and documentation are licensed under the MIT License.

Food data

Community food packs

CC0 1.0 Universal. Contributor credit stays visible as a community promise, not an extra legal restriction.

USDA FoodData Central

CC0 1.0 Universal, with FoodData Central retained as the source.

Open Food Facts

Database rights under ODbL 1.0 and individual contents under DbCL 1.0. The optional cache stays separate, and product images are not used.

Exercise data

Accepted wger exercise entries retain their exact per-entry attribution and CC BY-SA 3.0 terms. ShareAlike requirements remain attached to the separate exercise export.

Private account data

Your custom foods, logs, recipes, targets, body metrics, and workouts are private account data. They are not included in any public food or exercise dataset export.

Hosting and your data

The opennosh.org beta is operated by Rujit Raval. The application and private account database run on Render in Ohio, United States. Cloudflare provides the domain and public delivery infrastructure. Self-hosted instances are controlled by their own operators.

Your email, password hash, recovery-code hash, settings, and Tracker records are stored to run your account. Private means they are separated from other users and public datasets; the hosted service is not end-to-end encrypted. The operator and infrastructure providers can process stored data to operate and maintain the service.

Session and security cookies keep you signed in and protect requests. Interface preferences and unfinished contribution drafts may be stored in your browser. Clear site data on a shared device to remove those local drafts. Do not put private health information in a public contribution or GitHub issue.

Tracker records remain until you remove them or delete your account in Account settings. Account deletion removes private Tracker data from the active database and revokes sessions. Public contributions, review decisions, Git history, and published releases remain public. Backup copies and provider logs follow the operational retention described in the hosting guide; deleting an account does not immediately rewrite existing backups.

Save your one-time recovery code: password recovery requires that code, not an email reset link. Export your private data from the Tracker before deleting your account. Support cannot recover a lost recovery code.

For support, data questions, or a deletion problem, contact support@opennosh.org.