Privacy Policy

Effective as of: August 9, 2025

This Privacy Notice is designed to help you understand how People Who Code LLC d/b/a Tummi (“Tummi”, “we”, “us,” and “our”) collects, uses, and shares your personal information and to help you understand and exercise your privacy rights.

We are committed to protecting and respecting your privacy and will use your personal information in accordance with the General Data Protection Regulation (the “GDPR”), the California Consumer Privacy Act of 2018 (the “CCPA”), California Privacy Rights Act (the “CPRA”), and other applicable laws, regulations, and guidelines.

1. Scope

This Privacy Notice applies to personal information processed by us on the Tummi mobile app (“App”) and Tummi website (“Site”). To make this Privacy Notice easier to read, our mobile app and related offerings are collectively called “Services.”

2. Changes to our Privacy Notice

We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Notice if you continue to use our Services after the new Privacy Notice takes effect. We encourage you to regularly review this Privacy Notice to check for any changes.

3. Personal Information We Collect

The categories of personal information we collect depend on how you interact with us, our Services, and the requirements of applicable law. We collect information that you provide to us, information we obtain automatically when you use our Services, and information from other sources such as third-party services and organizations, as described below.

3.1 Information You Provide to Us Directly

We may collect the following personal information that you provide to us:

  • Account Creation: We may collect information when you create an account, such as your profile name, email address, and Google or Apple profile information.
  • Meal Photos and Food Data: We may collect photos of meals, food items, nutritional information, and dietary preferences you share within the app.
  • Interactive Features: We and others who use our Services may collect personal information that you submit or make available through our interactive features (e.g., meal logs, food photos, or nutritional data you share in the app). Any information you provide on the public sections of these features will be considered “public,” unless otherwise required by applicable law, and is not subject to the privacy protections referenced herein.
  • Purchases: We may collect personal information and details associated with your purchases, including payment information. Any payments made via our Services are processed by third-party payment processors. We do not directly collect or store any payment card information entered through our Services, but we may receive information associated with your payment card information (e.g., your billing details).
  • Your Communications with Us: We may collect personal information, such as name, surname, email address, and other personal data you provide when you register on Tummi (including registration via Google OAuth), request information about our Services, subscribe to receive our newsletter or marketing, request customer or technical support, or otherwise communicate with us.
  • Surveys: We may contact you to participate in surveys. If you decide to participate, you may be asked to provide certain information which may include personal information.

3.2 Information Collected Automatically

We may collect personal information automatically when you use our Services:

  • Automatic Data Collection: We may collect certain information automatically when you use our Services, such as your Internet protocol (IP) address, user settings, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, browser or device information, location information (including approximate location derived from IP address), and metadata about the content you provide (e.g., location of where a meal photo was taken). We may also automatically collect information regarding your use of our Services, such as pages visited, links clicked, content interacted with, frequency and duration of activities, app usage history, meal logging patterns, and other information about how you use our Services.
  • Analytics: We utilize third-party tools to analyze data that is automatically collected. Among our analytics partners is Amplitude. To gain a comprehensive understanding of how your data is managed, please refer to Amplitude’s Privacy Notice. The analytics data we handle is general and anonymized, processed in a way that prevents any user from being re-identified.

3.3 Information Collected from Other Sources

We may obtain information about you from other sources, including through third-party services and organizations. For example, if you access our Services through a third-party application, such as an app store, a third-party login service, or a social networking site, we may collect information about you from that third-party application that you have made available via your privacy settings.

4. How We Use Your Information

We use your information for a variety of business purposes, including to provide our Services, for administrative purposes, and to market our products and Services, as described below.

4.1 Provide Our Services

We use your information to fulfill our contract with you and provide you with our Services, such as:

  • Providing our AI-powered nutrition tracking features, meal logging, and personalized dietary recommendations;
  • Managing your information and account;
  • Providing access to certain areas, functionalities, and features of our Services, such as meal tracking, food recognition, and nutritional analysis;
  • Answering requests for customer or technical support;
  • Communicating with you about your account, activities on our Services, terms of use, privacy notice, and other policy changes;
  • Processing your financial information and other payment methods for Services purchased.

4.2 Administrative Purposes

We use your information for various administrative purposes, such as:

  • Pursuing our legitimate interests such as direct marketing, research and development, network and information security, and fraud prevention;
  • Detecting security incidents, data breaches, and leakages, protecting against malicious, deceptive, fraudulent, or illegal activity;
  • Measuring interest and engagement in our Services;
  • Improving, upgrading, or enhancing our Services (including safety checks and food recognition optimization);
  • Developing new products and Services;
  • Ensuring internal quality control and safety;
  • Authenticating and verifying individual identities;
  • Debugging to identify and repair errors with our Services;
  • Auditing relating to interactions, transactions, and other compliance activities;
  • Enforcing our agreements and policies;
  • Complying with our legal obligations.

4.3 Marketing and Advertising our Products and Services

We may use personal information to tailor and provide you with content and advertisements. We may provide you with these materials as permitted by applicable law. Some of the ways we may market to you include email campaigns, custom audiences advertising, and “interest-based” or “personalized advertising,” including through cross-device tracking.

If you have any questions about our marketing practices or if you would like to opt out of the use of your personal information for marketing purposes, you may contact us at any time as set forth in Section 16 (“Contact us”) below with the subject line “Do Not Share My Personal Information for Cross-Context Behavioral Advertising.”

4.4 Other Purposes

We also use your information for other purposes as requested by you or as permitted by applicable law:

  • Consent: We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.
  • De-identified and Aggregated Information: We may use personal information and other information about you to create de-identified and/or aggregated information, such as de-identified demographic information, de-identified location information, or other analyses we create.
  • Share Content with Friends or Colleagues: Our Services may offer various tools and functionalities, such as sharing meal photos or nutritional insights with others.

5. How We Disclose Your Information

We disclose your information to third parties for a variety of business and legal purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below.

5.1 Disclosures to Provide our Services

The categories of third parties with whom we may share your information are described below:

  • Other Third Parties: When you use the Services, you may choose to share personal information or content with other third parties via the functionalities of the App, such as meal sharing and nutritional insights.
  • Service Providers: We may share your personal information with our third-party service providers who use that information to help us provide our Services, including IT support, hosting, payment processing, customer service, and related services.
  • Database and Backend Services: We use Supabase for secure data storage, real-time synchronization, and backend services to power our nutrition tracking, meal logging, and AI-powered features.
  • Subscription Management: We use RevenueCat to manage in-app purchases, subscription billing, and payment processing across iOS and Android platforms.
  • Authentication Services: We use Google OAuth and Apple Sign-In for secure account creation and authentication. Please review their respective privacy policies: Google Privacy Policy and Apple Privacy Policy.
  • Business Partners: We may share your personal information with business partners to provide you with a product or service you have requested.
  • Subsidiaries and Affiliates: We may share your personal information with members of our corporate family.
  • Advertising Partners: We may share your personal information with third-party advertising partners for purposes of delivering personalized advertisements.
  • APIs/SDKs: We may use third-party APIs and SDKs as part of the functionality of our Services.

5.2 Disclosures to Protect Us or Others

We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

5.3 Disclosure in the Event of Merger, Sale, or Other Asset Transfers

If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your information may be transferred as part of such a transaction, as permitted by law and/or contract.

6. Your Privacy Choices and Rights

6.1 Your Privacy Choices

The privacy choices you may have about your personal information are determined by applicable law and are described below:

  • Devices: We may send you push notifications through our App. You may opt out from receiving these push notifications by changing the settings on your mobile device. With your consent, we may also collect precise location-based information via our App. You may opt out of this collection by changing the settings on your mobile device.
  • “Do Not Track”: We do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
  • Cookies and Interest-Based Advertising: You may stop or restrict the placement of tracking tools on your device or remove them by adjusting your preferences as your browser or device permits. Note that cookie-based opt-outs are not effective on mobile applications.

6.2 Your Privacy Rights

In accordance with applicable law, you may have the right to:

  • Access Personal Information about you;
  • Request Correction of your personal information where it is inaccurate or incomplete;
  • Request Deletion of your personal information;
  • Request the Transfer of your personal data to you or to a third party;
  • Request Restriction of or Object to our processing of your personal information;
  • Withdraw Your Consent to our processing of your personal information.

If you would like to exercise any of these rights, please contact us as set forth in Section 16 (“Contact us”) below. We will process such requests in accordance with applicable laws.

7. Security of Your Information

We take steps to ensure that your information is treated securely and in accordance with this Privacy Notice. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

8. International Data Transfers

Your data may be transferred outside the European Economic Area (EEA) to our group companies or third-party service providers which Tummi engages in other regions (including without limitation the USA), which may have data protection laws that are different from the laws where you live. We ensure that your information is protected by using certified services, signing agreements on protection of personal data, and taking technical measures to secure data.

9. Retention of Personal Information

We may store the personal information we collect as described in this Privacy Notice for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected. Personal information will be stored on secure servers during the period you have a valid and active account unless you delete such data manually using the App functionality or via a “Remove my data” button. You may also request us to delete your personal data by contacting us at team@tummi.app.

10. Supplemental Notice for California Residents

This Supplemental Notice for California Residents applies to our processing of personal information subject to the CCPA and CPRA. California residents have the right to know what categories of personal information we have collected about them and whether such information was disclosed for a business purpose in the preceding twelve (12) months.

Category of Personal Information Collected by TummiCategories of Third Parties Personal Information is Disclosed to for a Business Purpose
IdentifiersService providers, Other users or third parties you share with, Advertising partners
Personal information categories listed in Cal. Civ. Code § 1798.80(e)Service providers, Other users or third parties you share with
Commercial informationService providers, Other users or third parties you share with
Internet or other electronic network activityService providers, Other users or third parties you share with, Advertising partners
Geolocation dataService providers, Other users or third parties you share with, Advertising partners
Inferences drawn from other personal informationService providers, Other users or third parties you share with, Advertising partners

11. Supplemental Notice for Nevada Residents

If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information. You can exercise this right by contacting us at team@tummi.app with the subject line “Nevada Do Not Sell Request.”

12. Supplemental Notice for Virginia Residents

Under the Virginia Consumer Data Protection Act, you may request us to exercise your right to access, correct, or delete your personal data, or to opt out of the processing of personal data for targeted advertising or profiling.

13. Children’s Information

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you learn that your child has provided us with personal information without your consent, please contact us at team@tummi.app.

14. Third-Party Websites/Applications

The Services may contain links to other websites/applications. We encourage our users to read the privacy policies of each website and application with which they interact.

15. Supervisory Authority

If you reside in the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with a supervisory authority. The full list of authorities is available at: EU Data Protection Authorities.

16. Contact Us

People Who Code LLC is the controller of your personal information. If you have any questions about our privacy practices or this Privacy Notice, or to exercise your rights, please contact us at:

People Who Code LLC
447 Broadway, 10th Floor
New York, NY 10013, United States
Email: team@tummi.app