Privacy Policy

Information we collect

• Account information. Your email address, username, name, and optionally a bio, city, and profile photo. If you sign in with Google, we receive your name, email, and Google account identifier from Google. If you sign in with Apple, we receive your Apple account identifier and the email you choose to share (which may be an Apple private relay address).
• Content you create. Ratings, photos, comments, collections, saved places, and trips. Content you post may be visible to other Tummi users depending on your visibility settings: you can set a default visibility for new content, override it per rating, and make your account private so only approved followers see your content. If you add collaborators to a trip, they can see and edit that trip. We also show derived activity, such as points, leaderboard rank, and yearly summaries, to people who follow you.
• Contacts (optional). If you grant contacts access to find friends, we use the email addresses in your contacts to check which of your contacts are on Tummi and to let you send invites. We use contact emails for matching and invitations you choose to send; we do not sell them or use them for advertising.
• Location (optional). If you grant location access, we use your location to find places near you. We use your location while you use the app; we do not track your location in the background.
• Camera and photos (optional). If you grant access, photos you choose to attach to ratings or your profile are uploaded to our servers.
• Usage and diagnostics. We collect app usage analytics (via PostHog) and crash reports (via Sentry) to understand how the app is used and to fix problems. This includes device information such as device model, OS version, and app version.
• AI recommendations (Tummi Pro). When you use personalized recommendations, the trip planner, or dish guides, we send an AI provider (Perplexity) the information needed to generate results: the names of places you have rated highly, your favorite cuisines, and the city, dates, or area you ask about. We do not send your name, email, username, or contacts.
• Subscriptions. Purchases are processed by Apple. We and our subscription provider (RevenueCat) receive your purchase status, transaction identifiers, and an anonymous app user ID. We never receive your payment card details.
• Push notifications. If you enable notifications, we store a device token (via Firebase Cloud Messaging) to deliver them. You can turn notifications off at any time in Settings.

How we use your information

• To provide and operate Tummi: accounts, ratings, feeds, follows, search, and invites.
• To show your content to people you share it with.
• To send notifications you have enabled.
• To understand usage, fix bugs, and improve the app.
• To keep Tummi safe, including preventing abuse.

We do not sell your personal information, and we do not use it for third-party advertising.

Service providers

We use a small number of service providers to run Tummi: Google Cloud (hosting and storage), Google Sign-In and Sign in with Apple (authentication), Firebase (push notifications), Mailgun (transactional email such as sign-in codes and invites), Mapbox and Google Places (maps and place data), Perplexity (AI recommendations), RevenueCat (subscription management), PostHog (analytics), and Sentry (crash reporting). These providers process data on our behalf and are not permitted to use it for their own advertising.

Data retention and deletion

We keep your information while your account is active. You can delete your account at any time in the app under Settings → Delete account. Deleting your account permanently removes your account and your content from Tummi. You can also email us at support@tummi-app.com to request deletion.

Your choices

• Contacts, location, camera, photo, and notification access are optional and controlled in iOS Settings.
• You can edit or delete your ratings, comments, and profile information in the app.
• You can make your account private and change your default content visibility in Settings.
• The home screen widget caches a copy of your data on your device; removing the widget or the app clears it.
• You can delete your account in the app at any time.

Children

Tummi is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

If we make material changes to this policy, we will update this page and revise the "Last updated" date above.