Privacy Policy

Rumbly Eats is an independent product run by one person ("we", "us"). This policy tells you exactly what we collect, why, and how to remove it.

What we collect

Account information

• Email address and display name (from Google or Apple Sign-In).
• Authentication tokens — stored as a session cookie, used to verify your identity on subsequent requests.

Nutrition data you log

• Meal entries — name, time, calories, macros, optional notes.
• Photos of meals — when you use AI photo logging. Photos are sent to OpenAI for analysis and stored on our server tied to your account.
• Voice transcripts — when you use AI voice logging. The audio is transcribed locally on your device by your operating system; only the resulting text is sent to our server and to OpenAI.
• Profile data you enter — age, height, weight history, target weight, activity level, dietary goals, wellbeing ratings.

Health data (iOS only, with your permission)

• Daily step count, active calories, and weight readings pulled from Apple HealthKit.
• Used only to inform calorie targets and the coach. Never shared with third parties.
• You can revoke access at any time in iOS Settings → Privacy → Health → Rumbly Eats.

Device & technical data

• Push notification token (if you enable notifications).
• App version, operating system version.
• Server access logs — IP address, request timestamps, status codes. Used for rate limiting and abuse prevention. Rotated regularly.

Analytics & error reports

• Anonymized feature-usage events (page views, button clicks). No email, name, or message content is sent.
• Crash reports — stack traces with personal data redacted.

Third parties we share data with

• OpenAI — meal photos and voice transcripts are sent to OpenAI's API for AI analysis. OpenAI does not use this content to train their models when accessed via API. See OpenAI's API data policy.
• Google — used for "Sign in with Google" only. We receive your email and name; Google does not receive any nutrition data.
• Apple — used for "Sign in with Apple" and push notifications. We receive your email (or Apple's relay address) and name; Apple does not receive nutrition data.
• Sentry — receives crash reports with personally identifying data redacted before sending.
• PostHog — receives anonymized feature-usage events with no email, name, or meal content.
• Buy Me a Coffee / Stripe — if you choose to support development via the donation link on rumblyeats.org, those services handle the transaction. Rumbly Eats does not see your card number or billing address.

What we do NOT do

• We do not sell your data.
• We do not show ads.
• We do not share your nutrition data with anyone, ever.
• We do not use your data to train AI models.

How long we keep data

We keep your data for as long as your account is active. When you delete your account inside the app (Profile → Delete account), all your data — meals, photos, profile, health metrics — is permanently erased from our database within 24 hours.

Server access logs (IP / timestamps) are retained for up to 30 days for security purposes, then deleted.

Your rights

• Export — Profile → Export data lets you download all your nutrition history as CSV.
• Delete — Profile → Delete account removes everything. Irreversible.
• Ask questions — email support@rumblyeats.org and we'll respond within a few days.

Children

Rumbly Eats is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, please contact us and we'll remove it.

Changes to this policy

If anything material changes — new third party, new data category — we'll update this page and bump the "Last updated" date. For significant changes we'll also surface a notice in the app on your next launch.

Contact

Questions, concerns, or data requests: support@rumblyeats.org