StummyPrivacy Policy
Stummy helps you slow down while you eat. This policy explains what the Stummy app and the stummy.app website collect, why, who helps us process it, and how you can delete it. We don’t sell your data, we don’t show ads, and we don’t track you across other apps or websites.
1. Who we are
“Stummy”, “we” and “us” mean the team behind the Stummy app and stummy.app. You can reach us at hello@stummy.app for anything in this policy.
2. What we collect in the app
Stummy has no email or password sign-in. The app creates an anonymous account the first time it needs the cloud, so your data is tied to a random ID rather than to your name or email.
| Data | What it is | Why we use it |
|---|---|---|
| Anonymous account ID | A random ID generated by our backend provider. | To keep your data separate from everyone else’s and to sync it. |
| Device identifier | Apple’s identifier for vendors (or the Android ID), and your time zone. | To recognise the same device after a reset and to apply fair daily scan limits. |
| Profile | Your first name, your age range (13 and up; if you pick “Under 13” nothing is saved) and your onboarding answers (for example your goal, how long meals usually take, and what makes you eat fast), plus the pace profile Stummy derives from them. | To personalise your pace and greet you by name. |
| Meal log | For each meal: a food label, texture, portion size, planned and actual duration, bite counts, and how full you felt and whether the pace felt right. | To set paces, show history and insights, and track your streak. |
| Post-meal feeling | An optional rating of how you felt after eating: Comfortable, A bit off, Heavy or Rough. These are stored as a discomfort level (none, mild, moderate or severe). | To adjust paces and your Stummy’s mood. This can be considered health-related data. It is kept in your Stummy account only and is never sent to OpenAI or used for advertising. |
| Meal photos | The photo you take when you scan a meal (see section 3). | To estimate texture and portion so Stummy can suggest a pace. |
| Scan records | A timestamp, success or failure, the food label, your device identifier and a one-way hash of your IP address. | To enforce daily scan limits and prevent abuse. We don’t store your raw IP address. |
Some information stays only on your device: your settings, reminder preferences, and the data the Stummy widget and Live Activity display (shared between the app and its widget on your phone).
Permissions. Stummy asks for camera access to photograph your meal. It asks for notification permission after your first finished meal or when you turn on a reminder, never at launch. Reminders are scheduled on your device; we don’t send remote push notifications. Stummy doesn’t use your microphone, photo library or location.
3. Meal photos and AI
When you scan a meal, the photo is sent to OpenAI, a third-party AI service, through our server. We ask for your permission before the first scan, and you can turn it off at any time in Settings → AI photo analysis.
- Only the photo is sent for analysis. The result (such as texture and portion estimate) is returned to your phone.
- Stummy doesn’t save your photo. It stays on your device only while the scan runs and isn’t added to your meal history or cloud account.
- OpenAI processes the photo under its own API terms and privacy policy. Under its API terms, data sent through the API isn’t used to train its models by default, and it may keep requests for a limited period for security and abuse monitoring.
- If you say no, Stummy skips scanning. Every meal gets a standard 20 minute pace and a generic name like “Meal #1”, and nothing is sent to OpenAI.
AI estimates can be wrong. Please don’t photograph people, documents or anything you don’t want processed.
4. How we use your data
- To run the app: set your pace, time your meals, show history, insights and streaks.
- To keep your data in sync between sessions and protect the service from abuse.
- To fix bugs and respond when you contact us.
We don’t use your data for advertising, we don’t sell or rent it, and we don’t combine it with data from other companies to track you. Stummy doesn’t show the App Tracking Transparency prompt because it doesn’t track you.
5. Who processes data for us
| Provider | What they do |
|---|---|
| Supabase | Hosts our database, anonymous sign-in and the server function that handles meal scans. |
| OpenAI | Analyses meal photos, only with your permission (section 3). |
| Apple | Distributes the app. Apple handles App Store and TestFlight data under its own policy. |
We may also disclose information if the law requires it or to protect our rights and users’ safety. These providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
6. The website (stummy.app)
- Waitlist. If you join the waitlist we store your email address, the page or campaign you came from (including UTM parameters) and a one-way hash of your IP address used for rate limiting. We use it to tell you about the launch. You can ask us to remove it at any time.
- Analytics. We use Google Analytics to understand how people use the site. It may set cookies and collect usage data such as pages viewed and approximate location. You can block it with your browser settings or opt out with Google’s browser add-on.
- Emails. If you write to us we keep the conversation so we can help you.
7. How long we keep it and how to delete it
We keep your app data (profile, meals, post-meal feelings and scan records) until you delete it. We don’t set an automatic expiry date for it. Stummy doesn’t keep meal photos (section 3). We keep waitlist emails until you unsubscribe or ask us to delete them, and emails you send us for as long as needed to help you.
To delete your data, open Settings → Delete my data in the app. This deletes your profile, meals, post-meal feelings and scan records from our servers and clears everything stored on your phone. The anonymous account ID that remains is empty and holds no personal data. Deleting is immediate and you can’t undo it.
Uninstalling the app does not delete your cloud data. Because accounts are anonymous, once the app is removed we can’t tell which records were yours, and a new install starts a new account. Use Delete my data first. If you already uninstalled, email us and we’ll do our best to find and remove your data (we may need the device identifier, which can be hard to recover).
Requests by email. We answer deletion, access and other privacy requests within 30 days.
8. Your rights
Depending on where you live (for example in the EU, UK or California) you may have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent at any time. Most of this you can do yourself in the app: withdraw photo-analysis consent in Settings and delete your data with Delete my data. For anything else, email hello@stummy.app. You also have the right to complain to your local data-protection authority.
If you’re in the EU or UK, our legal bases are: performing the service you asked for (running the app), your consent (sending photos to OpenAI, optional reminders), and our legitimate interests (security, abuse prevention and improving the service).
9. Security
Data is encrypted in transit and access to it is restricted per account. Our AI provider’s key is kept on our server and never inside the app. No system is perfectly secure, so we can’t guarantee absolute security.
10. Children and teens
Stummy is for people aged 13 and over. During setup the app asks for an age range, and anyone who picks “Under 13” can’t continue; that answer is never stored. We don’t knowingly collect data from children under 13. If you believe a child has used the app, contact us and we’ll delete it.
If you’re under the age at which you can consent to data processing where you live (up to 16 in some countries), please use Stummy only with a parent or guardian’s permission. A parent or guardian can ask us to delete a teen’s data at any time at hello@stummy.app.
11. Not medical advice
Stummy supports mindful eating habits. It isn’t a medical device and doesn’t diagnose, treat or prevent any condition. If you have concerns about your eating or health, talk to a doctor or dietitian.
12. Changes
If we change this policy in a meaningful way we’ll update the date above and, for material changes, tell you in the app or by email before they take effect.
13. Contact
Questions or requests: hello@stummy.app.