Privacy Policy
Last updated: 7 October 2026
This policy explains what data the MeTummy app collects, why it collects it, where the data goes and how long it stays. MeTummy is an app for iOS and Android that logs food and tracks nutrition.
MeTummy makes MeTummy and is responsible for your data. In this policy, "we" means MeTummy. Write to hello@metummy.com with any question or request about your data.
The short version
- We do not sell your data. We do not show ads, and the app contains no advertising or analytics trackers.
- Your food log and body data sync to your account, so that you can use them on another phone.
- Sleep, steps, heart rate, temperature, active energy and period data that the app reads from Apple Health or Health Connect stay on your phone.
- We never use health data for advertising, and we never give it to data brokers.
- You can export all your data, and you can delete your account and its data, from inside the app.
Data you give us
Your account
You need an account to use MeTummy. You sign in with an email address and a password, with Google, or with Apple. Google's Firebase Authentication service keeps your sign-in details. We never see your password. If you sign in with Google or Apple, we receive the name and email address that they share.
Your profile
The app asks for your name, sex, birth date, height, activity level, training experience and your goal. You can also give a body fat percentage and a target weight. The app uses these to estimate your energy needs and to set your calorie and macro targets.
Your log
The app keeps what you enter: foods, meals, recipes, custom foods, weight, body measurements, water, notes, habits and weekly check-ins. It also keeps your settings.
All of this is stored on your phone. A copy is stored in Google Cloud Firestore, linked to your account, so that the data syncs between your devices and survives a lost phone. Firestore stores it in the United States.
Data from Apple Health and Health Connect
The app reads only the types of data that you allow, and only after you allow them. You can change your answer at any time in Apple Health or in Health Connect.
- Weight and body fat. These become part of your weight log, so they sync to your account like a weight that you type in.
- Steps, sleep, resting heart rate, sleeping temperature, active energy and period dates. These stay on your phone. They do not sync to your account, and they never reach our servers.
If you turn it on, the app also writes your daily nutrition totals and your water to Apple Health or Health Connect.
Data that goes elsewhere when you use a feature
Food search and barcode scans
When you search for a food or scan a barcode, the app sends the search words or the barcode to our food server at api.metummy.com. Each request carries proof that you are signed in. The server checks that proof and does not store who you are.
To improve search, the server keeps each search and each food match: the words, the results that the app showed, and the food that you picked. These records hold no account id and no device id. The server deletes them after 180 days.
Cloudflare carries the traffic to our server and protects it from abuse. Cloudflare sees the IP address of your phone.
Food photos
Product photos in search results load directly from Open Food Facts' image servers. Those servers see the IP address of your phone.
AI features
When you use an AI feature, for example to describe a meal or to read a recipe or a food package, the app sends your photo and text to Google's Gemini model through Google Firebase AI Logic. We do not store the photo. Google keeps the model's text answer and a fingerprint of the photo for monitoring and abuse prevention, under Google's own terms.
Contributions to Open Food Facts
Open Food Facts is a free, public food database. When you save a food from a barcode scan, the app offers to send the product's name and nutrition figures to Open Food Facts. You can uncheck the box. When you correct a product with "Suggest an edit", the app sends the fields that you changed.
A contribution becomes public under the Open Database License. The app sends it under one shared MeTummy account. It carries a code that is made from your account id but does not reveal it. It does not carry your name or your email address.
Recipe links
When you import a recipe from a web link, your phone loads that web page. The website sees the IP address of your phone.
MacroFactor import
When you import a MacroFactor export, the app can send food names from the file to USDA FoodData Central, a public US government food database, to find matching foods.
Things that stay on your phone
The nutrition label scanner reads text on your phone. Reminders are scheduled on your phone. The app contains no analytics and no crash reporting service.
App Check
Google's Firebase App Check confirms that requests come from the real MeTummy app. It uses Apple App Attest or Google Play Integrity for this. It does not identify you.
Why we use your data
If you live in the European Economic Area, the United Kingdom or Switzerland, the law asks us to state a legal basis for each use.
- To give you the app and sync your data: this is necessary to perform our contract with you.
- Weight, body fat, body measurements and other health data: your explicit consent, which you give when you enter the data or allow the app to read it. You can withdraw your consent when you delete the data, revoke access in Apple Health or Health Connect, or delete your account.
- The search records and Cloudflare's protection: our legitimate interest in a food search that works and a server that stays up.
- App Check: our legitimate interest in keeping the service secure.
We do not make decisions about you that have legal or similar effects by automated means alone.
Who receives data
- Google: sign-in, storage and sync, App Check and the AI features.
- Cloudflare: the network in front of our food server.
- Open Food Facts: the contributions that you choose to send, and the photo requests.
- USDA FoodData Central: food names, during a MacroFactor import only.
- Apple and Google: sign-in, if you choose it, and Apple Health or Health Connect on your phone.
We give data to authorities only if the law requires it.
Data outside your country
We store your data in the United States. Google and Cloudflare take part in the EU-US Data Privacy Framework and its UK and Swiss extensions, which cover data that moves from those countries to the United States.
How long we keep data
- Your account and your synced data: until you delete them.
- An entry that you delete: removed from our servers within 90 days.
- When you delete your account: we delete all synced data that belongs to it.
- Search and match records: 180 days.
Your rights
You can do these things inside the app:
- Get a copy of your data: More, then Export and import, then Export my data.
- Correct your data: edit any entry or your profile.
- Delete your account and its data: More, then Account & Data Deletion, then Delete account and data.
Depending on where you live, you can also ask us to restrict or stop a use of your data, or to send your data to another service. Write to hello@metummy.com. We answer within 30 days.
If you live in the European Economic Area or the United Kingdom, you can complain to your data protection authority.
If you live in a US state with a privacy law, such as California, you have the same rights to know, to correct and to delete. We do not sell or share personal data for advertising, so there is nothing to opt out of. We do not treat you differently when you use your rights.
Security
All traffic between the app and our services is encrypted. Firestore rules let each account read and write only its own data.
Children
MeTummy is not for anyone under 18. We do not knowingly collect data from children. If you think that a child uses the app, write to us and we will delete the account.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use your data, we tell you before the change applies.
Contact
MeTummy
hello@metummy.com