MeTummy

Privacy Policy

Last updated: 7 October 2026

This policy explains what data the MeTummy app collects, why it collects it, where the data goes and how long it stays. MeTummy is an app for iOS and Android that logs food and tracks nutrition.

MeTummy makes MeTummy and is responsible for your data. In this policy, "we" means MeTummy. Write to hello@metummy.com with any question or request about your data.

The short version

Data you give us

Your account

You need an account to use MeTummy. You sign in with an email address and a password, with Google, or with Apple. Google's Firebase Authentication service keeps your sign-in details. We never see your password. If you sign in with Google or Apple, we receive the name and email address that they share.

Your profile

The app asks for your name, sex, birth date, height, activity level, training experience and your goal. You can also give a body fat percentage and a target weight. The app uses these to estimate your energy needs and to set your calorie and macro targets.

Your log

The app keeps what you enter: foods, meals, recipes, custom foods, weight, body measurements, water, notes, habits and weekly check-ins. It also keeps your settings.

All of this is stored on your phone. A copy is stored in Google Cloud Firestore, linked to your account, so that the data syncs between your devices and survives a lost phone. Firestore stores it in the United States.

Data from Apple Health and Health Connect

The app reads only the types of data that you allow, and only after you allow them. You can change your answer at any time in Apple Health or in Health Connect.

If you turn it on, the app also writes your daily nutrition totals and your water to Apple Health or Health Connect.

Data that goes elsewhere when you use a feature

Food search and barcode scans

When you search for a food or scan a barcode, the app sends the search words or the barcode to our food server at api.metummy.com. Each request carries proof that you are signed in. The server checks that proof and does not store who you are.

To improve search, the server keeps each search and each food match: the words, the results that the app showed, and the food that you picked. These records hold no account id and no device id. The server deletes them after 180 days.

Cloudflare carries the traffic to our server and protects it from abuse. Cloudflare sees the IP address of your phone.

Food photos

Product photos in search results load directly from Open Food Facts' image servers. Those servers see the IP address of your phone.

AI features

When you use an AI feature, for example to describe a meal or to read a recipe or a food package, the app sends your photo and text to Google's Gemini model through Google Firebase AI Logic. We do not store the photo. Google keeps the model's text answer and a fingerprint of the photo for monitoring and abuse prevention, under Google's own terms.

Contributions to Open Food Facts

Open Food Facts is a free, public food database. When you save a food from a barcode scan, the app offers to send the product's name and nutrition figures to Open Food Facts. You can uncheck the box. When you correct a product with "Suggest an edit", the app sends the fields that you changed.

A contribution becomes public under the Open Database License. The app sends it under one shared MeTummy account. It carries a code that is made from your account id but does not reveal it. It does not carry your name or your email address.

Recipe links

When you import a recipe from a web link, your phone loads that web page. The website sees the IP address of your phone.

MacroFactor import

When you import a MacroFactor export, the app can send food names from the file to USDA FoodData Central, a public US government food database, to find matching foods.

Things that stay on your phone

The nutrition label scanner reads text on your phone. Reminders are scheduled on your phone. The app contains no analytics and no crash reporting service.

App Check

Google's Firebase App Check confirms that requests come from the real MeTummy app. It uses Apple App Attest or Google Play Integrity for this. It does not identify you.

Why we use your data

If you live in the European Economic Area, the United Kingdom or Switzerland, the law asks us to state a legal basis for each use.

We do not make decisions about you that have legal or similar effects by automated means alone.

Who receives data

We give data to authorities only if the law requires it.

Data outside your country

We store your data in the United States. Google and Cloudflare take part in the EU-US Data Privacy Framework and its UK and Swiss extensions, which cover data that moves from those countries to the United States.

How long we keep data

Your rights

You can do these things inside the app:

Depending on where you live, you can also ask us to restrict or stop a use of your data, or to send your data to another service. Write to hello@metummy.com. We answer within 30 days.

If you live in the European Economic Area or the United Kingdom, you can complain to your data protection authority.

If you live in a US state with a privacy law, such as California, you have the same rights to know, to correct and to delete. We do not sell or share personal data for advertising, so there is nothing to opt out of. We do not treat you differently when you use your rights.

Security

All traffic between the app and our services is encrypted. Firestore rules let each account read and write only its own data.

Children

MeTummy is not for anyone under 18. We do not knowingly collect data from children. If you think that a child uses the app, write to us and we will delete the account.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data, we tell you before the change applies.

Contact

MeTummy
hello@metummy.com