Blumi Privacy Policy

Effective since: November 2, 2026

This policy explains what data Blumi collects, why, who we share it with, and how you control it. It is part of the Terms of Use.

Who is responsible

Blumi is responsible for your data. Contact us about privacy at mvcouto.apps+privacy@gmail.com.

Data we collect

• Account and sign-in
  What it includes: Name, email, Google account data (name, email, and identifier) when you sign in with Google, the public part of your passkeys, and your recovery code stored in protected form. We do not store passwords.
  Purpose: Create and protect your account, let you sign in and recover access.
• Profile and goals
  What it includes: Sex, date of birth, height, weight, activity level, goal, and calorie and macronutrient targets.
  Purpose: Calculate your plan and daily targets and, combined with other people's and without identifying anyone, understand Blumi's audience by age range, sex, and goal.
• Meals and photos
  What it includes: Meal photos, foods, portions, estimated calories and macronutrients, meal type and time, and your edits.
  Purpose: Analyze the photo, build your history, and total your day.
• Reminders and preferences
  What it includes: Meal and reminder times, language, units, and theme.
  Purpose: Schedule reminders and keep the app set up your way on every device.
• App usage
  What it includes: Days with logs (streak), screens opened and actions in the app, and the feedback messages you send.
  Purpose: Show your progress, understand what works, and improve the app.
• Device and security
  What it includes: Device model and OS, app version, installation identifier, IP address, approximate location from the IP (city and country, never GPS), time zone, and security logs.
  Purpose: Keep your sessions, show where your account is signed in, prevent fraud, limit abuse, and, in combined form without identifying anyone, learn which cities use Blumi most to guide marketing.
• Subscription
  What it includes: Plan, status, dates, and store of purchase. We never receive your card details.
  Purpose: Unlock paid features and handle billing support.
• Support requests
  What it includes: Message, topic, name (optional), email used in the app (optional), and the contact you chose for our reply: WhatsApp, phone, or email.
  Purpose: Reply to your request and, if needed, find your account.
• Technical errors
  What it includes: Crash reports with the screen, device, and app version, without photos or health data.
  Purpose: Find and fix errors.

We collect only what the app needs to work. We do not sell your data and do not use it for third-party advertising.

Health and sensitive data

Some data you enter is sensitive or consumer health data (profile and goals, meals and photos). You provide it by your own choice when you fill it in the app, and doing so is your consent for us to collect and use it only to provide the service to you. We never sell it or use it for advertising. You can withdraw consent at any time by editing or deleting that data in the app or by deleting your account.

How we use your data

• To provide the service you asked for: account, sign-in, app features, and subscription.
• With your consent: health and sensitive data, as explained above.
• To keep the app safe and working: account security, fraud and abuse prevention, fixing errors, and improving the product with usage data.
• To comply with the law: when the law requires us to keep or provide data.

Who we share it with

We use companies that process data on our behalf, only for the purposes below and under contract:

• Cloudflare
  Purpose: App servers, database, and photo storage
  Data received: All app data
  Where: USA and global network
• Turso
  Purpose: Database
  Data received: Account, profile, and meal data
  Where: USA
• Google (Gemini)
  Purpose: AI analysis of the meal photo
  Data received: Only the meal photo, without name, email, or profile
  Where: USA
• OpenAI
  Purpose: AI photo analysis (fallback when Gemini fails)
  Data received: Only the meal photo, without name, email, or profile
  Where: USA
• Google (Entrar com Google)
  Purpose: Sign in with Google
  Data received: Google account name, email, and identifier
  Where: USA
• RevenueCat
  Purpose: Subscription management
  Data received: Internal account identifier and purchases
  Where: USA
• Google Play
  Purpose: Subscription payments on Android
  Data received: Purchase data (Google handles the payment)
  Where: USA
• Apple App Store
  Purpose: Subscription payments on iPhone
  Data received: Purchase data (Apple handles the payment)
  Where: USA
• Kiwify
  Purpose: Payments for subscriptions bought on the web
  Data received: Email and purchase data
  Where: Brazil
• PostHog
  Purpose: App usage metrics (no screen recording)
  Data received: Internal account identifier, screens and actions, device
  Where: USA
• Sentry
  Purpose: Error reports
  Data received: Technical error and device data, without personal data
  Where: USA
• Discord
  Purpose: Internal team alerts (support requests, subscriptions, errors)
  Data received: Internal account identifier and, for support requests, the message sent
  Where: USA
• Expo
  Purpose: App update delivery
  Data received: IP address, device, and app version
  Where: USA

We may also share data when required by law or an authority, to protect people's rights and safety, or in a sale or reorganization of the company (with the same protections as this policy).

Photos and uploaded files

Photos and files you upload are stored to show your history and only open while you are signed in to your account. When you delete an item or your account, the file is deleted.

Where data is stored

App data is stored on servers in the United States (Cloudflare and Turso). If you use the app from outside the United States, you understand that your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country.

How long we keep it

• While your account exists, we keep the data the app needs to work.
• When you delete your account, we delete your data immediately. Backups expire on their own within 30 days.

Even after deletion, we may keep:

• Security logs no longer linked to you, used to prevent fraud;
• An anonymous record that an account was deleted (reason, if you gave one, and usage ranges);
• Usage metrics already sent to PostHog, linked only to an internal identifier, until they expire under that service's retention;
• Store purchase records, which belong to the store and follow its policy.

No sale of personal information

We do not sell your personal information, do not share it for cross-context behavioral (targeted) advertising, and do not use sensitive data to infer characteristics about you. Because of that, there is nothing to opt out of; we also honor Global Privacy Control signals.

Your privacy rights

Depending on your state (such as California, Colorado, Connecticut, Virginia, Texas, Oregon, or Washington) or country, you may have the right to:

• know what personal data we collect and access it;
• correct inaccurate data (most of it can be edited in the app);
• get a copy of your data in a portable format;
• delete your data and account (see how);
• withdraw consent for sensitive and health data;
• not be discriminated against for exercising these rights.

Send your request through the privacy form or to mvcouto.apps+privacy@gmail.com, including the email linked to your account. We verify your identity before acting and respond within 45 days. If we decline your request, you can appeal by replying to our answer; if you are still not satisfied, you may contact your state attorney general. An authorized agent may submit a request on your behalf with your written permission.

If you are in Brazil

Brazil's General Data Protection Law (LGPD) gives you the rights above and the right to know who we share your data with. Send your request to mvcouto.apps+privacy@gmail.com. You can also complain to the Brazilian data protection authority (ANPD).

Security

We use encrypted connections (HTTPS/TLS), sign-in without stored passwords (such as passkeys), and restricted access to our systems. No system is completely secure. If an incident creates a relevant risk to you, we will inform you as the law requires.

Minimum age

Blumi is for people aged 18 and over. We do not knowingly collect personal information from children under 13 (COPPA) or from anyone under 18. If we learn that this happened, we delete the data.

Notifications and reminders

Reminders are scheduled on your own device. You choose the times in the app and can turn them off in the app or in your system settings at any time.

Changes to this policy

We may update this policy at any time. The new version is published on this page, with the date at the top, and takes effect when published. We do not send individual notices for each update. By continuing to use Blumi after publication, you agree to the new version. If you do not agree, stop using the app and, if you wish, delete your account.

Contact

Privacy: mvcouto.apps+privacy@gmail.com · Support: mvcouto.apps+support@gmail.com

Blumi