PRIVACY POLICY

Last updated October 8, 2026

This Privacy Notice of Dumke Ventures UG (haftungsbeschränkt) ("we," "us," or "our") explains how and why we collect, store, use and share ("process") your personal data when you:

  • use our Truvi app on iPhone or Android
  • visit our website truviapp.com
  • take one of our web quizzes or buy a plan on a web checkout page that links to this notice (for example the Truvi quiz at truvi-funnel.web.app and The Military Sleep Method)
  • contact us by email

We are the controller responsible for your personal data. Our full legal notice (Impressum) is available at /impressum.

Questions or concerns? This notice explains what we do with your data and what rights you have. It is not a contract you need to agree to. If you have any questions, please contact us at [email protected].

SUMMARY OF KEY POINTS

This summary gives the key points. You can find more detail by following the link after each point or by using the table of contents below.

What personal data do we process? The app creates an anonymous account for you, so you do not need an email address or password. We process what you enter or scan in the app, the photos you submit for analysis, your subscription status, device data and how you use the app. Learn more about the data we collect.

Do we process any sensitive personal data? Yes, if you choose to enter it. Symptoms, allergies and intolerances, diet needs, your wellness check-ins and your food diary can be health data. Entering them is optional. We do not process biometric data. Photos you take of products, labels, shelves or meals are sent for analysis to provide that feature. Learn more.

Do we collect any information from third parties? We receive your purchase and subscription status from the app stores, RevenueCat and Stripe. Learn more.

How do we process your information? To run the app and its features, to analyse the products and photos you submit, to manage your subscription, to understand how the app is used and fix errors, to measure our advertising, for security, and to comply with the law. Learn more about how we process your information.

With whom do we share personal data? With the service providers listed in Section 4, with other users where you post content they can see, and with authorities where the law requires it. We do not sell your personal data. Learn more about when and with whom we share your personal data.

Do we offer AI-based products? Yes. Truvi uses automated analysis, including AI services, to read labels and photos and to assess products. Learn more about our AI products.

How do we keep your information safe? We use technical and organisational measures to protect your personal data. No transmission over the internet or storage technology is completely secure, so we cannot guarantee that unauthorised third parties will never gain access. Learn more about how we keep your information safe.

What are your rights? You have the rights to access, correct, delete, restrict and port your data, to object, and to complain to a supervisory authority. Learn more about your privacy rights.

How do you exercise your rights? In the app you can export your data and delete your account in Profile. For everything else, email us at [email protected].

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
  6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
  8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
  9. HOW LONG DO WE KEEP YOUR INFORMATION?
  10. HOW DO WE KEEP YOUR INFORMATION SAFE?
  11. WHAT ARE YOUR PRIVACY RIGHTS?
  12. CONTROLS FOR DO-NOT-TRACK FEATURES
  13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  14. DO WE MAKE UPDATES TO THIS NOTICE?
  15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
  17. CHILDREN

1. WHAT INFORMATION DO WE COLLECT?

Information you give us in the app

In Short: We collect what you enter, scan or send us in the app.

When you use the app, we collect:

  • a random account ID created when you first open the app (we create an anonymous account for you; you do not need an email address or password)
  • the name you choose to be called in the app (optional)
  • your answers on the setup screens: age band, what matters to you, how often you check ingredients, what you know about processed food, how you shop, the supermarkets you use, what is usually in your basket, your diet mode and scoring settings, recipe preference, protein goals and sources
  • symptoms, allergies and intolerances and diet needs you choose to tell us (see "Health data" below)
  • the barcodes and products you scan or look up, your scan history, favourites, food diary, wellness check-ins and the food you track as your personal trigger food
  • photos and text you submit for analysis (see "Photos" below)
  • content you send us or post: suggestions and problem reports (with an optional email address and images), product reviews, shop reports ("seen it here"), community finds and nutrition label readings
  • your subscription status and the currency of your app store

Health data. Some things you can tell us in the app are health data under Art. 9 GDPR: symptoms you pick during setup (for example bloating or cravings), allergies and intolerances, diet needs, your "How you feel" check-ins (energy, bloating, cravings, mood, sleep, and optionally your weight and a note), your trigger food and your food diary. We use these data only to personalise your scores, recipes and screens and to show you your own trends. Entering them is optional; you can skip these questions and still use the app. Your setup answers are saved to our database step by step while you go through setup, also if you do not finish it. We never use these data for advertising and never send them to advertising partners.

Photos. When you photograph food, a meal, a product label or a shelf in the app, or choose such a photo from your library, the image is sent to our server functions and to our AI service providers (Google Gemini and OpenAI, see Section 7) to read the label and identify the food. We do not store these scan photos; only the result is saved in your scan history. If a label reading adds a missing product to our database, the product data (not the photo) stay in the database for all users. If you attach pictures to a problem report, a suggestion or a community find, we store them with it. If you choose a profile picture, it stays on your device and is not uploaded. We do not use photos to identify you, we do not use facial recognition and we do not process biometric data. Please do not photograph people.

Payment data. In-app purchases are processed by Apple or Google; RevenueCat manages your subscription status for us. If you buy a plan on one of our web checkout pages, Stripe processes the payment and we receive the purchase and subscription status. We never see or store your full card number.

Usage and device data. We and our service providers automatically collect your device type and operating system, app version, your device's region, languages, time zone, currency and measurement settings (we also use the device region to decide which analytics and advertising tools run, see Section 6), the country you select in the app, your IP address (used for security and rate limiting, and by our providers to deliver their services), and how you use the app (see Section 6).

Information from third parties. We receive your purchase and subscription status from Apple, Google, RevenueCat and Stripe.

Our web quizzes and checkout pages

If you take one of our web quizzes, we store your quiz answers and how you move through the pages, linked to a random visitor ID. If you enter your email address, we store it and send you what the page offers: for the Truvi quiz this is a free cheat sheet, swap tips and occasional Truvi updates and offers, including one reminder of your quiz result and offer if you have not bought within a few minutes; after a purchase we also send purchase emails and a reminder before a trial ends. You can unsubscribe from marketing emails with the link in every such email. If you buy a plan, Stripe processes the payment (card, Apple Pay, Google Pay and, where offered, Vipps) and we store the purchase. After a Truvi purchase we send you a link that activates Premium in the app. Emails are sent through Resend.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to run the app, analyse what you submit, manage your subscription, improve the app, measure our advertising, keep the service secure and comply with law.

We process your personal data to:

  • Run the app, including your anonymous account, scanning, scores, history, diary, favourites and syncing your data.
  • Analyse products, photos and text you submit, including with AI services (Section 7).
  • Personalise the app with your setup answers and the health data you choose to enter.
  • Run community features: reviews, shop reports, community finds and shared scoring profile codes, including moderation.
  • Process your purchases and manage your subscription.
  • Send emails from our web quizzes and checkout pages (Section 1).
  • Understand how the app is used and fix errors (Section 6).
  • Measure our advertising on our website, web pages and, outside the EU/EEA, the UK and Switzerland, in the app (Section 6).
  • Protect our Services, including security, abuse prevention and rate limiting.
  • Comply with legal obligations and establish, exercise or defend legal claims.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: Each purpose below has its own legal basis under the GDPR.

  • Running the app (anonymous account, scanning, scores, history, diary, favourites, sync), AI analysis of what you submit, subscriptions and purchases, and emails you asked for on our web pages (cheat sheet, purchase emails, activation link, trial reminder): Art. 6(1)(b) GDPR (our contract with you).
  • Health data you choose to enter (symptoms, allergies, diet needs, wellness check-ins, trigger food, food diary): Art. 9(2)(a) GDPR, your explicit consent, which you give by entering these data after being told here what we do with them. You can withdraw it at any time (Section 11).
  • Reviews, community finds, shop reports, suggestions and problem reports: Art. 6(1)(b) GDPR; moderation: Art. 6(1)(f) GDPR (our interest in a safe community).
  • In-app product analytics and session replay (PostHog) and the event log in your account: Art. 6(1)(f) GDPR (our interest in finding errors and improving the app). You can switch this off with the "Usage analytics" switch in Profile.
  • Google Analytics for Firebase and Meta app events in the app (only outside the EU/EEA, the UK and Switzerland): Art. 6(1)(f) GDPR; on iPhone, the advertising identifier only if you allow tracking in Apple's prompt (Art. 6(1)(a) GDPR).
  • The Meta SDK's start-up connection when the app opens (Section 6): Art. 6(1)(f) GDPR (our interest in measuring app installs from our ads).
  • The Meta Pixel on our website and web pages: Art. 6(1)(f) GDPR (our interest in measuring which of our ads lead to visits, installs and purchases).
  • Marketing emails from our web quizzes (tips, updates and offers): Art. 6(1)(a) GDPR (you agree when you enter your email under the notice on the page) and Art. 6(1)(f) GDPR; you can unsubscribe at any time.
  • Website delivery and security, abuse prevention and rate limiting: Art. 6(1)(f) GDPR (our interest in a secure, working service).
  • Tax and accounting records: Art. 6(1)(c) GDPR with § 147 AO and § 257 HGB.
  • Legal claims and requests from authorities: Art. 6(1)(c) or (f) GDPR.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share data with the service providers listed below, with other users where you post content they can see, and with authorities where required. We do not sell your personal data.

Our service providers process data for us as processors under a data processing agreement (Art. 28 GDPR), unless stated otherwise:

  • Google Ireland Ltd. / Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Hosting): anonymous sign-in, storing your account data, hosting our web quizzes, and running the server functions that look up and analyse products. Our server functions run in the USA (region us-central1).
  • Google LLC (Gemini API): AI analysis of photos and text you submit.
  • OpenAI (OpenAI Ireland Ltd. / OpenAI, L.L.C.): AI analysis of photos and text you submit, recipes, translations, and web search for products we cannot find by barcode.
  • PostHog Inc.: app usage events and session replays (Section 6), stored on PostHog's EU cloud.
  • Google LLC (Google Analytics for Firebase): app usage statistics, only if your device region is outside the EU/EEA, the UK and Switzerland and analytics is switched on.
  • Meta Platforms Ireland Ltd. / Meta Platforms, Inc.: ad measurement with the Meta SDK in the app and the Meta Pixel on our website and web pages (Section 6). For the Meta Pixel, we and Meta are joint controllers (Art. 26 GDPR, see Section 6).
  • RevenueCat, Inc.: managing subscriptions and purchase status, linked to your random account ID.
  • Apple and Google (App Store, Google Play): app downloads, in-app purchases and billing, as independent controllers.
  • Stripe Payments Europe Ltd. / Stripe, Inc.: payments on our web checkout pages.
  • Resend: sending emails from our web quizzes and checkout pages.
  • Cloudflare, Inc.: delivery and security of our website.
  • Apple (iCloud Mail): emails you send to us are forwarded to and stored in our iCloud mailbox.
  • Open Food Facts, USDA FoodData Central and Wikidata: product data. Our servers send them only a barcode or product name, never data about you.

We also share data with professional advisers (tax advisers, lawyers) and public authorities where the law requires it or to establish, exercise or defend legal claims, and with a buyer or investor in a merger, sale of the business or financing, under confidentiality.

Content other users can see

  • Reviews. If you rate a product, your stars, your review text and the name you enter with the review are visible to all Truvi users. Other users can report reviews; a reported review is hidden until we have checked it. You can delete your review in the app.
  • Community finds. If you share a product find, the product, shop, your note and any picture may be shown to other users after we review it. Your name and account ID are not shown.
  • Shop reports. If you report that a shop has a product ("seen it here"), other users see that the product is available there, combined per country. They do not see who reported it.
  • Profile codes. If you use a scoring profile someone else created with a code, that creator can see that the code was used, when, how many scans were made with it and whether you have a free or paid plan. They do not see your name or what you scanned.

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services.

The Services may link to third-party websites, online services, or mobile applications. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this Privacy Notice. We are not responsible for the content or privacy and security practices and policies of any third parties. You should review the policies of such third parties and contact them directly with any questions.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Our website and web pages use a choice cookie and the Meta Pixel. The app uses PostHog for all users and, outside the EU/EEA, the UK and Switzerland, Google Analytics and Meta app events.

6.1 On our website and web pages

  • Cookie banner choice. The cookie "truvi_cookie_consent" (first party, set by us) stores the choice you make in our cookie banner. Lifetime: 12 months.
  • Hosting and security. Our website is delivered by Cloudflare, Inc. (USA). Cloudflare processes your IP address and technical request data to deliver the site and protect it against attacks. Our web quizzes are hosted on Google Firebase Hosting.
  • Meta Pixel. Our website and our web quiz and checkout pages use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Pixel loads when a page opens. It stores the cookie "_fbp" (lifetime up to 90 days) and sends Meta your IP address, browser data, the pages you view, page events (such as a purchase with its value and currency) and Meta cookie IDs, so we can measure which ads lead to visits, app installs and purchases and show ads to people who visited our pages. When you enter your email address on a web quiz page, and after a purchase on a web checkout page, your email address is also passed to the Pixel, which sends it to Meta in hashed form so Meta can match the sign-up or purchase to a Meta account. For collecting these data on our pages and passing them to Meta, we and Meta are joint controllers (Art. 26 GDPR). Meta's summary of the joint controller agreement is at facebook.com/legal/controller_addendum. Meta is responsible for any further processing; see facebook.com/privacy/policy. Data may be transferred to Meta Platforms, Inc. in the USA. You can block or delete the Meta cookies in your browser settings or with a content blocker, and you can manage how Meta uses your data for ads in your Meta account settings.

We do not use Google advertising or Google Analytics tags on our website.

6.2 In the app

  • Product analytics (all regions). We use PostHog (PostHog Inc.; data stored on PostHog's EU cloud). We record which screens you open and which features you use, together with your random account ID (never your email), device type, app version and language, to find errors and see where the app works and where it does not. PostHog also records session replays: a reconstruction of the screens you see and your taps. All text you type, all images (including camera and product photos) and system screens are hidden in these replays. Replays can show which options you tap, including setup answers such as symptoms.
  • Event log in your account. We also keep a copy of the same usage events in your own account in our database (Google Firebase), so they are included when you export your data.
  • Google Analytics for Firebase (only if your device region is outside the EU/EEA, the UK and Switzerland). App events and your random account ID are also sent to Google LLC (USA) for usage statistics.
  • Meta SDK. The app contains the Meta (Facebook) SDK of Meta Platforms. The SDK starts when the app opens, in every region, and connects to Meta's servers to load its settings; Meta receives your IP address and basic device and app data (such as device model, operating system version and app version). The app sends Meta app events only if your device region is outside the EU/EEA, the UK and Switzerland: app opened, registration, trial start and purchase with price and currency, to measure which ads lead to installs, trials and purchases. On iPhone, Meta receives your advertising identifier (IDFA) only if you allow tracking in Apple's "Ask App Not to Track" prompt; you can change this in iOS Settings > Privacy & Security > Tracking. On Android, Meta receives app events and the advertising ID; you can reset or delete the advertising ID in your device settings.
  • Your choice. You can switch off analytics at any time with the "Usage analytics" switch in Profile. This stops PostHog recording, Google Analytics for Firebase and the event log on that device. It does not affect the Meta SDK.

7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: Yes. We use automated and AI-based processing to read labels and photos and to assess products.

Truvi uses automated processing, including artificial intelligence and algorithmic analysis, to interpret the ingredients of products you scan and to generate a processing or health assessment or score. To do this we send the relevant inputs (a product barcode, a photo of a product, label, shelf or meal, text read from a label, or a food description you type, plus your app language) from our servers to Google (Gemini API, Google LLC, USA) and OpenAI (OpenAI, USA). Both process the photos and text you submit on our behalf as our processors, only to return your result. We also use these providers to generate and translate recipes and to look up product information on the web from a barcode. The AI providers do not use your inputs to train their models.

These assessments are generated automatically and are provided for general information only. They can be inaccurate or incomplete and are not medical, nutritional, or dietary advice. We do not use facial recognition and we do not process biometric data.

8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: Yes. Several providers process data in the USA.

Some of our providers process data in the USA: Google (Firebase and Cloud Functions; our server functions run in the US region us-central1, so every scan and analysis is processed there; Gemini API; Google Analytics), OpenAI, Meta, RevenueCat, Stripe, Resend, Cloudflare and Apple (see Section 4). For transfers to US companies certified under the EU-U.S. Data Privacy Framework, the European Commission's adequacy decision of 10 July 2023 applies (Art. 45 GDPR). Where a provider is not certified, we use the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). PostHog stores our analytics data in the EU. You can ask us for a copy of the safeguards at [email protected].

9. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your data while your account exists, unless a shorter or longer period is listed below.

  • Account data, setup answers, scan history, preferences and settings, food diary, wellness check-ins, trigger food, favourites, reviews and the event log in your account: for as long as your account exists. Your account is anonymous and is not deleted when you uninstall the app or sign out. To delete it, use Profile > Delete Account before you uninstall, or email us. Your setup answers and saved trigger food are not removed by Delete Account; they stay until you ask us by email to delete them (Section 16).
  • Problem reports, suggestions and community finds (including images) and shop reports: until you delete your account.
  • Usage analytics in PostHog: for the retention period of our PostHog plan (session replays about 1 month, events up to 1 year).
  • Web quiz answers, email addresses and visitor data from our web pages: until you ask us to delete them; marketing emails stop when you unsubscribe.
  • Emails you send us: until the matter is resolved and no legal claims can arise from it.
  • Website cookies: choice cookie 12 months; Meta "_fbp" cookie up to 90 days.
  • Purchase and invoice records: up to 10 years, because tax and commercial law requires it (§ 147 AO, § 257 HGB).
  • Data held by Apple, Google, RevenueCat, Stripe and Meta are kept under their own retention rules.

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. You should only access the Services within a secure environment.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You have rights to access, correct, delete, restrict and port your data, to object, to withdraw consent and to complain.

Under the GDPR you have the right to access and get a copy of your personal data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict processing (Art. 18) and to data portability (Art. 20). Where we process your data based on consent, you can withdraw your consent at any time (Art. 7(3)); withdrawal does not affect processing before it. To withdraw your consent for health data, email us at [email protected] and we delete these data. Deleting your account in Profile removes most of them, but not your setup answers or your saved trigger food (see Section 16).

Your right to object (Art. 21 GDPR). Where we process your data based on our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation. We then stop, unless we have compelling legitimate grounds that override your interests, or we need the data for legal claims. You can object to the use of your data for direct marketing at any time without giving reasons. For app analytics, the quickest way is the "Usage analytics" switch in Profile; for marketing emails, the unsubscribe link in every email; otherwise email [email protected].

No automated decisions. Your scores are automatic product ratings. We make no decisions about you that have legal or similarly significant effects (Art. 22 GDPR).

Required data. You do not have to give us any personal data beyond what the app needs to work. Setup questions and health data are optional.

Right to complain. You also have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany (website: lda.brandenburg.de). You may also contact the supervisory authority in your country of habitual residence.

To exercise any of these rights, use the export and delete options in Profile or contact us at [email protected]. We may need to verify your identity before responding to a request.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you live in a US state with a consumer privacy law, you have additional rights.

This section applies to residents of US states with consumer privacy laws (such as California, Colorado, Connecticut, Virginia, Texas and Oregon).

What we collect (last 12 months): identifiers (random account ID, device and advertising IDs, IP address); commercial information (purchase and subscription status); internet or app activity (screens, taps, scans, session replays); inferences (your diet mode and score preferences); sensitive personal information (health data you choose to enter, such as symptoms, allergies and wellness check-ins). Sources, purposes and retention are described in Sections 1, 2 and 9.

Sale and sharing: we do not sell personal information for money. We use Meta's advertising tools on our website, web pages and in the app to measure and target ads. Under California law this can count as "sharing" for cross-context behavioral advertising. You can opt out by emailing [email protected] with "Do Not Share". On iPhone you can also deny tracking in Apple's prompt, and on Android you can delete your advertising ID.

Sensitive information: we use health data only to provide the features you use, never to infer characteristics about you or for advertising, and we never share it with advertising partners.

Your rights: to know, access, correct and delete your data, to opt out of sale, sharing and targeted advertising, and not to be discriminated against for using these rights. You can use an authorized agent; we may ask for proof of their authority. If we refuse your request, you can appeal by replying to our answer; we will respond within 45 days. If the appeal is refused, you can contact your state attorney general. We do not knowingly sell or share data of consumers under 16.

Consumer health data (Washington, Nevada and similar state laws)

Which health data we collect: symptoms, allergies and intolerances, diet needs, energy, bloating, cravings, mood, sleep, weight and notes you enter, your trigger food and your food diary. Why: only to personalise your product scores and screens and to show you your own trends. Source: you. Sharing: these data are stored by our hosting provider (Google Cloud / Firebase), and session replays (PostHog) can show options you tap on setup screens (Section 6.2). We never sell them and never give them to advertising partners. Your rights: you can access these data with the export in Profile, delete most of them by deleting your account in Profile (your setup answers and trigger food stay until you email us, see Section 16), or contact us at [email protected] to have all of them deleted; if we decline a request, you can appeal by replying to our answer.

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we update this notice when our processing or the law changes.

We may update this Privacy Notice from time to time. The new version is posted on this page with a new "Last updated" date and applies from then on.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, email us at [email protected], call +49 33383 380112 or write to us at:

Dumke Ventures UG (haftungsbeschränkt)
Ebersprung 2
16321 Bernau
Germany

Managing Director (Geschäftsführer): Tom Dumke. Our full legal notice is available in our Impressum.

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

In the app you can export your data with "Download My Data" in Profile, and delete your account with "Delete Account" in Profile. Deleting your account removes your account, scan history, diary, wellness check-ins, favourites, event log, reviews, community finds, shop reports, suggestions and problem reports, including uploaded images. It does not remove: the answers you gave on the setup screens, your saved trigger food, the record that you used someone's profile code, label readings you contributed, and the data PostHog and RevenueCat hold under your random account ID. These stay linked to that ID, which no longer belongs to an account. If you want them deleted too, email [email protected] before you delete your account and include the account ID shown in your data export, and we delete them. You can also email us to access, correct or delete any other data, including your web quiz data.

17. CHILDREN

Truvi is meant for people aged 16 and over, and the app asks you to confirm that you are 16 or older when you start. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has given us personal data, please email [email protected] and we will delete it.