GDPR Compliance
Last updated: July 29, 2026 · Effective: July 29, 2026
Jomi is operated from Germany by Ivan Chabanenko and is committed to protecting the personal data of users in the European Economic Area (EEA), the United Kingdom, and Switzerland in line with the General Data Protection Regulation (GDPR). This page summarizes how we meet our GDPR obligations and how you can exercise your rights. It supplements our Privacy Policy.
1. Data Controller
For the purposes of the GDPR, the data controller of the personal data you provide is Ivan Chabanenko, Lutherstraße 12, 39112 Magdeburg, Germany, a sole trader (Einzelunternehmen) trading as chbnk — see the Impressum. You can reach the controller at support-jomi@chbnk.one.
Because the controller is established inside the European Union, no representative under Article 27 GDPR is required. We are not required to appoint a Data Protection Officer under Article 37 GDPR / Section 38 BDSG (a one-person business with no employees regularly engaged in data processing); privacy requests are handled by the controller personally.
2. Legal Bases for Processing
We only process your personal data where we have a valid legal basis to do so:
Contract
Processing necessary to provide the Jomi service you signed up for — your account, food logs, and nutrition calculations.
Consent
For health data, optional integrations (Apple Health / Google Fit), and marketing communications. You can withdraw consent at any time.
Legitimate Interests
To secure our service, prevent fraud, and improve Jomi using anonymized, aggregated data — balanced against your rights and freedoms.
Legal Obligation
To comply with applicable laws, such as retaining financial records for tax purposes.
3. Your Rights Under GDPR
As a data subject in the EEA, UK, or Switzerland, you have the following rights:
Access
Obtain confirmation and a copy of the data we hold about you
Rectification
Correct inaccurate or incomplete personal data
Erasure
Request deletion of your data ("right to be forgotten")
Portability
Receive your data in a structured, machine-readable format
Restriction
Limit how we process your data in certain circumstances
Object
Object to processing based on legitimate interests or for marketing
Withdraw Consent
Withdraw any consent you previously gave, at any time
Lodge a Complaint
Complain to your local supervisory authority
To exercise any of these rights, email support-jomi@chbnk.one. We will respond within one month, as required by GDPR. There is no fee unless a request is manifestly unfounded or excessive.
4. International Data Transfers
Jomi is operated from Germany and your account and nutrition data are hosted on servers located in Germany. Some of the service providers we use (for example payment processing and transactional email) may process limited data outside the EEA. Where that happens, we rely on appropriate safeguards — primarily the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, adequacy decisions — to ensure your data receives an equivalent level of protection.
5. Data Retention & Security
We retain personal data only as long as necessary for the purposes described in our Privacy Policy. When you delete your account, we erase your personal data within 30 days, except where retention is legally required. We protect your data with AES-256 encryption at rest and TLS 1.3 in transit, along with strict access controls.
6. Supervisory Authority
If you believe we have not handled your data lawfully, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority. The authority competent for us is Die Landesbeauftragte für den Datenschutz Sachsen-Anhalt, Otto-von-Guericke-Straße 34a, 39104 Magdeburg, Germany (postal address: Postfach 1947, 39009 Magdeburg), phone +49 391 81803-0, poststelle@lfd.sachsen-anhalt.de, datenschutz.sachsen-anhalt.de. You may also complain to the authority in your own country — EU residents can find it via the European Data Protection Board. We would, however, appreciate the chance to address your concerns first — please contact us at support-jomi@chbnk.one.
7. Contact the Controller
For any GDPR-related request, contact the controller directly: