Privacy Policy
Last updated: July 29, 2026 · Effective: July 29, 2026
The controller responsible for your personal data within the meaning of Article 4(7) GDPR is Ivan Chabanenko, Lutherstraße 12, 39112 Magdeburg, Germany ("Jomi," "we," "us," or "our") — see the Impressum for full provider details. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the Jomi application and website (collectively, the "Service").
1. Information We Collect
1.1 Account Information
When you create a Jomi account, we collect your name, email address, and password. If you sign up via social login (Apple, Google), we receive limited profile information from those providers as permitted by their policies.
1.2 Nutrition & Health Data
To provide our core service, we collect food entries you log (via text, voice, or photo), meal timing information, calorie and macronutrient goals you set, body metrics (height, weight, age) if voluntarily provided, and activity level preferences. This data is considered sensitive health information and is handled with the highest level of security.
1.3 Photos
If you use the camera feature to log food, photos are processed by our AI system to identify the food item and estimate nutritional content. Photos are processed transiently and are not stored on our servers after the AI analysis is complete, unless you explicitly save the entry.
1.4 Usage Data
We automatically collect information about how you interact with the Service, including device type, operating system, app version, feature usage patterns, and crash reports. We use this data to improve the Service.
2. How We Use Your Information
We use the information we collect to:
Provide, operate, and improve the Jomi Service, including AI-powered food recognition and calorie calculation
Personalize your experience and provide nutrition recommendations based on your goals
Send transactional emails (account confirmation, password reset) and, with your consent, product updates and nutrition tips
Detect, prevent, and address technical issues, fraud, and abuse
Process payments and manage subscriptions through our payment processor (Stripe)
Comply with legal obligations and respond to lawful requests from authorities
3. Data Sharing and Third Parties
We never sell your personal data. We may share information with:
Service Providers
Trusted third-party companies that assist us in providing the Service, such as cloud hosting (Hetzner Online GmbH, servers in Germany), analytics (aggregate, anonymized data only), customer support, and payment processing. These providers are contractually bound to handle your data securely and only for the purposes we specify.
Health App Integrations
With your explicit consent, we may share nutrition data with Apple Health, Google Fit, or other health platforms you choose to connect. You can revoke these permissions at any time.
Legal Requirements
We may disclose your information when required by law, court order, or to protect the rights, property, or safety of Jomi, our users, or the public.
4. Data Security
We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 for data in transit, regular security audits, access controls limited to authorized personnel, and two-factor authentication for internal systems. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes (typically up to 7 years for financial records). Anonymized, aggregated data may be retained indefinitely for product improvement.
6. Your Rights (GDPR & CCPA)
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you
Right to Correction
Request correction of inaccurate or incomplete data
Right to Deletion
Request deletion of your data ("right to be forgotten")
Right to Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing of your data for marketing purposes
Right to Restrict
Request restriction of processing in certain circumstances
To exercise any of these rights, contact us at support-jomi@chbnk.one. We will respond within 30 days.
7. Right to Lodge a Complaint (Art. 77 GDPR)
Without prejudice to any other remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, place of work, or place of the alleged infringement.
The authority competent for us is: Die Landesbeauftragte für den Datenschutz Sachsen-Anhalt, Otto-von-Guericke-Straße 34a, 39104 Magdeburg, Germany (postal address: Postfach 1947, 39009 Magdeburg) · Phone +49 391 81803-0 · poststelle@lfd.sachsen-anhalt.de · datenschutz.sachsen-anhalt.de. We would, however, appreciate the chance to address your concerns first.
8. Children's Privacy
Jomi is not directed to children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately at support-jomi@chbnk.one.
9. Cookies
The Jomi website uses essential cookies to maintain session state and preferences. We use analytics cookies (anonymized) to understand how visitors use our site. You can control cookie preferences through your browser settings. We do not use advertising or cross-site tracking cookies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the app at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or to exercise your rights, contact the controller directly: