Crumb Privacy Notice

What Crumb collects

• The messages you send: food photos, descriptions of what you ate, and any symptoms you report.
• A one way hashed version of your WhatsApp or Telegram identifier. Crumb never stores your raw phone number or chat id.
• If you use a named challenge link, the challenge name beside that one way hash so Crumb can count whether the challenge produced a completed read. The pre-consent message, label, menu, or photo is not kept.
• The analysis Crumb produces from your messages: gluten risk reads, calorie estimates, meal logs, and optional preferences you set.

Food and symptom information is sensitive health data, treated as special category under GDPR Article 9 and as sensitive data under the UAE PDPL.

Consent comes first

Crumb logs nothing about your health until you reply I AGREE. You can withdraw at any time by replying STOP, erase everything with the /delete command, or get a copy of your data with /export.

Where your data goes

• On WhatsApp, your messages are processed on Meta servers outside the EU before they reach Crumb. This is inherent to WhatsApp.
• Crumb stores your data in the EU (Frankfurt) with access controls and encryption.
• Photos are kept in private storage with location and camera metadata stripped, and are never stored in plain database columns.
• Crumb uses a language model behind a controlled gateway to read food descriptions and photos. It does not sell your data or use it for advertising.

Your rights and control

• Access and export: send /export.
• Erase: send /delete to remove your record and stored media.
• Withdraw consent: send STOP.
• You can change or hide any part of the experience at any time.

Important

Crumb helps you spot patterns in your own food and symptoms. It cannot guarantee any food is gluten free and does not diagnose or treat anything. Always verify with the venue or label and speak to a doctor about medical concerns.