Crumb: Privacy Policy & Terms of Service

Privacy Policy

Crumb (“we,” “our,” or “us”) respects your privacy. This policy explains what we collect, why we collect it, how we use it, and the choices you have. By using Crumb (the “App”) you agree to this Privacy Policy. (“Arlo” is the name of the in-app AI coach you talk to.)

If you have questions, email help@heymaya.pro.

1. Who runs Crumb

Crumb is operated by Meshly Technologies Pvt Ltd (“the Company”). Contact: help@heymaya.pro.

2. Information we collect

We collect only what we need to give you a personalized health coaching experience. You decide what to share — every input is opt-in.

How we collect it

• Directly from you — what you type, record, or upload: your onboarding answers, chat messages, voice notes, and meal photos.
• Automatically — technical and device data generated while you use the App (see “Technical data” below).
• From services you connect — your sign-in provider (Google or Apple) and, only if you choose to link them, wearables such as WHOOP.

Account information

• Email address (always)
• Name (you provide during onboarding)
• Profile photo URL (only if you sign in with Google or Apple)
• Sign-in provider identifier (Google sub, Apple user ID)

Health & lifestyle information you provide

• Date of birth, gender
• Height, current weight, target weight
• Sleep schedule, work pattern, movement habits, dietary preferences
• Medical conditions, allergies, medications, supplements
• Cycle / reproductive health information (only if applicable and you choose to share)
• Goals (weight loss, sleep quality, energy, etc.)

Content you create

• Text messages you send Arlo
• Voice notes you record in-app (the recording and its transcript)
• Meal photos you capture

This content is processed by third-party AI services to power Arlo's features (meal recognition, voice transcription, and chat coaching). See Section 4 for who receives it and what is shared.

Health data from wearables (only with your explicit permission)

• Sleep duration & stages
• Steps, distance, calories burned
• Heart rate (resting + workout)
• Workouts from connected wearables (e.g. WHOOP)
• Body measurements (weight, BMI)

Technical data

• Device identifier (anonymous, used for push notifications + analytics)
• App version, OS version, device model
• Crash reports (if you opt in)
• Push notification token

Information we do NOT collect

• Your contacts
• Your location (unless you explicitly enable wearable activity tracking that includes GPS)
• Your camera roll outside the meal photos you explicitly share
• Your microphone outside the voice notes you explicitly record

3. How we use your information

We do not use your data for advertising, profiling for third parties, or any purpose unrelated to coaching you.

4. Who we share with

Limited, specific third parties — only for service operation.

Third-party AI services

To power Arlo's core features, the content you create and the profile/health context relevant to your request are sent to the AI providers below. Each processes your data only to return Arlo's result for that request, under contractual terms that require confidentiality and data protection at least equivalent to this policy. They do not use your data to serve you ads.

Other service providers

Every third party listed in this section — AI services and other providers alike — is bound by a written agreement that limits them to the purposes described here and requires them to protect your data to a standard at least equivalent to this Privacy Policy.

We never sell your personal data. We never share your health data with advertisers, insurers, or data brokers.

5. Where your data is stored

Data is stored in encrypted databases hosted on cloud infrastructure. Transit is HTTPS-only. Backups are encrypted at rest.

For users in the EU/UK: data may be processed outside the EEA. We rely on Standard Contractual Clauses where required.

6. How long we keep data

• Account data: kept while your account exists. Deleted within 30 days of account deletion.
• Chat messages & meal photos: kept while your account exists.
• Wearable sync data: rolling 12-month window unless you change retention in settings.
• Crash logs: 90 days.
• Anonymized analytics: indefinitely (no longer tied to your identity).

7. Your rights

You can, at any time:

• Access your data (export available from Settings)
• Correct anything in your profile
• Delete your account (Profile → Delete account; we honor this immediately and purge within 30 days)
• Withdraw consent for any feature (notifications, wearable sync, etc.) from Settings
• Restrict processing or port your data (write to help@heymaya.pro)
• Lodge a complaint with your local data protection authority

EU/UK residents have additional rights under GDPR/UK-GDPR. California residents have rights under CCPA/CPRA.

8. Children

Crumb is not for users under 13. We do not knowingly collect data from children under 13. If you become aware that a child has provided us data, email help@heymaya.pro and we'll delete it.

For users 13–17 in the US, parental consent may be required per state law.

9. Security

We use industry-standard practices:

• Encryption at rest (database-level) and in transit (TLS 1.2+)
• Hashed passwords (when applicable — we mostly use OAuth)
• Refresh-token rotation
• Limited employee access on a need-to-know basis

No system is 100% secure. If a breach happens, we'll notify affected users within 72 hours where required by law.

10. Health disclaimer

Crumb provides general lifestyle and nutrition coaching. It is not a medical device, diagnostic tool, or substitute for professional medical advice. Always consult a qualified healthcare provider for medical decisions.

11. Changes to this policy

We'll notify you via in-app banner or email at least 14 days before any material change. The “Last updated” date at the top of this page always reflects the current version.

12. Contact

• Privacy questions: help@heymaya.pro
• Mailing address: [Your business mailing address]
• Data Protection Officer (EU): [Optional DPO contact]

Terms of Service

Welcome to Crumb, a personal AI health app operated by Meshly Technologies Pvt Ltd and powered by an in-app AI assistant called Arlo. By downloading, accessing, or using Crumb, you agree to these Terms. If you don't agree, please don't use Crumb.

1. Eligibility and Use of the Service

You must be at least 13 years old to use Crumb, or older if the law where you live requires it. If you are under 18, you may use the service only with the involvement of a parent or legal guardian.

Crumb is offered for your personal, non-commercial use. You agree to provide accurate account information and keep it current. One account per person — no sharing.

2. Health and Wellness Disclaimer

Crumb is a personal health and habit coaching tool that helps you understand your sleep, food, movement, and energy. It is not a doctor, dietitian, therapist, or medical device, and it does not provide medical advice, diagnosis, treatment, or emergency services.

Meal interpretations, plans, trends, summaries, goals, reminders, and any AI-assisted outputs from Arlo are informational only and may be incomplete or inaccurate. They are based on what you share and general nutritional and sleep science, not a personalized medical opinion. Use your own judgment and consult a qualified professional before making health, nutrition, or treatment decisions. Do not change medications or ignore symptoms based on Arlo's advice. If professional advice conflicts with information from the service, follow the professional advice. If you are experiencing a medical emergency, call your local emergency number immediately.

3. Accounts and Security

You are responsible for activity that occurs under your account and for maintaining the confidentiality of your login credentials. If you believe your account has been accessed without permission, contact us promptly at help@heymaya.pro.

If you choose to sign in with Apple or Google, your use of those sign-in tools is also subject to the applicable third-party terms and policies.

4. Your Content and License to Operate the Service

You keep ownership of the chat messages, photos, food logs, voice notes, goals, profile information, health data, and other content you submit to Crumb.

You grant Meshly Technologies Pvt Ltd a non-exclusive, worldwide, royalty-free license to host, store, reproduce, transmit, display, format, modify, and otherwise process your content solely as needed to operate, secure, maintain, and improve the service. This includes rendering content in your chat, generating personalized plans, and processing your inputs to provide AI-assisted features. We do not use your content to train shared or global AI models without your explicit, separate consent.

You represent that you have the rights needed to submit your content and that doing so does not violate the rights, privacy, or safety of any other person.

5. Acceptable Use and Community Rules

You agree not to:

• use the service for unlawful, abusive, fraudulent, or deceptive purposes;
• upload content you do not have the right to use or share;
• harass, shame, stalk, impersonate, or otherwise harm other people;
• share content that is hateful, threatening, or sexually explicit involving minors;
• reverse engineer, scrape, probe, or automate access to the service, or attempt to extract Arlo's models, without permission;
• interfere with the operation, security, or stability of the service, or bypass rate limits;
• use the service or its content to build competing products, datasets, or models.

We may suspend or terminate accounts that violate this section.

6. Social Features and Shared Content

Crumb may include optional social features. If you choose to use those features, content you share may be visible to other users based on your settings and the feature you use.

You are responsible for what you choose to share and for choosing the audience for that content. Use care when posting photos, captions, or other information that could reveal personal details.

7. Arlo and AI-Assisted Outputs

Plans, charts, summaries, and educational text Arlo generates are for your personal use. You can save them, print them, or share them with your doctor. Please don't republish or commercialize them.

Automated outputs can be wrong, incomplete, or misleading. Review entries and suggestions before relying on them, especially for decisions related to your health or nutrition.

8. Third-Party Services and Device Permissions

The service relies on third-party providers for features such as hosting, storage, authentication, push notifications, analytics, and AI-assisted processing. This includes Apple Sign-In and Google Sign-In, Firebase (Google) for auth and push notifications, connected wearables such as WHOOP (with others coming soon), and AI providers (OpenAI, Google, Anthropic, Deepgram, ElevenLabs) that process your content to power in-app AI features. See our Privacy Policy for what is shared with each. Those providers may have their own terms and policies that also apply to your use of their services, and we are not responsible for outages or data issues on their side.

Certain features may request access to your camera, photo library, microphone, speech recognition, notifications, or location. You can choose whether to grant these permissions, but some features may not work without them.

9. Ownership of the Service

The service, including its software, design, branding, text, graphics, and other content other than your content, is owned by Meshly Technologies Pvt Ltd or its licensors and is protected by applicable intellectual property laws.

Subject to these terms, we grant you a limited, revocable, non-transferable, non-exclusive license to use the service for personal use. If you send feedback or suggestions, we may use them without restriction or compensation to you.

10. Subscriptions and Payments

Crumb is currently free. If we add paid features, the pricing, billing cadence, and cancellation policy will be clearly disclosed at the point of purchase, and these Terms will be updated.

11. Suspension and Termination

You may stop using the service at any time and may delete your account using the in-app flow (Profile → Delete account) or by contacting us at help@heymaya.pro.

We may suspend or terminate access to the service if we reasonably believe you violated these terms, created risk for other users or the service, or if suspension is required for legal, security, or operational reasons. Sections that by their nature survive termination (ownership, disclaimers, limitation of liability) survive.

12. Disclaimers and Limitation of Liability

The service is provided on an “as is” and “as available” basis. To the fullest extent permitted by law, we disclaim warranties of any kind, including warranties of accuracy, availability, non-infringement, merchantability, and fitness for a particular purpose.

To the fullest extent permitted by law, Meshly Technologies Pvt Ltd and its service providers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of data, goodwill, profits, or health-related outcomes arising from or related to your use of the service. Where liability cannot be excluded, our total liability for any claim related to Crumb is limited to the greater of (a) what you paid us in the 12 months before the claim, or (b) ₹1,000 / $10 USD. You are responsible for the decisions you make based on your logs and any AI-assisted outputs.

13. Indemnification

You agree to indemnify Meshly Technologies Pvt Ltd against any third-party claims arising from your misuse of the service or violation of these Terms.

14. Changes and Contact

We may update these terms from time to time. If we make material changes, we may post the updated version in the app or on the website and update the “Last updated” date above, and we will notify you via in-app banner or email at least 14 days in advance.

If you continue using the service after changes take effect, you accept the revised terms. If you do not agree, stop using the service.

Questions about these terms can be sent to help@heymaya.pro.