Privacy Policy

What we collect

At pre-launch, we collect your email address and optional phone number so we can keep you updated about the Timiya launch and product features.

When Timiya launches, we will collect dietary intake data (what you eat), meal photos, and nutrition scores based on our bioavailability science. We do not collect biometric data like blood pressure, heart rate, or genetic information. We only collect health data that you explicitly enter yourself.

If you use Timiya through an employer wellness program, your employer may have access to aggregated wellness metrics only (with your consent), but never to your individual meal logs or personal health data.

Why we collect it

• To provide the Timiya service: meal scoring, nutrition tracking, and personalized dietary suggestions.
• To improve Timiya: we analyze aggregated, anonymized patterns in how people use the app. We never analyze individual user data without explicit consent.
• To send you product updates: we email you about new features, improvements, and important security information. You can opt out of marketing emails at any time.
• For customer support: if you contact us, we keep a record of your conversation to help resolve your issue.

How we store it

All data is encrypted at rest (stored encrypted on our servers) and in transit (encrypted when traveling between your device and our servers). We use industry-standard encryption and security protocols.

Your data is stored in secure data centres that comply with applicable data protection requirements, including GDPR where relevant.

We follow industry-standard security practices, including regular security audits, access controls, and staff training. If we discover a security breach affecting your data, we will notify you within 30 days.

Who we share it with

We never share your personal data in identifiable form with anyone. Your data stays yours.

We may share anonymized, aggregated data (like "70% of users increase their iron absorption by changing meal timing") with research partners and employer clients for corporate wellness programs. This data is anonymized and cannot identify you.

These partnerships require your explicit opt-in. You can manage these preferences in your Timiya account settings at any time.

Your rights

You have the right to:

• Access your data at any time through your Timiya account.
• Export your data in a standard format (CSV, JSON) that you can take with you.
• Delete your account and all associated data permanently.
• Withdraw consent for any data processing, including marketing emails and research participation.
• Correct inaccurate data about yourself.

These rights apply regardless of where you live. To exercise any of these rights, contact privacy@timiya.com with your request.

Cookies and tracking

We use Plausible Analytics for privacy-respecting website analytics on timiya.com. Plausible does not use cookies, does not track individual users, and is fully GDPR-compliant. You cannot be identified through our website analytics.

We do not use any third-party advertising trackers, retargeting pixels, or social media pixels on our website. We never sell your browsing data to advertisers.

Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email at the address associated with your account and update the effective date on this page.

The latest version of this policy is always available at timiya.com/privacy.

Contact

For privacy questions or to exercise your data rights, contact us at privacy@timiya.com.