BumpBite Privacy Policy
1. Who this is for
BumpBite is intended for adults (pregnant individuals and the people supporting them). It is not directed to children, and we do not knowingly collect data from anyone under 16.
2. What we collect and where it lives
Stored only on your device (in the app's private storage, never uploaded to us):
- Your due date, and the pregnancy week and trimester we derive from it.
- Your preferences: meals per day, calorie target, cooking time, foods you include or avoid, and the concerns you select.
- Your meal plan, the meals you check off, your weekly nutrition progress, and your shopping list.
- Your scan history and the photos you scan (kept in the app's private storage).
If you delete the app, this on-device data is removed with it.
Sent to a third-party AI provider to power the scan feature: when you scan a plate, menu, or label, the photo and a short text prompt (which includes your pregnancy week) are sent to a third-party AI provider (currently Google's Gemini API) so the food can be identified and assessed. This processing is subject to that provider's terms and privacy policy. We do not send them your name, contact details, or identifiers — there is no account to tie it to.
Anonymous usage analytics: we may collect aggregate, non-identifying usage events (for example: a scan was completed, onboarding finished, the paywall was shown) through Google Firebase Analytics, to understand how the app is used and improve it. These events do not include your photos, your due date, or content that identifies you.
3. What we do NOT do
- We do not sell your data, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under California law).
- We do not use your information for third-party advertising.
- We do not require an account, email, or phone number to use BumpBite.
- We do not use Apple HealthKit or read health data from your device.
4. Health-related information
Your due date and food choices are health-related and personal. We treat them as sensitive: they stay on your device, and we never sell them or use them for advertising. BumpBite provides general food-safety information only and is not medical advice — see our Terms of Use.
5. Consumer health data (US state privacy laws)
Some US states — including Washington (My Health My Data Act) and Nevada — regulate "consumer health data." Data you enter in BumpBite that relates to your pregnancy (such as your due date and pregnancy stage) and your food and dietary choices may qualify. For that data:
- We collect it only to provide the app's features (your meal plan, verdicts, and tracking), with your consent when you enter it.
- We do not sell it and do not share it for advertising.
- It is stored on your device, not on our servers — so there is no central store of your health data for us to disclose, and you can delete it at any time by removing the app.
- We will not disclose it except with your consent or where required by valid legal process.
To exercise any right over this data, contact admin@myreplica.io.
6. Purchases
Subscriptions and the 9-month pass are processed by Apple through your App Store account. We do not receive or store your payment-card details; Apple shares only the purchase status needed to unlock features. See Apple's privacy policy for how Apple handles payments.
7. Data retention and security
On-device data persists until you delete it or remove the app. Photos sent for scanning are retained and handled according to the AI provider's policies (currently Google, for the Gemini API). Analytics events are retained per Google Firebase's standard retention settings. We take reasonable measures to protect your information; because your personal content stays on your device within the app's protected storage, the main safeguards are your device's own security (passcode, encryption).
8. Your rights
Because your personal content lives on your device, you control it directly: edit your plan and preferences anytime, and delete everything by removing the app. Depending on where you live (including California under the CCPA/CPRA, other US states, and the UK and EU under GDPR), you may have rights to access, correct, delete, or port your personal data and to opt out of sale or sharing (we do neither). To make a request or ask a question, contact us at admin@myreplica.io. We will not discriminate against you for exercising these rights.
9. International users
BumpBite is offered by a US company (Delaware) and used internationally. Where data is processed by our AI provider (currently Google's Gemini) or our analytics provider (Google Firebase), it may be processed in the United States or other countries under those providers' safeguards.
10. Changes
We may update this policy as the app evolves. We will revise the "Last updated" date above and, for material changes, surface a notice in the app.
11. Contact
Replica AI, Inc., a Delaware C-Corporation
admin@myreplica.io