Legal

Privacy Policy

This policy explains how Crumbz collects, uses, shares, and protects information when you use our website, admin console, APIs, and mobile applications. It is written to support App Store and Google Play review requirements.

Last updated: 10 November 2026

1. Overview

Crumbz (“Crumbz”, “we”, “us”, or “our”) provides food-waste tracking tools for commercial kitchens. We take privacy seriously. We collect only what we need to operate the service, improve kitchen operations for our customers, and meet legal and store-platform obligations.

By using Crumbz, you acknowledge this Privacy Policy. If you do not agree, please do not use the Services.

2. Who we are

The Crumbz services are operated under the Crumbz brand and made available at https://crumbz.ai, related admin and API domains, and our iOS and Android mobile applications.

Privacy inquiries: privacy@crumbz.ai

3. Services covered

This Privacy Policy applies to:

  • Our marketing and product website at crumbz.ai (including /privacy)
  • Customer admin experiences such as admin.crumbz.ai
  • Backend APIs such as api.crumbz.ai
  • Crumbz iOS and Android mobile apps used by kitchen staff and managers

Together, these are the “Services”.

4. Data we collect

Depending on how you use Crumbz, we may collect the categories below. We do not sell personal information.

4.1 Account and restaurant information

  • Full name, work email, phone number (optional)
  • Restaurant / kitchen name, currency, plan or trial status
  • Role (for example admin or staff), authentication credentials (passwords are stored hashed)
  • Business details you submit on website registration or interest forms

4.2 Food-waste operational data

  • Photographs of discarded food captured in the mobile app
  • Waste station / QR identifiers, branch or location labels configured by your organisation
  • Item suggestions, quantity ranges, reasons, timestamps, and related confirmations
  • Aggregate reports and estimated cost metrics derived from that operational data

Waste photos are used to operate Crumbz features (identification, confirmation, reporting). They are business operational records for your organisation, not consumer social content.

4.3 Device, app, and technical data

  • Device type, operating system, app version
  • IP address, approximate network metadata, browser type (website)
  • Crash logs, diagnostics, and performance data to keep the Services reliable
  • Basic usage events (for example feature opens) needed for product functionality and security

4.4 Communications

If you email us or submit a form, we keep the content of that message and your contact details so we can respond.

4.5 What we typically do not collect

  • We do not require precise GPS tracking of staff as a core product feature.
  • We do not use waste photos for third-party advertising or cross-app tracking.
  • We do not knowingly collect payment card data in the mobile capture flow described above (billing, if any, is handled through designated account / subscription channels).

5. How we use data

We use information to:

  • Provide, secure, and improve the Services
  • Create and manage restaurant and user accounts (including trials)
  • Process waste captures and generate management reports for your organisation
  • Communicate about onboarding, support, product updates, and security notices
  • Detect abuse, prevent fraud, and enforce terms
  • Comply with law and respond to lawful requests
  • Analyse aggregated / de-identified trends to improve Crumbz (not to rank individual kitchen staff performance as a consumer scoring product)

6. Mobile app permissions

Our iOS and Android apps may request permissions only as needed for core functionality:

  • Camera — to photograph discarded food at waste stations
  • Photo library (if offered) — only when you choose to upload an existing image
  • Network access — to sync captures and reports with Crumbz servers
  • Notifications (optional) — operational reminders if enabled by your organisation

You can deny or revoke permissions in device settings. Some features will not work without camera or network access.

7. How we share information

We may share information with:

  • Your organisation — restaurant admins and authorised users can see operational waste data for their account
  • Service providers — hosting, email delivery, error monitoring, and similar processors who act on our instructions
  • Legal and safety — when required by law, or to protect rights, safety, and integrity of the Services
  • Business transfers — in connection with a merger, acquisition, or asset sale, with appropriate notice where required

We do not sell personal information and we do not share personal information for cross-app advertising tracking.

8. Retention, account & data deletion

We retain information for as long as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and customer configuration.

Account deletion. You (or your organisation’s admin) may request deletion of an account and associated personal data by:

  • Using in-product account / organisation settings where available, or
  • Emailing privacy@crumbz.ai from the email address on the account, with subject line “Account deletion request”

After verifying the request, we will delete or de-identify personal data associated with the account, except where we must retain limited records for legal, security, or accounting reasons. Operational waste records belonging to a customer organisation may be retained or deleted according to that organisation’s instructions and our customer agreements.

9. Security

We use administrative, technical, and organisational measures designed to protect personal data, including encryption in transit (HTTPS/TLS), access controls, and hashed password storage. No method of transmission or storage is 100% secure; if you believe your account has been compromised, contact us immediately.

10. International transfers

Crumbz may process information in countries other than where you are located, including where our hosting and service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

11. Children

Crumbz is a business product for commercial kitchens and is not directed to children. We do not knowingly collect personal information from children under 16 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided personal data, contact privacy@crumbz.ai and we will take appropriate steps.

12. Your rights & choices

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to / restrict certain processing. To exercise these rights, contact privacy@crumbz.ai. We may need to verify your identity. If you use Crumbz through an employer or restaurant group, some requests may need to go through that organisation as the account controller.

You may also unsubscribe from non-essential marketing emails using the link in those messages.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at https://crumbz.ai/privacy and revise the “Last updated” date. Material changes may also be communicated by email or in-product notice where appropriate.

14. Contact

For privacy questions, data requests, or account deletion:

Email: privacy@crumbz.ai

Web: https://crumbz.ai

This page is publicly accessible (no login required) so it can be linked from App Store Connect, Google Play Console, and in-app settings.