Privacy Policy

What we collect

On this website: if you join the waitlist, your email address, an optional phone number and the page you signed up from. If you use the contact form, your name, email address and message.

In the app: your name and email address from Google, which you use to sign in. The meals you log, including photos and descriptions. The details you give us to set your targets: age, gender, height, weight and activity; pregnancy or breastfeeding; goals; health conditions, medicines and allergies; your diet, supplements and fasting; and any limits your clinic has set. If you add a child as their guardian, the details you enter for them. If you join a household, you choose what the people in it can see.

We only collect health information that you enter yourself.

Why we collect it

• To run the app: scoring your meals, setting your targets and suggesting what to eat next.
• To reply when you contact us.
• To email you about Timiya if you joined the waitlist. Every email has a link to unsubscribe.

We don't use your data for advertising.

Who handles it for us

We use these services to run Timiya. They handle your data on our behalf.

• Supabase stores the app's data and the website's forms, on servers in Ireland.
• Vercel hosts the website and the app (United States).
• Google signs you in. Google's Gemini AI reads your meal photos and descriptions to recognize the food and estimate portions. To suggest meals, it also receives your nutrient gaps, diet, allergies and goals (United States).
• Resend sends our emails (United States).
• Google Analytics counts visits to this website. See Cookies below.

This means some of your data is processed outside Kenya.

Keeping it safe

Your data is encrypted when it travels between your device and our servers, and when it's stored.

If a breach puts your data at risk, we'll tell the Office of the Data Protection Commissioner within 72 hours, and we'll tell you without delay.

Your rights

• See and correct your details in the app at any time.
• Download your data as JSON or CSV from Account, under Your data.
• Delete only your health information, or delete your whole account.
• Withdraw your consent, and unsubscribe from our emails.
• Complain to the Office of the Data Protection Commissioner (odpc.go.ke).

To ask about any of these, email hello@timiya.health.

Cookies

This website uses Google Analytics 4, which sets cookies to count visits, see which pages people read, and which forms and share buttons they use (not what you type into them). We don't use it for advertising. You can block these cookies in your browser settings.

The site may also set a cookie that remembers your region and language, and it stores your light or dark mode choice on your device.

We don't use advertising or social media trackers.

Changes and contact

When we change this notice, we'll update this page and the date below. For privacy questions, email hello@timiya.health.