privacy policy
Last updated: September 8, 2026
Crumb is a private visual memory journal built around food. We designed it around a simple idea: your memories are yours.
This Privacy Policy explains what information Crumb collects, why we use it, how we protect it, when it may be shared, how long we keep it, and the choices available to you.
Crumb is operated by WalkingPal Private Limited. If you have questions about this Privacy Policy or your personal information, contact us at pingcrumb@gmail.com.
1. What this policy covers
This Privacy Policy applies to the Crumb mobile application, Crumb websites, and other Crumb services that link to this Privacy Policy, regardless of the device, operating system, or platform on which you use them.
This policy is intentionally platform- and provider-neutral. The technology and service providers used to deliver a particular feature may change over time, but the categories of information we process and the purposes for which we process it are described here.
This policy describes our handling of personal information when you:
- create or use a Crumb account;
- create, edit, save, or delete Crumbs;
- use camera, photo-library, location, notification, or similar device features;
- use food recognition, image processing, or other AI-assisted features;
- contact us for help or support; or
- visit a Crumb website or other service that links to this policy.
1. What this policy covers
Crumb is not intended to be a public social network. Your Crumbs are private to your account and are not designed to be publicly searchable, followed, liked, or commented on.
2. Information we collect
We collect information needed to provide Crumb and information you choose to put into your memories.
2.1 Account and authentication information
When you create or sign in to a Crumb account, we may receive information from the authentication method you choose or that Crumb supports. Depending on the method, this may include an account identifier, name, email address, or a similar identifier supplied by the authentication service.
We use this information to create and maintain your account, authenticate you, protect your account, and provide access to your Crumbs.
Crumb does not need or receive your password for an external identity provider when authentication is handled by that provider.
2.2 Crumb content you create
When you leave a Crumb, you may provide or create:
- the original food photograph you select or capture;
- the processed food sticker or image derived from that photograph;
- a food title;
- a description of the moment;
- social context, such as whether you were alone, with friends, with family, or with someone special;
- a location you choose to associate with the memory;
- food category or taxonomy information generated for the Crumb; and
- the date and time associated with creation of the Crumb.
2.2 Crumb content you create
This content is the substance of your private food memories. We use it to provide the Crumb experience and to let you view, edit, and manage your memories.
2.3 Location and place information
Crumb can let you associate a place with a Crumb. Depending on how you use the feature, this may include a place name, neighborhood, city, or other place information you choose to associate with the memory.
If you use place search or place-resolution functionality, information needed to search for or resolve the place may be sent to a location or place-service provider. You choose whether to associate a returned place with your memory.
Location permission is not required to create a Crumb. If you do not provide location information, you can still use the core Crumb experience.
Crumb does not use a photograph's capture date or EXIF metadata to decide when a Crumb was created. A Crumb is associated with the date and time at which you successfully create it in Crumb, according to the product's date and timezone rules.
2.4 Camera and photo-library information
If you choose to take a photograph or select one from your photo library, Crumb needs access to the image you selected or captured in order to create the Crumb.
Crumb does not need access to your entire photo library merely because you use the app. Platform permissions control what the app can access.
2.5 Notifications and device information
If you enable push notifications, Crumb uses a device push token so that we can deliver notifications you have enabled, such as reminders or milestone notifications.
Push tokens and related delivery information may be processed by notification and communications service providers that help us deliver those notifications. A push token is associated with your account and device installation for notification delivery and is not itself a food memory.
2.6 Information generated through AI-assisted features
Crumb uses automated processing and AI-assisted services to reduce the effort required to create a memory. Depending on the feature being used, this can include identifying or describing food, generating a food title or moment description, classifying food, or helping create the food sticker.
Information needed to perform these operations, including the selected food image and relevant information required for the requested operation, may be processed by Crumb and by an AI or machine-learning service provider acting on our behalf.
We configure AI-assisted processing so that information reasonably necessary for the requested operation is used for that operation. The applicable service provider's technical data-use and retention terms may change over time, and our agreements and production configuration are intended to limit provider use of Crumb information to the purposes for which the provider is engaged, subject to applicable law.
AI-generated information can be incomplete or incorrect. Crumb is designed to let you review and edit user-editable fields before saving.
2.7 Image processing and sticker creation
Crumb may process images on the device, on Crumb-controlled infrastructure, or through an image-processing service provider, depending on the device, platform, feature, and implementation in use.
Image processing may include foreground/background segmentation, background removal, image transformation, and creation of the visual sticker used by Crumb.
Where image processing is performed on the device, the relevant image processing occurs locally and is not sent to a remote image-processing provider for that step. Where server-side or provider-based processing is required, the information necessary for that operation may be transmitted for processing.
Crumb stores the original source image and the final processed sticker as part of the user's private Crumb data where required for the product experience.
Crumb does not automatically designate user images or other Crumb content as training data. Any future use of user content for Crumb's own machine-learning or AI model development requires the separate authorization described in this policy and in our Terms of Service.
2.8 Technical, security, analytics, and service information
Crumb's systems necessarily process technical information needed to authenticate users, operate the service, protect the service, diagnose failures, measure product reliability, and maintain performance. This can include identifiers associated with your account or installation, request and processing identifiers, timestamps, error information, device or app information, network information, and similar operational information.
Crumb may use analytics, security, monitoring, and operational service providers to help understand product reliability, troubleshoot issues, detect abuse, protect the service, and maintain performance.
Crumb's product and engineering requirements are designed so that analytics and operational telemetry can observe product flow and reliability without recording unnecessary private memory content.
We do not use private memory content as general-purpose advertising or behavioral advertising data.
3. How we use information
3.1 Provide Crumb
We use personal information to:
- authenticate your account;
- create, store, retrieve, edit, and delete your Crumbs;
- process food photographs into the Crumb visual format;
- provide food identification and AI-assisted writing or classification;
- provide place search and location features you choose to use;
- calculate streaks and other product functionality based on your Crumb history;
- deliver notifications you have enabled; and
- provide customer support.
3.2 Keep Crumb secure and reliable
We may use technical and operational information to:
- authenticate requests;
- enforce account and data-access boundaries;
- prevent unauthorized access;
- detect and troubleshoot failures;
- maintain infrastructure;
- investigate abuse or security incidents; and
- improve the reliability of the service.
3.3 Improve the product
Crumb may use limited product analytics or operational information to understand how the product is used, where it fails, and which parts of the service need improvement. Analytics are intended to observe product flow and reliability without recording unnecessary private memory content.
We do not use your private food memories as a public social feed or as advertising content.
3.4 Optional model development and training
Crumb does not automatically use your private Crumb content to train or improve machine-learning models.
If we introduce a feature or program that allows Crumb to use user content for model development or training, we will request a separate, explicit opt-in before using content covered by that authorization. That use may include developing, training, fine-tuning, evaluating, testing, benchmarking, and improving Crumb's machine-learning and AI systems, including systems for image segmentation and background removal, image transformation, food recognition, classification, and other Crumb features.
The applicable consent flow will explain the scope of the content covered, the purpose of the use, and the available choices. You may withdraw that consent for future use through the product or by contacting us where the applicable mechanism permits.
We will not treat your ordinary use of Crumb as consent to model training.
4. How AI and automated processing work
AI is part of Crumb's product experience, but it is not intended to take ownership of your memories.
When an AI-assisted feature is used, the information necessary to perform that feature may be processed by Crumb and an applicable AI or machine-learning service provider. For example, a food photograph may need to be processed to identify food, generate text, classify the food, or assist with another requested feature.
Only information reasonably necessary for the requested feature should be sent to a remote processing provider. Image-processing features may instead run on the device when the applicable implementation supports on-device processing.
Generated content is treated as assistance and can be reviewed or edited where the product allows it. AI output may be inaccurate and should not be treated as medical, nutritional, dietary, allergy, or other professional advice.
Any separate model-development or training use of your Crumb content will be governed by the consent and choices provided for that use.
If content has already been incorporated into a trained or evaluated model or derived model artifact with your authorization, deleting the original content may not by itself remove information already incorporated into that model or artifact, except where applicable law requires otherwise or our technical processes provide for it. We will explain this in the applicable training consent and privacy notice when such a program is introduced.
5. When we share information
We do not sell your personal information, and Crumb is not designed around advertising or public sharing of your memories.
We may share or make information available to service providers when necessary to operate Crumb. Depending on the features you use, these providers may include:
- authentication providers, to create and secure accounts and authenticate users;
- cloud infrastructure and storage providers, to host application data, store Crumbs and media, provide databases, and maintain the service;
- AI and machine-learning service providers, to provide requested food recognition, generated descriptions, classification, image understanding, or other AI-assisted features;
- image-processing providers, where server-side image segmentation, background removal, image transformation, or related processing is required;
- location and place-service providers, to provide place search and place-resolution features you choose to use;
- notification and communications providers, to deliver notifications and service communications you have enabled;
- website hosting, content delivery, security, and infrastructure providers, to operate and protect Crumb websites and related services; and
- analytics, monitoring, support, and operational providers, where needed to understand reliability, troubleshoot issues, provide support, prevent abuse, or protect the service.
5. When we share information
These providers process information on our behalf or as otherwise permitted by applicable law. We select and configure providers with the goal of limiting access to information to what is reasonably necessary for the service and requiring appropriate privacy and security protections under applicable agreements and law.
The exact service providers used for a particular operation may change as Crumb evolves. Changes within the same disclosed categories and purposes do not necessarily require this Privacy Policy to name a different provider.
We may also disclose information:
- when necessary to comply with a valid legal obligation, court order, or lawful government request;
- when necessary to protect the rights, safety, security, or property of Crumb, our users, or others;
- to investigate fraud, abuse, security incidents, or violations of our Terms of Service; or
- in connection with a business transfer such as a merger, acquisition, financing, or sale of assets, subject to applicable law and appropriate protections.
5. When we share information
We do not allow service providers to use your private Crumb content for their own unrelated advertising purposes merely because they provide infrastructure or services to us.
Where required by applicable law, we maintain records of the specific recipients or processors that receive personal information and can provide additional information about recipients in response to a valid privacy request.
6. Private by default
Crumb is designed as a private memory journal.
Crumb does not provide public profiles, followers, following, public feeds, likes, comments, public social rankings, or public engagement metrics as part of the private journal experience.
Your Crumbs are associated with your account and are protected by account-level access controls. Our backend is designed so that an authenticated user can access only their own application data.
Media storage is private, and access controls are designed around authenticated account ownership.
We do not intentionally make your private Crumbs publicly searchable or visible to other users.
7. Data security
We use technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
These measures include, as applicable:
- authenticated access to user data;
- database row-level security and ownership checks;
- private storage for Crumb media;
- server-mediated access to sensitive provider credentials;
- controlled server-side processing for provider integrations;
- secure authentication flows;
- minimizing private memory content in operational logs; and
- access boundaries designed so one user cannot read another user's data.
7. Data security
No internet service can guarantee absolute security. If we become aware of a security incident that requires notification under applicable law, we will take the steps required by that law.
8. Data retention and deletion
We keep personal information for as long as reasonably necessary to provide Crumb and for legitimate operational, security, legal, and accounting purposes, subject to applicable law.
Your saved Crumbs remain in your account until you delete them or delete your account, unless a different retention period is required by law or necessary for a legitimate security or legal purpose.
When you delete a Crumb, the product is designed to remove the associated user-owned record and media and to recalculate any affected streak state.
When you delete your account, Crumb's design is to begin account deletion immediately rather than place the account into a 30-day or 60-day recovery period. Account data and user-owned media are intended to be deleted as part of that process.
Some limited information may remain for a reasonable period where necessary for security, fraud prevention, legal compliance, dispute resolution, or technical recovery, and may be retained in backups until those backups are naturally overwritten according to our operational processes.
Service providers processing information on our behalf may retain information for periods permitted or required by their applicable agreements, security controls, or legal obligations. We select and configure providers with the goal of limiting such retention to what is reasonably necessary for the requested service.
If a user has separately authorized model-development or training use and content has already been incorporated into a trained model or derived model artifact, deletion of the source content may not by itself remove that information from the model or artifact, except where applicable law requires otherwise or the applicable technical process supports removal.
9. Your choices and privacy rights
Depending on where you live, you may have rights regarding your personal information, including rights to:
- access or obtain a copy of personal information we hold about you;
- correct inaccurate information;
- delete your personal information;
- restrict or object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent;
- opt out of certain uses or disclosures where required by applicable law; and
- lodge a complaint with a relevant data-protection or privacy authority.
9. Your choices and privacy rights
Some rights are subject to legal exceptions and may differ depending on your jurisdiction.
Delete your Crumb data
You can delete individual Crumbs through the product where that functionality is available.
You can also request or initiate account deletion through the account controls provided by Crumb. Account deletion is designed to delete your account and associated user-owned Crumb data rather than merely sign you out.
Withdraw optional model-training consent
If Crumb introduces an optional model-development or training program, you will be able to withdraw your consent for future use through the applicable product controls or by contacting us at pingcrumb@gmail.com. Withdrawal will stop future use of content for the applicable training program, subject to technical and legal limitations described when that program is introduced.
Contact us
For privacy requests, questions, or concerns, email pingcrumb@gmail.com. We may need to verify your identity before fulfilling a request so that we do not disclose or delete another person's information.
10. International processing
Crumb and the service providers we use may process or store information in countries other than the country in which you live.
Where applicable law requires safeguards for international transfers, we use appropriate mechanisms and protections for those transfers. Depending on the circumstances, these may include an adequacy decision, contractual safeguards, or another lawful transfer mechanism.
You may contact us if you want more information about applicable transfer safeguards.
11. Legal bases for processing
Where laws such as the GDPR or UK GDPR apply, we process personal information using one or more lawful bases depending on the purpose and circumstances. These may include:
- performance of a contract, where processing is necessary to provide Crumb or features you request;
- consent, where we ask you to make a specific choice before processing;
- legitimate interests, where processing is reasonably necessary for purposes such as security, fraud prevention, service reliability, or product improvement and those interests are not overridden by your rights and interests; and
- legal obligations, where processing is necessary to comply with applicable law.
11. Legal bases for processing
Where processing is based on consent, you may withdraw consent as described in this Privacy Policy, without affecting the lawfulness of processing carried out before withdrawal.
12. California privacy rights
If you are a California resident and applicable California privacy law applies to you, you may have additional rights, including rights to know about personal information collected about you, request deletion, request correction, opt out of sale or sharing where applicable, limit certain uses or disclosures of sensitive personal information where applicable, and receive equal treatment for exercising privacy rights.
Crumb does not sell personal information for monetary consideration and does not operate a cross-context behavioral advertising program. We do not use private Crumb memories for targeted advertising.
California residents may exercise applicable privacy rights by contacting us at pingcrumb@gmail.com. We may need to verify your identity before completing a request.
We may disclose personal information to categories of service providers described in Section 5, such as infrastructure, storage, authentication, AI or machine-learning, image-processing, location, notification, security, analytics, support, and operational providers, when reasonably necessary to provide the service.
13. India privacy information
If you are in India, Crumb processes personal information in accordance with applicable Indian privacy and data-protection law.
We provide information about the personal data we process and the purposes for processing in clear language through this Privacy Policy and relevant product disclosures. Where consent is required, we seek consent in the manner required by applicable law.
Subject to applicable law, you may request access to information about your personal data, request correction or erasure, withdraw consent where applicable, and raise a grievance concerning our processing of your personal data.
To exercise a privacy right or raise a grievance, contact pingcrumb@gmail.com. We may need to verify your identity before fulfilling a request.
14. Children
Crumb is not directed to children. We do not knowingly collect personal information from children where doing so is prohibited by applicable law.
If you believe a child has provided personal information to Crumb in circumstances where it should not have been collected, contact us at pingcrumb@gmail.com, and we will take appropriate steps as required by applicable law.
15. Cookies and similar technologies
Crumb websites may use cookies, local storage, pixels, or similar technologies where reasonably necessary to operate the website, remember preferences, protect the service, measure reliability, or understand website usage.
Where applicable law requires consent for non-essential technologies, we will request it before using those technologies for the purposes that require consent.
The specific technologies used by the website may change over time. We will keep their use within the purposes described in this Privacy Policy and any applicable consent choices.
16. Third-party services and links
Crumb may rely on third-party service providers to operate features of the app and website, as described in Section 5. Those providers may have their own privacy policies and terms governing their services.
Crumb may also link to websites or services that we do not control. This Privacy Policy does not govern the privacy practices of those independent services. We encourage you to review their privacy notices before providing them with personal information.
17. Changes to this Privacy Policy
Crumb may update this Privacy Policy when our practices, services, legal obligations, or privacy requirements change.
We aim to keep this policy accurate without tying it to individual vendors, devices, operating systems, or implementation details that may change while the underlying purposes and categories of processing remain the same.
If we make a material change to how we collect, use, disclose, or retain personal information, we will provide additional notice where required by applicable law and update the "Last updated" date above.
18. Contact us
WalkingPal Private Limited
Crumb
Email: pingcrumb@gmail.com
For privacy questions, rights requests, or concerns about how your personal information is handled, please contact us using the email above.
Nothing in this Privacy Policy limits any rights or protections that cannot lawfully be waived under applicable law.
Last updated: September 8, 2026