← Back to TumbleT

Privacy Policy

Last Updated: March 14, 2026

1. Introduction

This Privacy Policy describes how we collect, use, and protect your information when you use TumbleT. By using this application, you agree to the collection and use of information in accordance with this policy.

1.1 Data Controller

The data controller responsible for your personal data is:

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

2.2 Automatically Collected Information

We automatically collect certain information when you use the application:

2.3 Third-Party Services

We use third-party services that may collect or process information:

2.4 Google API Services

When you connect your Google account, we may access the following data with your explicit consent:

Important: TumbleT's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.

3. How We Use Your Information

We use the information we collect to:

4. Data Storage and Security

4.1 Local Storage

Most application data is stored locally on your device using browser localStorage. This data remains on your device and is not automatically transmitted to our servers.

4.2 Cloud Storage (Firebase)

If you choose to sign in and use cloud sync, your data is stored on Firebase servers. This includes:

Firebase is operated by Google and subject to Google's Privacy Policy and Terms of Service.

4.3 Security Measures

We implement reasonable security measures to protect your information, including:

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Payment Information

When you make payments via Zelle, Venmo, or other payment methods:

6. Google API Data Usage

TumbleT integrates with Google services to provide synchronization features. This section explains how we handle data from Google APIs:

6.1 Data We Access

6.2 How We Use Google Data

6.3 Data Storage and Retention

6.4 Limited Use Disclosure

TumbleT's use of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements. Specifically:

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

8. Your Rights and Choices (GDPR & CCPA)

Under GDPR, CCPA, and similar privacy laws, you have the following rights regarding your personal data:

8.1 Right to Access

You can request a copy of all personal data we hold about you. In TumbleT, you can do this directly:

8.2 Right to Rectification

You can correct any inaccurate or incomplete personal information directly within the application by editing your tasks, settings, and profile information.

8.3 Right to Erasure ("Right to be Forgotten")

You can request permanent deletion of your account and all associated data:

When you request deletion:

8.4 Right to Data Portability

You can export your data in a machine-readable format (JSON) using the "Export My Data" feature. This allows you to transfer your data to another service if desired.

8.5 Right to Restrict Processing

You can disable cloud sync at any time to keep your data local only:

8.6 Right to Object

TumbleT does not use your data for marketing, advertising, or profiling purposes. If you have concerns about how your data is being processed, contact us.

8.7 How to Exercise Your Rights

Most rights can be exercised directly in the app. For additional requests or questions, contact us at support@tumblet.app. We will respond to valid requests within 30 days.

9. Children's Privacy

This application is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and stored on servers located outside your country of residence. By using this application, you consent to the transfer of your information to these servers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Data Retention

In plain language: We keep your data for as long as you have an active account. When you delete something inside the app (a task, a journal entry, a health record, etc.), it is removed from your view and from active use, but a background copy may be kept in an archive for up to 90 days before it is permanently erased. This archive exists solely so we can recover data if something goes wrong (accidental deletion, sync errors, etc.) — it is never used for advertising, profiling, or shared with third parties.

We retain your personal data for as long as:

12.1 How Long We Keep Different Types of Data

12.2 Location Data Retention

Routes and mileage entries (recorded during tracked drives, walks, and runs) are retained based on your preference in Settings > Security > Privacy Controls > Location Data Retention. The default retention period is 180 days. You may choose 30 days, 90 days, 180 days, 1 year, or forever. Data older than your chosen period is automatically deleted from your device and cloud storage.

Geofences (saved locations/landmarks you create) are retained until you manually delete them, as they represent active user-created data.

To disable location collection entirely: Turn off Auto Drive Detection in Settings > App Behavior, and revoke location permissions in your device settings. Previously collected location data can be deleted via Settings > Data > Delete Data.

12.3 Archive and Durable History

When you delete a record inside TumbleT (for example, removing a task or clearing a health entry), we do not immediately hard-delete it from our servers. Instead, the record is moved to an internal archive where it is kept for up to 90 days. During this period:

Why do we archive instead of immediately deleting? Accidental deletions, sync conflicts, and device issues happen. The 90-day archive acts as a safety net. If you want immediate permanent deletion of specific data, contact us at support@tumblet.app and we will remove it promptly.

12.4 Your Controls Over Data Retention

You have several ways to manage how long your data is kept:

12.5 Account Deletion

When you delete your account, we permanently delete all your data — including any archived records — within 7 days (or immediately if you choose immediate deletion). After deletion is complete, no data can be recovered. Some anonymized, aggregated data may be retained for analytics purposes but cannot be linked back to you.

13. Affiliate Links Disclosure

TumbleT participates in the Amazon Associates Program, an affiliate advertising program designed to provide a means to earn fees by linking to Amazon.com and affiliated sites.

Some features in TumbleT reference books and research that informed their design. These references may include affiliate links to Amazon. If you click a book link and make a purchase, TumbleT may earn a small commission at no additional cost to you.

This disclosure is made in compliance with the FTC's guidelines on endorsements and testimonials.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

For GDPR-related inquiries, we will respond within 30 days. For urgent matters regarding data breaches or security concerns, we will respond as quickly as possible.

Home Terms of Service Privacy Policy