Privacy policy

Who we are

Tomatito is made by PetHubble SARL, 26 bis chemin de Cornier, 33270 Floirac, France (RCS Bordeaux 995 159 894). We decide how your data is used in Tomatito (in data protection terms, we are the “controller”). Write to us any time at contact@pethubble.com.

What Tomatito keeps, and why

Tomatito only keeps what it needs to remember how you cook, plan your week and write your shopping list.

Your kitchen

The meals you add (names, ingredients, steps, labels, favorites), the dinners you log and how they went, your Kitchen Memory notes, your week plan, your shopping list, your stores and pantry staples, and your settings (units, how many people you usually cook for).

The people you cook for

The names you give them, their usual portion, and, if you choose to add them, their allergies, dislikes, favorite foods and diets. This is optional. Allergies and diets can say something about health or beliefs, so Tomatito uses them only to plan meals and suggest ingredients, and you can change or remove them at any time.

Photos

The dinner photos you add, made smaller on your phone before they’re sent.

Your account

Tomatito starts with an automatic account, without a name or an email address. If you sign in with Apple or Google, we receive the account identifier and the email address that Apple or Google shares with us (Apple lets you hide your real address). We use them to keep your kitchen when you change phones. Google also shares your name and profile picture; Tomatito doesn’t use them.

Sharing your kitchen

When you invite someone, Tomatito keeps the invite code (it works once, for 7 days), who joined, and the name each person chose to show the others.

Usage counts

How many times each account asked for a suggestion this day and this month, so nobody can overuse them. These counts hold no words and nothing from your kitchen.

Some choices stay on your phone only, such as the app’s language and the cards you’ve dismissed.

We use this data to run Tomatito for you (the service you asked for). For allergies and diets, the basis is your choice to enter them.

Tomatito’s suggestions

Some features ask an AI model for help: sorting dictated ingredients into a list, suggesting ingredients for a meal, and “Something new for this season”. Tomatito only does this when you tap one of them, and its answers are always labeled as suggestions, never as something your household knows.

For these, your phone sends only the words the task needs to our server in Belgium, which asks OpenAI: for example the ingredients you dictated, a meal’s name and steps, the language, units, country and month, and the foods to avoid (the allergies and dislikes you entered, without anyone’s name). Your account details and the rest of your kitchen are not sent.

OpenAI processes these words to answer, in the United States, under its data processing terms for businesses (signed with OpenAI Ireland Ltd for companies in Europe). It doesn’t use them to train its models, and may keep them for up to 30 days to detect abuse before deleting them.

Where it’s stored, and who helps us

• Google (Firebase) stores your kitchen and photos and runs our server, in Belgium (europe-west1). Sign-in is handled by Firebase Authentication, which may process account data in the United States.
• OpenAI answers the suggestion requests described above.
• Apple and Google handle “Sign in with Apple” and “Sign in with Google”, under their own privacy policies. To keep fake apps out, your phone also proves to Firebase that it’s running the real Tomatito app (Apple’s App Attest or Google’s Play Integrity), without telling us who you are.

When data leaves the European Union, it is protected by the European Commission’s standard contractual clauses or an equivalent safeguard in these companies’ data processing terms.

We don’t sell your data, we don’t show ads, and we don’t share your data with anyone else, unless the law requires it. If we ever add a tool to measure crashes or how the app is used, we’ll update this page first.

Who can see your kitchen

Only the people in your kitchen. Everyone in a shared kitchen sees and can change its meals, plan, shopping list and photos; a note written down can only be changed by the person who wrote it. We don’t look at your kitchen unless you ask us to for support, or the law requires it.

How long we keep it

• Your kitchen stays until you delete your account (see the last point). Deleting a meal deletes its dinners’ photos and its notes.
• When you join another kitchen and nobody else uses yours, your old kitchen is deleted with its photos.
• Invite codes stop working after 7 days or once used. Usage counts are kept for the current month.
• To delete your account, write to us at contact@pethubble.com with the code that “Invite someone” shows in Settings and the name you use in your kitchen, so we know which account is yours. Within one month, we delete your account and, if nobody else uses it, your kitchen with its photos. A kitchen you share stays with the others, with its meals, notes and photos: we just take you out of it. A “Delete my account” button is coming to the app.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it, and you can take it with you. Most of it you can change yourself in the app. For anything else, write to contact@pethubble.com; we answer within one month. If you think we’ve handled your data badly, you can complain to the CNIL (cnil.fr), the French data protection authority, or to the authority where you live.

Keeping it safe

Everything travels encrypted, and Google encrypts it where it’s stored. Security rules let only the people in a kitchen read or change it, only the real app can reach our server, and each account’s suggestions are limited.

Children

Tomatito is made for adults who cook for a household. It isn’t meant for children to use on their own. You can list children among the people you cook for.

This website

This website sets no cookies, runs no tracking and loads nothing from other companies. Like every website, the server that sends the pages (Firebase Hosting, run by Google) briefly logs technical details such as IP addresses to keep it working and secure.

Changes to this policy

If we change how Tomatito uses your data, we’ll update this page and its date. For important changes, we’ll also tell you in the app.