Privacy Policy

1. Introduction

Welcome to TamisKo ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "App").

By using TamisKo, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the App.

2. Information We Collect

We collect information that helps us provide our core services, including meal planning, glucose tracking, and medication logging.

A. Personal Data

• Identity Data: Name, email address, age, gender.
• Health Data: Weight, height, diabetes type, blood glucose readings, medication logs, allergies, and dietary preferences.
• Emergency Contacts: Name and phone number of your designated emergency contact.

B. Account Data

We use authentication services (such as Google Sign-In or email/password) to verify your identity. We collect your email address and basic profile information provided by these services.

C. Camera & Image Data

We use the camera to scan medication labels, food items, or barcodes for analysis. Images are processed primarily on your device. However, if on-device recognition fails, we may securely transmit the image to Google Gemini (Cloud AI) for advanced analysis. We do not permanently store these images on our servers. Once the analysis is complete, the image is immediately discarded.

D. Subscription Data

If you subscribe to TamisKo Premium, we receive transaction confirmations from Google Play, including your subscription status and expiration date. We do NOT have access to your payment card details—all payment processing is handled securely by Google Play.

E. Voice & Google Assistant Data

TamisKo offers two forms of voice-driven interaction:

• In-App Voice Input: When you tap the microphone button inside the app, your device's native speech recognition processes your voice entirely on-device. We do NOT record, store, or transmit any audio data. Only the recognized text (e.g., the glucose number you spoke) is used within the app.
• Google Assistant App Actions: TamisKo supports Google Assistant voice commands (e.g., "Hey Google, log 125 glucose on TamisKo" or "Hey Google, open glucose tracker on TamisKo"). When you use these commands, Google Assistant processes your voice via Google's own infrastructure (subject to Google's Privacy Policy). TamisKo only receives the text parameters extracted by Google Assistant (e.g., a numeric glucose value or a feature name). We do not receive, process, or store any audio recording from Google Assistant.

Glucose readings logged via Google Assistant are saved immediately to your account and are subject to this Privacy Policy. You have an 8-second window to undo any voice-logged reading directly in the app.

F. Health Connect Integration

TamisKo offers optional integration with Android Health Connect. When you enable this feature:

• We read step count and activity data from Health Connect to display in your activity logs.
• We do NOT write or modify any Health Connect data.
• This connection can be disabled at any time in Settings.
• Data read from Health Connect is stored in your TamisKo account and subject to this Privacy Policy.

G. Doctor Sharing Data

When you generate a "Share with Doctor" link (Premium feature), we create a secure, time-limited URL that allows healthcare providers to view your glucose readings and basic profile. This link:

• Expires after 30 days from creation.
• Can be revoked by you at any time.
• Only shares glucose data and basic profile information (name, diabetes type, age).
• Does NOT share medication names, emergency contacts, or detailed health history.

H. Rewards & Points Data

We track your engagement activities to award virtual points:

• Login streaks and daily check-ins.
• Points balance and purchase history for in-app items.
• Avatar selections and inventory.

Points have no monetary value and cannot be exchanged for real currency. They are used solely for cosmetic customizations within the app.

I. Play Install Referrer Data (Android Only)

To support deferred deep linking (e.g., loading a specific recipe shared by a friend after you install the App), we collect the Install Referrer attribution information from the Google Play Store upon first launch. This data:

• Is used solely to navigate you to the intended content (shared recipe) after installation.
• Includes the campaign identifier or unique referral parameters (e.g., recipe=slug) provided at the time of download.
• Is checked only once upon first installation and is not used for ongoing tracking or advertising.

3. How We Use Your Information

We use your information to:

• Provide personalized meal plans and nutritional insights based on your health profile.
• Track your blood glucose readings and display trends over time.
• Store and display your medication logs with reminder notifications.
• Analyze food items and medication labels using AI to provide nutritional and health insights.
• Send you scheduled reminders and notifications (with your permission).
• Improve our App and develop new features.

4. AI & Third-Party Services

TamisKo uses the following third-party services to enhance your experience:

A. Google Gemini AI

We use Google Gemini AI to analyze food items, analyze medication labels, generate meal plans, and provide nutritional insights. When you use these features, anonymized query data (including image data for medication analysis) is transmitted to Google's servers for processing. No personally identifiable information or your health history is shared with the AI. Google does not use this data to train public AI models.

B. OpenFoodFacts Database

When you scan a food barcode, we query the OpenFoodFacts public database to retrieve product information. Only the barcode number is sent—no personal data is shared.

C. Google ML Kit (Barcode Scanning)

Barcode scanning is performed entirely on your device using Google ML Kit. No images or scan data are sent to external servers for this feature.

D. Firebase Services

We use Google Firebase for authentication, cloud database storage (Firestore), and cloud functions. Your data is stored securely in Firebase's infrastructure, which is compliant with industry security standards.

E. Speech Recognition (In-App)

Voice input for in-app glucose logging uses your device's built-in speech recognition service. All voice processing occurs locally on your device—no audio is sent to TamisKo servers. Depending on your device settings, your voice may be processed by Android's speech services.

F. Google Assistant App Actions

TamisKo registers Google Assistant App Actions to support hands-free voice commands. When you use a command such as "Hey Google, log 125 glucose on TamisKo", Google processes your voice and passes only the extracted parameters (e.g., a numeric value) to TamisKo. TamisKo does not receive, store, or process any audio data. Google's handling of your voice is governed by Google's Privacy Policy.

5. Data Storage and Security

We adhere to strict data security protocols to protect your health information.

• Encryption: All data is encrypted in transit using HTTPS/TLS. Additionally, sensitive fields like Medication Names and Health Logs are encrypted on your device (Client-Side Encryption) before they are sent to our database.
• Storage: Your data is stored securely using Google Firebase with industry-standard protection and strict access controls.
• Access Control: Only you can access your data through your authenticated account.

However, please note that no method of transmission over the internet or electronic storage is 100% secure.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, all associated data (profile, readings, logs) will be permanently deleted from our servers within 30 days, except where we are required to retain it for legal or regulatory purposes.

Locally cached data on your device is removed when you log out or uninstall the App.

Guest/Anonymous Accounts

Anonymous (Guest) accounts that are inactive for more than 30 days will be automatically deleted to maintain system performance. If you wish to retain your data, please link your account to an email or Google profile.

7. Sharing Your Information

We do NOT sell your personal data. We may share information only in the following limited circumstances:

• With Your Consent: For example, if you choose to share a report with your doctor.
• Service Providers: With trusted third-party vendors who assist us in operating our App (e.g., cloud hosting), bound by confidentiality agreements.
• Public Recipe Sharing: If you explicitly choose to "Share" a recipe, the recipe data (name, ingredients, instructions, and image) becomes publicly accessible via a unique URL. Anyone with the link can view this content.
• Legal Obligations: If required by law or to protect our rights and safety.

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your data.
• Export your data via Settings → Account Management → Export My Data. This includes all glucose readings, food logs, exercise data, medications, and AI analyses—regardless of your subscription status.
• Withdraw your consent at any time by deleting your account.

To exercise these rights, contact us at support@tamisko.com or use the "Delete Account" option in Settings.

9. Children's Privacy (COPPA & GDPR)

We comply with the **Children's Online Privacy Protection Act (COPPA)** in the United States and the **General Data Protection Regulation (GDPR)** in the European Union.

• Target Audience: TamisKo is intended for a general audience, including minors (under 18) who require assistance with diabetes management.
• Data Collection: We do not knowingly collect personal information from children under 13 without identifying their status via store-provided age signals.
• Age Signals (Brazil Digital ECA): To comply with Brazilian regulations, we use the **Google Play Age Signals API** to detect if a user is a minor. For minor users, we strictly limit data collection to the minimum required for health tracking and do not use personal data for marketing purposes.
• Parental Rights: Parents or guardians may review, delete, or refuse further collection of their child's information by contacting us at support@tamisko.com.

10. Medical Disclaimer

Important: TamisKo is a tool for tracking and information purposes only. It does NOT provide medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: support@tamisko.com