Tamarin

Legal

Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how Tamarin Labs SRL [confirm exact registered form: SRL or SRL-D] (“Tamarin”, “we”, “us”, “our”) collects, uses and protects your personal data when you use the Tamarin mobile app, the jointamarin.com website and our related services (together, the “Service”). We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and Romanian data-protection law.

1. Who we are

Tamarin Labs SRL [confirm exact registered form: SRL or SRL-D], a company registered in Romania.

  • Registered office: [REGISTERED OFFICE ADDRESS], Romania
  • Company registration: [CUI] · [Trade Register No. J__//]
  • Privacy contact: [email protected]

2. Who can use Tamarin

Tamarin is intended for adults. You must be 18 years or older to create an account or use the Service. The Service is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

3. Information we collect

Account & profile

When you create an account we collect your email address, a username, and (optionally) your first and last name and a profile photo. Your password is stored in hashed form. If you sign in with Apple or Google, we receive a unique identifier and the name/email you choose to share so we can create or match your account.

Content you create

We store the content you add to the Service, including shopping lists, pantry items, meal plans, cooking sessions, recipe reviews and ratings, saved recipes and collections, and your saved search filters. If you use daily food and nutrition logging, we store the meals and nutrient totals you record — this is information about your diet, which we treat with particular care.

Photos you upload

If you add a profile picture or a recipe photo, that image is uploaded and stored on our behalf by our hosting provider (see section 6).

Voice & microphone

Tamarin’s hands-free mode uses your device’s microphone and its built-in speech-recognition service (Apple on iOS, Google on Android) to turn your spoken commands into text. That recognition is performed by your device’s operating system, and the audio may be processed by Apple or Google under their own privacy policies. Tamarin then matches the recognised text to a command on your device. We do not record, store or upload your voice or audio to our servers. Spoken step read-out (text-to-speech) is generated on your device.

Purchases & subscriptions

Tamarin Pro is a paid subscription sold through the Apple App Store and Google Play. Payment is handled by the app stores — we never receive or store your card details. Through our subscription provider (RevenueCat) we receive purchase and entitlement information, such as which product you bought, the purchase and expiry dates, and your platform and app version, linked to your account.

Device, log & diagnostic data

We collect technical data needed to run and secure the Service: device type and operating system, app version and build number, IP address and standard server log data, the status of the permissions you have granted, and — to keep the app stable — crash and error diagnostics. To send you notifications we store a push-notification token for your device.

Analytics, advertising & attribution

We use analytics and marketing tools that collect usage events (for example screens viewed, sign-up, checkout started), install attribution data, and — where you consent — an advertising identifier (such as Apple’s IDFA). See section 5 for how consent works.

Location

With your permission, we may use your approximate “when in use” location to offer more relevant, local content. You can grant or revoke this permission at any time in your device settings.

4. Why we use your data and our legal bases

  • To provide the Service — create your account, sync your content across devices, run voice mode, process subscriptions. Legal basis: performance of a contract.
  • To keep the Service safe and working — security, fraud prevention, crash diagnostics, and improving features. Legal basis: our legitimate interests.
  • Analytics, advertising and marketing messages — measuring and promoting the Service and showing ads. Legal basis: your consent (which you can withdraw at any time), or our legitimate interests where permitted.
  • To meet legal obligations — for example tax, accounting and responding to lawful requests. Legal basis: compliance with a legal obligation.

5. Advertising & tracking

The free version of Tamarin is supported by ads. We use Google AdMob to show ads and, for measurement and attribution, the Meta (Facebook) SDK and AppsFlyer. On iOS we ask for your permission through Apple’s App Tracking Transparency prompt before using an advertising identifier for cross-app tracking; on Android we ask through Google’s consent form. If you do not consent, we show only non-personalised ads and limit tracking accordingly. You can change your choice at any time in your device settings, and Tamarin Pro removes ads.

6. Service providers we share data with

We share personal data with trusted providers who process it on our behalf, under contract, only to provide their service to us:

  • DigitalOcean — cloud hosting and image/file storage (privacy policy)
  • Twilio SendGrid — transactional and service email (privacy policy)
  • Google / Firebase — analytics, crash reporting, push notifications, sign-in and ads (AdMob) (Firebase, Google)
  • Apple — Sign in with Apple and on-device speech recognition (privacy policy)
  • AppsFlyer — install and marketing attribution (privacy policy)
  • Meta (Facebook) — advertising and measurement (privacy policy)
  • RevenueCat — subscription management (privacy policy)
  • OpenAI — AI features that process recipe and ingredient content only; we do not send your name, email or personal logs (privacy policy)
  • Hugging Face — hosts the on-device text-to-speech model your app downloads (privacy policy)

We may also disclose data where required by law, to establish or defend legal claims, or in connection with a merger, acquisition or sale of assets (in which case we will notify you).

7. We do not sell your data

We do not sell your personal data. We share data only with the providers described above and only for the purposes described here.

8. Sharing features

You can share a shopping list by generating a link. Anyone who has that link can view and edit that list without an account, so only share it with people you trust. When collaborators make changes, the display name and colour they choose are shown in the list’s activity history. You can revoke a share link at any time.

9. International data transfers

We are based in Romania. Some of our providers are located outside the European Economic Area (for example in the United States). Where we transfer personal data outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

10. How long we keep your data

We keep your personal data for as long as your account is active and as needed to provide the Service. After you delete your account we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to meet legal, tax or accounting obligations or to resolve disputes.

11. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to certain processing;
  • receive your data in a portable, machine-readable format; and
  • withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), or your local authority.

12. Deleting your account

You can delete your account and its associated data from within the app. Deleting your account removes your profile and content and cancels the link between your account and your subscription records. You can also email [email protected] and we will action your request. Subscriptions are managed by the app stores and must be cancelled there.

13. How we protect your data

We use technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

14. Children

Tamarin is for users aged 18 and over and is not intended for children. See section 2.

15. Changes to this policy

We may update this policy from time to time. If we make a significant change we will take reasonable steps to let you know, for example within the app or on this page, and we will update the date at the top. Where a change requires it, we will ask for your consent again.

16. Contact us

Questions about this policy or your data? Email [email protected]. See also our Cookie & Tracking Policy and Terms of Service.

← Back home