Privacy Policy

Personal Information You Provide

Email address (when you create an account)

WiFi network credentials (to provision your devices)

Device preferences and settings

Information Automatically Collected

Log and Usage Data: How you use the app, features accessed, session duration, and performance

Device Data: Device model, OS version, device identifiers, and app version

Internet Activity: App navigation patterns, screen views, and feature usage

Provide Our Services

• Connect and control your Tumbu LED devices
• Provision devices with WiFi connectivity
• Sync device settings across your devices
• Enable cloud-based device control

Improve Our Services

• Analyze app usage to improve features and user experience
• Diagnose and fix technical issues and bugs
• Monitor app performance and crashes
• Understand usage trends to enhance the app

Security and Protection

• Protect against fraudulent or unauthorized access
• Maintain the security of your account and devices
• Prevent misuse of our services

We share information with the following service providers who help us operate the app:

Google LLC (Firebase Services)

• Firebase Authentication: User account management
• Firebase Realtime Database: Device settings and cloud sync
• Firebase Analytics: App usage analytics and crash reporting
• Google Cloud Platform: Cloud infrastructure and data storage

These service providers are contractually obligated to protect your information and use it only to provide services to us. They do not use your information for their own purposes.

Depending on your location, you may have the following rights:

Access and Portability
Request a copy of the personal information we hold about you in a portable format

Correction
Request correction of inaccurate or incomplete information

Deletion
Request deletion of your personal information or delete your account through the app

Object and Restrict
Object to or restrict certain processing of your information

Withdraw Consent
Withdraw consent where we rely on consent to process your information

If you are a California resident, you have specific rights:

Information We Collect

• Identifiers: Email addresses, device identifiers, user IDs
• Internet Activity: App usage data, navigation patterns, feature usage
• Device Information: Device model, operating system, app version

Your California Rights

• Right to know what information we collect and how we use it
• Right to delete your personal information
• Right to opt-out of sale (we do not sell information)
• Right to non-discrimination for exercising your rights

If you are located in the EEA or UK, you have rights under GDPR:

Legal Basis for Processing

• Contractual Necessity: To provide the services you request
• Legitimate Interests: To improve our services, ensure security, and analyze usage trends

Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Security Measures

We implement appropriate technical and organizational measures to protect your personal information. WiFi credentials are encrypted during Bluetooth transmission. However, no method of transmission or storage is 100% secure.

Data Retention

We retain your personal information for as long as you maintain an account with us. When you delete your account, we will delete your personal information, except where we are required to retain it for legal or legitimate business purposes.

The Tumbu app requests the following permissions:

• Bluetooth: Required to discover and connect to Tumbu devices
• Location: Required by Android for WiFi network scanning (we do not collect or track your location)
• Internet: Required for cloud features and remote device control
• WiFi State: Required to scan and display available WiFi networks during device setup