Related resources
Need the public account deletion request path? Use /tamelo/account-deletion/. Need the service terms? Use /tamelo/terms/.
Published legal page
Privacy Policy
Last updated: April 2026. This published version tracks the same legal text exposed inside the Tamelo app, with links to related web resources.
1. Who We Are
AnyviaAI LLC ("Company," "we," "our," or "us") operates the Tamelo mobile application ("Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Service.
2. Information We Collect
Account information. When you sign in via Google or Apple, we receive your name, email address, and profile photo from those providers. We do not receive or store your social-provider password.
Location data. With your explicit permission, we access your device’s location to find nearby restaurants. Location data is used solely to fulfil restaurant search requests and is not stored as a location history.
Food preference data. If you opt in to personalisation, we store your cuisine preferences, dietary restrictions, and dining preferences to improve recommendations.
App activity and user content. We store restaurants you save to your Want to Try list, group session membership and voting activity, and content you submit in collaborative features such as Melo letters or other group notes.
Usage and device data. We collect anonymised analytics data such as feature interactions, device type, operating system version, app version, and crash reports to improve the Service.
We do not collect sensitive personal information such as payment details, health records, or biometric data.
3. How We Use Your Information
- Authenticate your identity and manage your account.
- Provide personalised restaurant recommendations near you.
- Generate contextual food category suggestions using AI.
- Save restaurants and support collaborative dining features.
- Improve the Service’s recommendation quality and functionality.
- Monitor app stability and diagnose issues via crash reporting.
- Communicate important service updates.
- Ensure security and prevent fraud or misuse.
We do not use your personal information for advertising. We do not sell your personal information to third parties.
4. Information Sharing
We do not sell, trade, or rent your personal information. We may share your information only in these limited circumstances:
- With your explicit consent.
- To comply with legal obligations or respond to lawful requests such as subpoenas or court orders.
- To protect our rights, property, or safety, or that of our users.
- In connection with a business transfer such as a merger, acquisition, or sale of assets, in which case you will be notified.
- With service providers who process data on our behalf under strict confidentiality and data processing agreements.
All third-party service providers are contractually required to protect your information and use it only for the specified purposes.
5. Third-Party Services
The Service uses the following third-party services that may process your data under their own privacy policies:
- Google Firebase — authentication, analytics, and crash reporting.
- Google Places API — restaurant search data, ratings, and business information.
- OpenAI — AI-generated food category recommendations; prompts sent to OpenAI do not include your name, email, or other personally identifiable information.
- WeatherAPI — anonymous location-based weather data for contextual recommendations.
We encourage you to review the privacy policies of these services for details on how they handle data.
6. Data Retention
We retain your account data for as long as your account is active. You may delete your account at any time from the Profile screen, which permanently removes your personal data from our servers, including saved restaurants and account-linked group content, within 30 days unless retention is required for legal, security, or abuse-prevention reasons.
Anonymised, aggregated analytics data that cannot identify you may be retained longer for product improvement purposes.
We will also retain data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
7. Data Security
We implement industry-standard technical and organisational measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS).
- Firebase authentication token validation.
- Database encryption at rest.
- Access controls and restricted internal access on a need-to-know basis.
- Regular security assessments and updates.
No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
8. Children’s Privacy
The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@anyviaai.com. We will promptly delete such information from our systems.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access. Request a copy of the personal data we hold about you.
- Correction. Request correction of inaccurate or incomplete data.
- Deletion. Request deletion of your personal data ("right to be forgotten"). You can also delete your account directly from the Profile screen in the app.
- Portability. Request transfer of your data in a structured, machine-readable format.
- Restriction. Request that we limit processing of your data.
- Objection. Object to processing of your data in certain circumstances.
To exercise any of these rights, contact us at info@anyviaai.com. We will verify your identity and respond within 30 days.
10. For EEA/UK Users (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, the following additional information applies.
- Consent (Article 6(1)(a) GDPR): We process your location data and analytics cookies based on your explicit consent, which you may withdraw at any time via the app settings or by contacting us.
- Contractual Necessity (Article 6(1)(b)): We process your account information and food preferences as necessary to provide the restaurant discovery service.
- Legitimate Interest (Article 6(1)(f)): We process certain usage data for security, fraud prevention, and service improvement, where our interests do not override your fundamental rights.
In addition to the rights listed above, you have the right to withdraw consent at any time and the right to lodge a complaint with your local supervisory authority. For GDPR-related enquiries, contact info@anyviaai.com.
11. For California Users (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Categories of personal information collected. Identifiers such as name, email address, and unique device identifiers; geolocation data used for restaurant discovery; internet or electronic network activity such as app usage and interaction history; and inferences such as food preferences, cuisine interests, saved restaurants, and account-linked group activity.
Sale or sharing. We do not "sell" your personal information as defined under CCPA. We may "share" certain data, such as device identifiers, with analytics providers to improve the Service. You have the right to opt out of such sharing.
Your CCPA rights. You have the right to know what personal information we collect, use, and disclose; request deletion; request correction; opt out of sale or sharing; limit use of sensitive personal information such as precise geolocation; and receive non-discriminatory treatment for exercising your privacy rights.
To submit a request, contact us at info@anyviaai.com, use the in-app privacy settings, or use the public deletion page linked above. We will verify your identity before processing your request.
12. International Data Transfers
Your data is processed in the United States. If you are located outside the US, your information will be transferred to, stored, and processed in the US where our servers are located.
For transfers of personal data from the EEA/UK, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- The EU-US Data Privacy Framework, where applicable.
- Adequacy mechanisms maintained by our sub-processors. Google and OpenAI maintain their own applicable transfer mechanisms.
By using the Service, you consent to the transfer of your information to the United States and to the processing of your information as described in this Privacy Policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on this page. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy. If you disagree with any changes, your remedy is to stop using the Service and delete your account.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:
AnyviaAI LLC
Email: info@anyviaai.com
Response time: We aim to respond within 2 business days.
For EEA/UK residents: You also have the right to lodge a complaint with your local data protection authority.