Privacy Policy
Last updated: September 2026
1. Information we collect
We collect personal information that you provide directly to us, including name, email address, phone number, date of birth, National ID, financial information, and other data necessary to provide our services. When organisations connect through marketplace apps or partner connectors, we also receive activity signals they send under their contract with you (for example order or fulfilment events for a commerce store).
2. How we use your information
We use your information to provide Portable Trust Infrastructure services including context-scoped trust intelligence, risk assessment, identity resolution, and trust analytics. We are a trust platform — not a traditional credit bureau.
Portable trust is designed so your profile can travel with you. If a marketplace app or partner connection is reinstalled, or you later connect through another partner that maps to the same trust subject, we may continue the same portable identity and history rather than starting from zero. Disconnecting an integration is not the same as deleting your TumiTrust account or requesting erasure — see Delete your account and the rights below when you want data removed.
3. Data sharing and disclosure
We share your information with third parties only when you have given explicit consent, including institutions and organisations for trust-based decisions you authorize.
4. Data security and protection
We implement comprehensive security measures including end-to-end encryption, multi-factor authentication, and regular security audits.
5. Your rights and choices
You have the right to access, correct, delete, and export your personal information and trust data. You can withdraw consent for data processing at any time. We document data minimization, retention limits, and explainability obligations for trust lookups. To delete your TumiTrust account, follow the steps in Delete your account below.
6. Delete your account
You can request deletion of your TumiTrust account and associated personal data. This section describes how to start a deletion request, what happens during the grace period, and what data is removed or retained.
How to delete your account in the TumiTrust app
- Sign in to the TumiTrust mobile app.
- Open your Profile.
- Tap Account Management.
- Choose Delete Account.
- Read the confirmation message, type DELETE exactly as prompted, and confirm.
We will email the address on your account when the deletion process starts (if an email is registered).
30-day grace period
When you confirm deletion in the app, we schedule permanent removal for 30 days after your request. During this period:
- Your account is marked for deletion and you will be signed out.
- You may cancel the deletion and keep your account by signing in again before the scheduled date.
- After 30 days, deletion is completed and cancellation is no longer available through the app.
What we delete
After the grace period (or immediately where our systems complete erasure sooner), we delete or anonymise account data including, where applicable:
- Profile information (name, email, phone number, bio, photo, and related profile fields)
- Account identifiers and authentication records tied to your user
- Verification documents and files you uploaded
- Trust, endorsement, and activity data linked to your account
- Community content and other user-generated data associated with your account
Related records may be removed through database cascade rules when your user account is deleted.
What we may keep
We may retain limited information where required by law, regulation, dispute resolution, fraud prevention, or enforceable legal obligations (for example audit logs or billing records). Any retained data is kept only as long as necessary for those purposes and is protected in line with this policy.
Until you delete your account or we complete a verified erasure or shop-redaction request, portable trust records tied to a subject or merchant entity may remain so the profile can continue if you reconnect the same organisation later. Marketplace app uninstall alone does not erase that continuum.
If you cannot access the app
Email privacy@tumitrust.com from the email address registered on your account. Include the subject line Account deletion request and the phone number or username on your account. We will verify your identity before processing the request.
7. Contact us
For questions about this Privacy Policy, please contact us at privacy@tumitrust.com or hi@tumitrust.com.