SECURITY NOTICE

Gourmetmiles Inc.

Published October 28, 2026

This notice explains a security issue that involved a limited set of Gourmetmiles account information, and how it has been resolved.

WHAT HAPPENED

Our apps used an access key to upload profile photos. On August 24, 2026, someone outside the company extracted that key from the app and tested it. Between September 20 and 29, 2026, the key could also read some account records. We identified the issue on September 29, 2026 and fixed it the same day.

WHAT INFORMATION WAS INVOLVED

The meals, water and exercise logged in the app by 609 accounts.

For 558 of those accounts, that is all there was: food entries stored against an account number, with no name, email address, phone number or home address, and no way for anyone holding the key to tell whose they were.

For 51 accounts, the records also included a name, an email address and past subscription details (product, price, dates, transaction IDs and App Store receipt), plus the type of device used. We have notified those 51 people by email.

WHAT WAS NOT INVOLVED

Passwords, payment card or bank details, Social Security numbers, home addresses and phone numbers. None of these were ever reachable with this key. Names and email addresses for everyone else are kept in a separate system the key could not reach.

We don't have logs from that period showing whether any records were actually viewed, so we are publishing this notice as a precaution.

WHAT WE'VE DONE

  • Removed the key's extra access on September 29, 2026.
  • Moved our servers onto separate credentials.
  • Turned on logging that records this kind of access.
  • Reported the issue to the Federal Trade Commission.
  • Current versions of the apps no longer contain the key, and it will be fully retired along with older versions.

WHAT YOU CAN DO

No action is needed, and passwords are unaffected. As a general precaution, be cautious of any email claiming to be from Gourmetmiles that asks you to sign in, pay or confirm personal details; if in doubt, contact us directly. You can delete your account at any time in the app under Settings, or at manageaccount.gourmetmiles.com.

QUESTIONS

Write to support@gourmetmiles.com.