Privacy Policy

This Privacy Policy (“Policy”) describes how YumiShare (“YumiShare,” “we,” “our,” or “us”) collects, uses, discloses, and otherwise processes your personal information when you use our Services (our website at yumishare.com, mobile application, and other interactions you may have with us), as well as your privacy rights and choices regarding your personal information.

This Policy forms a part of our Terms of Service. Terms not defined in this Policy are defined in the Terms of Service.

If you reside in the U.S. and are under 13 years of age, you should not use our Services. If we become aware that an individual under 13 years of age may have provided us with personal information, we will investigate and, if applicable, take steps to remove and delete the data and delete that individual’s account. If you reside in the European Economic Area, Switzerland, or United Kingdom, please see the Additional Information for Certain Jurisdictions section below.

Personal Information We Collect

We may collect personal information directly from you, automatically through your use of the Services, and from third parties.

Personal Information We Collect Directly from You

• Account and Profile Information. This includes your name, email address, profile image or photo (optional), language preferences, and general location information (such as country).
• Recipe and Kitchen Data. Certain features of our Services allow you to voluntarily share information related to cooking and meal planning. This includes your:
  • Recipes you create, import, or save (including titles, ingredients, instructions, notes, and tags);
  • Photos and images you upload or scan (such as recipe cards, cookbook pages, screenshots, or food photos);
  • Meal plans and scheduled meals;
  • Grocery lists and shopping items;
  • Pantry inventory, including items added via barcode or receipt scanning;
  • Dietary preferences or restrictions you choose to provide; and
  • Collections, folders, or other organizational data within the app.
• Communications with YumiShare. This includes your email address, name, and any other content provided when you communicate with us, including exchanges with our customer support team.
• Research and Survey Information. This may include information you provide if you participate in research and surveys, such as contact information, feedback, and other information you choose to provide.
• Preferences and Other Requests. This may include information about your preferences, including communication preferences, app settings, and any other preferences or requests you provide when interacting with us.
• Payment and Subscription Information. Purchases and subscriptions are processed through the Apple App Store. We use RevenueCat to manage and verify subscription status (see above). We do not directly collect or store your full payment card details. Apple’s and RevenueCat’s terms govern payment processing, renewals, and refunds.

Personal Information We Collect Automatically

YumiShare may collect Usage and Device Data. This may include details about your browser, operating system, or device (such as cookie identifiers, internet protocol (IP) address, mobile advertising identifier, and other unique identifiers), internet service provider, mobile carrier, general location information (including inferred location based on your IP address), actions that you take while using the Services, information about how you interact with the Services (including the frequency and duration of your activities), and other information about how you use the Services.

We may collect this information automatically through cookies and other tracking technologies (collectively, “Cookies”) we use to enhance your experience when you use our Services.

We use Cookies for a variety of purposes, including to:

• Make our site work, ensure security, and prevent fraud (Required Cookies);
• Provide enhanced functionality and analyze usage to improve our website (Functional Cookies); and
• Provide you with personalized content and advertisements, where applicable (Targeted Advertising Cookies).

What are Cookies? “Cookies” are small text files placed on your device when you visit certain websites. Like many online service providers, we (and our third-party service providers and partners) use cookies and similar technologies (e.g., pixels, web beacons, local storage objects, log files, and software development kits) on the Services for various purposes.

Managing your Cookie Preferences. Depending on the country where you reside, you have choices with respect to Cookies. By modifying your browser preferences, you can choose to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies, some of our Service’s features may not work properly.

Personal Information We Receive From Third Parties

• Social login providers. We may receive information from third-party providers (like Apple and Google) if you sign in using your account with one of these providers.
• Service providers. Our service providers may provide us with your information to help us operate and improve the Services, including analytics, customer support, and security monitoring.
• Marketing and advertising companies. This includes third parties who may disclose information about your interests, demographic information, and information about the marketing and advertisements you have seen or clicked on.

Aggregated, Deidentified, or Anonymized Information

We may aggregate, de-identify, or anonymize information so that it will no longer be considered personal information under applicable law. We may use and disclose de-identified information for purposes consistent with those described in this Policy or as otherwise permitted by applicable law.

Third-Party AI Processing (OpenAI)

Certain YumiShare features use artificial intelligence to import recipes from links and to digitize recipes from photos you scan or upload. When you use these features, we send the content you provide — including imported text and URLs, and photos and images you scan or upload (such as recipe cards, cookbook pages, screenshots, or receipts) — to OpenAI, Inc. and its affiliates (“OpenAI”) for processing.

OpenAI processes this content on our behalf to extract, structure, and return recipe information (such as ingredients, instructions, and titles) so we can display it in the app. We do not use content sent to OpenAI for marketing or advertising, and we do not sell it to third parties for their own marketing purposes.

OpenAI may process this data in the United States and other countries. OpenAI’s handling of data is governed by its own terms and privacy policy, available at openai.com/policies/privacy-policy.

You should only submit content you have the right to share. Do not upload photos containing personal information about others without their consent.

Analytics and Diagnostics (PostHog)

We use PostHog (PostHog, Inc.) to collect usage data and diagnostics about how the Services are used. This helps us measure performance, understand feature usage, fix bugs, and improve the app. Depending on your settings and how you use the Services, PostHog may receive information such as:

• App interactions and events (e.g., screens viewed, features used);
• Device and app information (e.g., device model, operating system version, app version);
• Session and performance data; and
• Crash or error diagnostics, where applicable.

PostHog’s privacy practices are described at posthog.com/privacy.

Data Storage and Authentication (Supabase)

We use Supabase (Supabase, Inc.) to host our database and manage your account and authentication. Your account information (such as your email address and user identifier) and app content (such as recipes, meal plans, grocery lists, and pantry data) are stored on Supabase infrastructure. Supabase processes this data on our behalf to operate the Services.

Supabase’s privacy practices are described at supabase.com/privacy.

Subscriptions (RevenueCat)

We use RevenueCat (RevenueCat, Inc.) to manage subscriptions and verify purchase status. RevenueCat receives your user identifier and subscription information (such as product purchased, subscription status, and renewal dates). We do not receive your full payment card details — purchases are processed by the Apple App Store.

RevenueCat’s privacy practices are described at revenuecat.com/privacy.

How We Use Personal Information

• Provide our Services. We use your personal information to provide, administer, and manage the Services, including managing your account, importing and organizing recipes, generating meal plans and grocery lists, providing troubleshooting and technical support, and running our day-to-day operations.
• Communicate with You. We use your personal information to communicate with you, including responding to your questions and requests, and sending administrative information such as changes to our terms, conditions, and policies.
• Respond to your Requests to Exercise your Rights. We use your personal information to respond to your requests to exercise your privacy rights.
• Send You Promotional and Marketing Materials. We may use your personal information to send you newsletters and other promotional communications about YumiShare’s new offerings, features, and updates, where permitted by law.
• Analyze usage of our Services and Research. We use your personal information to analyze traffic, evaluate usage of the Services (including through PostHog), administer surveys, and improve our products and user experience.
• Enhance and Personalize our Services. We use your personal information to improve and enhance our Services, including through machine learning and artificial intelligence — including sending imported content and scanned images to OpenAI — to import recipes from links and images, organize content, and personalize features to your preferences.
• Maintain Security and Protect Rights. We use your personal information to help monitor and maintain the security of the Services, prevent and detect fraud, unauthorized activities, and other misuse of the Services.
• Satisfy Our Legal Obligations. We use your personal information to comply with applicable legal and regulatory obligations and respond to legally valid requests from law enforcement authorities.
• Carry Out Sales and Business Transactions. We may use your personal information in connection with the evaluation, negotiation, and/or completion of a business transaction (e.g., a merger, acquisition, or sale of assets).

How We Disclose Personal Information

We disclose personal information to the categories of recipients described below:

• Our Service Providers. We may disclose your personal information to third parties that provide business, professional, or technical support services to us, including IT and website hosting, payment processing, customer support, data storage, data analytics, and consulting services. Our key service providers include Supabase (database, account, and authentication), RevenueCat (subscription management), OpenAI (AI processing of imported content and scanned images), and PostHog (usage data and diagnostics), each as described above.
• Our Analytics Providers. We may disclose device and usage information to parties that assist us in performing analytics and measuring the effectiveness of the Services, including PostHog.
• Our Marketing and Advertising Partners. We may disclose device and usage information to marketing and advertising partners, where applicable and permitted by law.
• Relevant Third Parties in Connection with Business Transactions. If we are acquired by, merged with, or invest in another company, or if any of our assets are transferred, we may disclose or transfer your personal information in accordance with applicable laws.
• Law Enforcement and Regulatory Authorities. We may disclose your personal information to comply with applicable legal obligations and respond to legally valid requests from law enforcement authorities.
• Other Parties. We may disclose your personal information at your direction, with your consent, or as necessary to comply with applicable law, protect the Services and others, prevent fraud, or enforce our Terms of Service.

Managing your Marketing and Cookie Preferences

Marketing Communications

We may send you periodic marketing and promotional emails, and we will obtain your consent to do so where required by law. If you no longer wish to receive marketing communications from us, you may unsubscribe by following the “unsubscribe” instructions included in those communications or contact us at privacy@yumishare.com.

Cookie Preferences

You can manage cookie preferences through your browser settings. If you use more than one browser or device, you will need to set your preferences on each browser and device.

International Transfers of Personal Information

YumiShare may use service providers in the United States and throughout the world. As a result, your personal information may be transferred to countries with data protection and privacy laws that differ from those in your country of residence. When we transfer your personal information outside of your country of residence, we do so in accordance with applicable law and take appropriate steps to ensure your information is protected.

User-Generated Content

You may upload recipes, photos, notes, and other content through the Services. Content you store in your private account is accessible only to you unless you choose to share it. For more information about how user content is used, see our Terms of Service.

How We Protect Your Information

We maintain reasonable technical, organizational, and administrative safeguards designed to protect the personal information under our control from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no information security measures can guarantee security.

How We Retain Your Information

We will retain your personal information as long as necessary to fulfill the purposes outlined in this Policy (including to satisfy our legal or reporting requirements), unless a longer retention period is required or allowed under law. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we use the personal information; whether we can achieve the purposes through other means; and the applicable legal requirements.

If we de-identify information, we will maintain and use the information in de-identified form and not attempt to re-identify the information except as required or permitted by law.

Deleting Your Account

You may delete your account at any time from within the YumiShare app (Settings → Account → Delete Account) or by contacting us at privacy@yumishare.com.

When you delete your account, we will delete or anonymize your personal information and app content stored in our systems (including data held on Supabase), subject to applicable legal retention requirements. Deletion is generally completed within 30 days. Some information may remain with third parties as described in this Policy — for example, Apple retains purchase records, and RevenueCat may retain subscription history as required for billing compliance.

Contact Us

If you have any questions or concerns regarding this Policy or our privacy practices, you may contact us at privacy@yumishare.com.

Your Privacy Rights

Depending on where you live, the laws of your country, state, or province may provide certain privacy rights over how your personal information is collected, stored, used, and shared, including:

• Right to Access and Data Portability. The right to confirm whether we are processing your personal information and to access or obtain a copy of your personal information in a portable format.
• Right to Deletion. The right to request that we delete your personal information, subject to certain exceptions prescribed by applicable law.
• Right to Correction. The right to request that we correct inaccuracies in your personal information.
• Right to limit or opt out of certain types of processing. This may include the “sale” or “sharing” of personal information for targeted advertising purposes, where applicable under local law.
• Right against discrimination. We will not discriminate against you if you decide to exercise your legal rights.

How do I exercise my rights?

You can exercise your privacy rights by submitting your request to privacy@yumishare.com. In your communication, please state the request you would like to make and the rights you wish to exercise.

Where legally permitted, you may submit requests through an authorized agent at privacy@yumishare.com. To process these requests, we will need to verify the identity of the agent and that you have authorized them to act on your behalf.

Additional Information for Certain Jurisdictions

Residents of certain jurisdictions have additional rights under applicable laws, including residents of certain states within the United States (e.g., California), the European Economic Area (EEA), Switzerland, the United Kingdom (UK), and Canada.

United States — California

The California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act, provides California residents with certain rights regarding the collection, use, and sharing of “Personal Information.” While YumiShare does not expressly “sell” information to others, certain uses of cookies or analytics tools on our website may constitute “sales” or “sharing” of personal information for “targeted advertising” purposes under applicable privacy laws.

California residents may submit requests to know, delete, correct, or opt out of sale/sharing by contacting privacy@yumishare.com.

European Economic Area (EEA), Switzerland, and United Kingdom (UK) Residents

If you reside in the EEA and are under 18 years of age, you should not use our Services. If we become aware that an individual under 18 years of age may have provided us with personal information, we will investigate and, if applicable, take steps to remove and delete the data and delete that individual’s account.

For the purposes of applicable data protection laws, YumiShare is the controller of the personal information you provide us.

You have the right to:

• Request access to your personal information;
• Request correction or rectification of inaccurate personal information;
• Request to erase or delete your personal information, subject to legal exceptions;
• Request to limit or object to processing of your personal information in certain circumstances;
• Request to transfer your data in a portable format, where applicable;
• Object to marketing at any time; and
• Withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Please contact us at privacy@yumishare.com if you wish to exercise any of your rights. If you consider that the processing of your personal information violates applicable data protection laws, you also have the right to lodge a complaint with your local data protection regulator.

Lawful Bases for Processing Personal Information

Canada

Unless otherwise allowed by the laws applicable in your province or territory of residence, we will only collect, use, or communicate your personal information with your consent. You have the right to access the personal information we hold about you and correct or amend your information as appropriate. To exercise your rights, please submit your request to privacy@yumishare.com.