Privacy Policy
Effective October 4, 2026
The short version
- We collect what Yummie needs to work: your account details, the meal photos you take, what our AI reads from them, the places you tag, and the body details you choose to enter.
- Meal photos are sent to an AI provider to recognize the food. That is how Yummie works.
- We don't sell your data, we don't show ads, and we don't track you across other apps.
- Your data is stored on servers in Germany. Our team may access it from the United States and China.
- You can ask us to see, correct, export or delete your data at any time by writing to privacy@yummie.app.
1. Who we are
Yummie is provided by Yummie LLC, a Wyoming limited liability company (“Yummie”, “we”, “us”). We are the data controller for the personal data described in this policy.
Yummie LLC30 N Gould St Ste N
Sheridan, WY 82801
United States
privacy@yummie.app
This policy covers the Yummie mobile app and the yummie.app website (together, the “Service”).
2. What we collect
Information you give us
- Account details: your name, email address and password. We store passwords only as a secure hash, never in readable form. If you choose to, you can also add a handle.
- Your buddy: the name and colors you pick for your creature.
- Body and goal details (optional): height, weight, sex and daily energy goal. We use them to suggest a daily energy target.
- Meals: the photos you take or pick from your gallery, dish names, meal type, date, portion size, ingredients you edit, ratings and personal notes.
- Places: the restaurants and places you tag your meals with, the tags you create, and your notes about them. If you add a new place to Yummie, its name, category, address and map location become part of Yummie’s shared place directory and may be shown to other users. Your name is not attached to it.
- Messages to us: anything you send us by email.
Information created when you use Yummie
- AI meal analysis: for each photo, our AI estimates the dish name, ingredients and weights, calories and nutrients, plate balance, flavors and likely cuisines. From these we build your nutritional balance, “Food DNA”, food collection and streak.
- Login sessions: when you sign in we record the IP address and device/browser type of that session to keep your account secure. Sessions expire after 30 days of inactivity and are then deleted.
Location
If you allow location access, the app uses your device’s location to show restaurants near you while you log a meal or add a place, and to center maps on where you are. We use your coordinates to answer that request and don’t keep a history of where you have been. One exception: if you are in an area Yummie doesn’t support yet, we record those coordinates so we can decide where to expand next. You can turn location off at any time in your device settings. Yummie still works, but you will have to find places yourself.
Camera and photos
We use the camera and your photo library only when you take or choose a meal photo. If you allow it, Yummie also saves the full photo you took to your device’s gallery. That copy stays on your device.
Usage analytics
We use PostHog, hosted in the EU, to understand how the app is used. For example, which screens are opened, how long logging a meal takes, and which features people tap. These events are linked to a random identifier for your app installation, not to your name or email. They include basic device information (model, operating system, app version, language) and an approximate location that PostHog derives from your IP address. We don’t record your screen and we don’t send dish names or photos to analytics.
3. How we use your information
- To run the Service: create your account, recognize your meals, feed your buddy, and show your energy, balance, Food DNA, places and history.
- To find nearby places and keep the place directory accurate.
- To keep Yummie secure and prevent abuse.
- To understand what works and improve the app.
- To send you account emails, such as a welcome message and password reset links, and to tell you about important changes to the Service. We don’t send marketing emails.
- To comply with the law.
We don’t sell your personal data, we don’t share it for advertising, and we don’t use it to make decisions about you that have legal or similarly significant effects.
4. Legal bases (EU, UK and similar laws)
- Contract: to provide the Service you signed up for.
- Explicit consent: your meal log and body details can reveal information about your health. We process them only with the explicit consent you give when you create your account. You can withdraw that consent at any time by deleting your account or writing to us. Withdrawal doesn’t affect processing that already took place.
- Legitimate interests: security, preventing abuse, and pseudonymous usage analytics to improve the app.
- Legal obligation: where the law requires us to keep or disclose information.
5. Who we share it with
We share personal data only with service providers that help us run Yummie, and only as much as they need:
| Provider | What for | What they receive | Where |
|---|---|---|---|
| netcup GmbH | Server hosting | All data stored by the Service | Germany (EU) |
| OpenRouter, Inc. | Routes meal photos to an AI model | Meal photos and dish names you edit | United States |
| Google (Gemini models, via OpenRouter) | Recognizes food in photos | Meal photos and dish names you edit | United States and other countries |
| PostHog, Inc. | Usage analytics | Pseudonymous usage events and device information | EU |
| SMTP2GO | Sends account emails | Your name, email address and the content of the email | United States |
| OpenFreeMap | Map tiles | Your IP address and the map area you view | Not specified by the provider |
Photos and edits sent for analysis don’t include your name or email. We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of our business, in which case this policy will continue to apply to your data.
6. International transfers
Your data is stored in Germany. Some providers above are based in the United States. Yummie is a US company and our team may access data from the United States and China. When personal data from the EU, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, where the provider participates in it. If you are in mainland China, using Yummie means your data is transferred to and stored outside China, and you consent to this when you create your account.
7. How long we keep it
- Account, meals, photos and places: for as long as you have an account. When you delete your account, we delete your personal data within 30 days, including from any backups.
- Places you added to the shared directory: stay in the directory after your account is deleted, with no link to you.
- Login sessions: deleted when they expire.
- Analytics events: kept in pseudonymous form for up to 24 months.
- We may keep some information longer if the law requires it.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct data that is wrong;
- delete your data and your account;
- receive your data in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time;
- not be treated differently for exercising these rights.
You can change most of your profile directly in the app’s Settings. For anything else, including deleting your account, email privacy@yummie.app from the address linked to your account. We reply within 30 days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.
9. Security
We protect your data with encrypted connections (HTTPS), hashed passwords, and access limited to the people who need it to run Yummie. No system is perfectly secure, but if a breach affects your data we will tell you and the authorities as the law requires.
10. Children
Yummie is for people aged 16 and over. We don’t knowingly collect data from anyone younger. If you believe a child has given us personal data, write to us and we will delete it.
11. Not medical advice
Calories, nutrients and other values in Yummie are AI estimates and can be wrong. Yummie isn’t a medical device and doesn’t give medical or dietary advice. See our Terms of Use.
12. Our website
The yummie.app website doesn’t use cookies or analytics. It loads its font from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google.
13. Changes to this policy
We may update this policy as Yummie changes. We will post the new version here with a new effective date, and tell you in the app or by email when a change is significant.
14. Contact
Questions or requests about your privacy: privacy@yummie.app, or write to Yummie LLC at the address above.