Privacy
Privacy Policy
GDPR Compliant
Overview
At YumAgain, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
We are committed to protecting your personal data and being transparent about our data practices.
Data Controller
The data controller responsible for your personal data is:
YumAgain
Germany
Email: privacy@yumagain.com
We have appointed a Data Protection Officer (DPO) who can be contacted at dpo@yumagain.com.
Data We Collect
We collect the following types of personal data:
| Data Type | Purpose |
|---|---|
| Email address | Account creation, authentication, communication |
| Name (optional) | Personalization of your experience |
| Profile picture (optional) | Account personalization |
| Recipes and content | Core service functionality |
| Nutrition and tracking data (meals, meal photos, voice/text input, weight, activity, water) | Food diary and insights; photo/voice/text analysis is performed via OpenAI (only when you use these input methods) |
| Usage data | Service improvement and analytics |
| Device information | Security and optimization |
| Payment information | Processing subscriptions through the Apple App Store or Google Play; we never receive payment details, only the subscription status |
Purpose of Processing
We process your data for the following purposes:
- Providing and maintaining our service
- Processing your transactions
- Sending service-related communications
- Improving and personalizing your experience
- Ensuring security and preventing fraud
- Complying with legal obligations
Legal Basis for Processing
We process your personal data based on:
- Contract performance: To provide our services to you
- Legitimate interests: To improve our services and ensure security
- Consent: For marketing communications (which you can withdraw anytime)
- Legal obligation: To comply with applicable laws
Third-Party Services
We share data with the following third-party services:
- Supabase: Database and authentication infrastructure (EU servers)
- Vercel: Website hosting and delivery
- Apple App Store / Google Play: Processing in-app purchases and subscriptions; payment data stays with the respective store
- OpenAI: AI features: recipe suggestions plus photo, voice and text recognition for meal tracking. Your inputs (e.g. meal photos, voice recordings or transcripts, food descriptions) are sent to OpenAI for analysis (optional, only when you use these features; not used for model training per OpenAI API terms)
- Runware: AI image generation: recipe and illustration images are created automatically with AI. Only the recipe title or an image description is sent to Runware, no personal data
Apple Health (HealthKit)
In the YumAgain app for iPhone you can optionally connect to Apple Health. YumAgain then writes the meals (calories, nutrients), drinks and manually entered weight you log into Apple Health and, on request, brings weight measurements, workouts as well as daily steps, active energy and resting energy from Apple Health into your tracking. The connection is voluntary: you pick the data types in the iOS dialog yourself and can revoke access at any time in the Health app under Sharing › Apps and Services.
We use health data from Apple Health solely to complement your own tracking – for example to adjust your calorie budget to your actual energy expenditure when you switch that on. We do not use it for advertising or marketing, do not analyse it for other purposes and neither share it with third parties nor sell it (App Store Review Guidelines 5.1.3). Data YumAgain writes into Apple Health lives in your Apple Health store on your device and is subject to Apple's privacy terms. Values received from Apple Health are stored in your account like the rest of your tracking data; delete them in YumAgain and they stay deleted there.
AI Features & Labeling
YumAgain uses generative AI. So you can recognize AI content, we label it in line with the transparency obligations of the EU AI Act (Art. 50 Regulation (EU) 2024/1689):
- Recipe and illustration images are created automatically with AI (Runware) and carry the visible EU “AI GENERATED” label in the app
- Recipe suggestions, generated recipes, and photo, voice and text analyses are produced with AI (OpenAI) and are recognizable as AI features (e.g. “Generate with AI”, sparkles icon, the “AI GENERATED” label, or an “AI estimate” note)
- AI-generated content can contain errors — please double-check ingredients and nutrition facts before relying on them
- YumAgain does not account for allergies or intolerances — if you rely on this, always check ingredient lists yourself
No automated decision-making with legal effect within the meaning of Art. 22 GDPR takes place.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services.
After account deletion:
• Your personal data is deleted within 30 days
• Recipes you've shared publicly may be anonymized and retained
• Backup data is purged within 90 days
• Legal records may be retained as required by law
Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Correct inaccurate personal data
- Right to erasure: Request deletion of your personal data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a portable format
- Right to object: Object to certain types of processing
- Right to withdraw consent: Withdraw consent at any time
Account Deletion
You can delete your account at any time from your Profile settings. Upon deletion:
- All your personal recipes will be permanently deleted
- Your personal information will be removed from our systems
- Any active subscriptions will be cancelled
- This action cannot be undone
Contact Us
For privacy-related inquiries or to exercise your rights, contact us at:
privacy@yumagain.com
Data Protection Officer: dpo@yumagain.com