Template. A lawyer needs to review this text before it is published. It is not legal advice.
Privacy policy
Template last updated: 8 October 2026.
- Marian Penguin Arts Studio SRL
- [ADDRESS — to be completed]
- CUI
- [CUI — to be completed]
- Contact
- [EMAIL — to be completed]
What we collect
Name, email, the groups you join, votes, preferences (diet, allergies, budget), fridge ingredients, and the language you pick. If you sign in with Google or Apple, we receive the identifier and email that provider shares. Fridge photos, when you take them, go to OpenAI only for recognition and are not kept by us.
Why we use it
To keep your account, show your group the votes, filter dishes, and send the invite link you ask for. We don’t sell the data.
Legal basis
Contract, for the account and the votes. Consent for analytics and advertising cookies, which you can refuse. Legitimate interest for keeping the service secure. A lawyer should confirm these bases before publication.
How long we keep it
While the account is open. After deletion we keep only what the law requires, then delete or anonymise the rest. Exact periods belong here: [PERIOD — to be completed].
Who helps us
Supabase holds the database. Vercel hosts the site. Apple, Google, RevenueCat, and Stripe process subscriptions when you buy Plus. Resend sends transactional email: welcome, invitations, and vote notifications. You can turn those notifications off in your profile. The production website uses Google Analytics 4, which sets cookies named `_ga` and `_ga_*` to count visits and page views, including when you move between pages without a full reload. If you turn optional analytics on, Vercel Analytics or a Meta Pixel may also receive a visit identifier. Free accounts may see ads from Google AdMob in the app and Google AdSense on the website. Yumie Plus removes every ad unit, and a Plus account never gets one. On the website, production pages include the AdSense loader so Google can verify the site. Consent starts denied and requests stay non-personalized until you accept analytics and ads. Ad units stay empty until then. In the app, ads load only after Google’s consent form when you are in the EU. Ads stay non-personalized unless you agree to personalized ads. On iPhone, the App Tracking Transparency prompt appears only if you ask for personalized ads. We do not sell your data. We update this list when a processor is added. Fridge photos, when you take them, go to OpenAI only for recognition and are not kept by us.
Your rights
You can ask for access, correction, deletion, restriction, portability, and to object. You can withdraw analytics or advertising consent without closing the account. You can complain to the ANSPDCP.
Deleting the account
In the app, Profile → Delete account. On the web, sign in and open the delete-account page linked from Support, or email [EMAIL — to be completed] with the subject “Delete my Yumie account”. We delete the account, the votes, the fridge, and the shopping list tied to you. Stores may keep their own purchase record.
Children
Yumie is not for children under 16. If we learn we have collected a child’s data, we delete it.
Fridge photos
When you photograph the fridge, the picture is sent to the vision provider (OpenAI, when configured) so it can name the ingredients. We do not keep it: we process it in memory and discard it. We save only the ingredients you confirm into your fridge list. There is a limit of 20 scans a day.