Privacy Policy
Last updated: November 2026
This page explains which data Yumiam uses so you can plan your meals, save your recipes and share your grocery lists. Yumiam works without a personal account: we ask for neither a name nor an email address.
Data we use
Yumiam stores your recipes, meal plans, grocery lists, preferences and household information, all of which the service needs. A device-specific session identifier lets you find your household again without creating an account. A device identifier is kept in secure storage so that one device cannot consume several trial periods. We apply data minimisation: nothing beyond what the service needs is collected.
Photos, recipes and artificial intelligence
To import a recipe from a link, your device opens the page in the background, like a browser: the site receives your IP address and may store cookies on the device. For a recipe imported from a link, Yumiam sends its title, serving count and extracted ingredient lines to OpenRouter. OpenRouter forwards them to MiniMax M3 hosted by CoreWeave to structure the ingredients. If the page does not describe its recipe in a structured form, Yumiam sends the visible text of the page through OpenRouter to OpenAI GPT-6 Luna at Microsoft Azure Europe to read the recipe, with Gemini 3.1 Flash Lite at Google Vertex Europe as a fallback. For a photo or text import, the recognized text is sent through OpenRouter to OpenAI GPT-6 Luna at Microsoft Azure Europe to read the recipe, with Gemini 3.1 Flash Lite at Google Vertex Europe as a fallback. MiniMax M3 at CoreWeave then structures the ingredients. Photos are read on your device: these providers do not receive the images. To classify a grocery item, its name is sent to OpenRouter and then to TypeSafe, or to Microsoft Azure for the OpenAI GPT-6 Luna model if the first attempt fails. To suggest recipe ideas, each recipe in your catalogue receives labels, such as its season, type of dish or main ingredient: its title, ingredient lines and preparation and cooking times are sent to OpenRouter, then to Gemini 3.1 Flash Lite at Google Vertex Europe, with OpenAI GPT-6 Luna at Microsoft Azure Europe as a fallback. Free text, item names, and recipe titles and ingredients may contain personal data. These providers may process it outside the European Union. We cannot guarantee a processing region or a common retention period for their technical logs.
Subscription and payment
The Yumiam Plus subscription is sold and charged by the App Store or Google Play: we never see your payment details. To know whether your household has an active subscription we use the provider RevenueCat, which receives a technical household identifier and the subscription state (product, expiry, renewal). No recipe or meal-plan data is sent to it. The subscription events it sends us (purchase, renewal, expiry) are kept for each household, without any amount or payment details, and matched with usage measurement through the technical household identifier to understand which uses lead to a subscription. Managing and cancelling the subscription happens in your store settings.
Hosting and security
Recipes, households and grocery lists are hosted by Convex. The production deployment is located in Ireland. Saved images are stored by Cloudflare R2. Depending on the configuration of these services and their subprocessors, processing may take place outside the European Union. Session secrets are kept in your device's secure storage.
Measurement and diagnostics
Yumiam uses usage measurement and error diagnostic tools. Usage measurement records the key steps of using the app, tied to a random technical identifier specific to the installation and to a technical household identifier. It is matched with the household's subscription state to understand which uses lead to a subscription. It is used only in aggregate, never to make a decision about a member. Error diagnostics receive crash reports to fix technical problems. Each error report is tied to the technical identifiers the app assigns to you and to your household, with no name or email address. When a recipe import from a link fails, they also receive the page's public address, stripped of its tracking and sign-in parameters. This address stays in error diagnostics, never in usage measurement, and is kept there for a limited period set by the provider. Neither receives the content of your recipes, meal plans, grocery lists or photos. Usage measurement data is hosted in the European Union and kept for 7 years at most. On the website, a click towards a store is counted without cookies or any stored identifier. This data is used only to maintain and improve the app: no advertising tracking, no resale, no cross-referencing with other apps.
Your rights
Processing of the data the service needs is based on the performance of the contract for the service you use; usage measurement and error diagnostics are based on our legitimate interest in maintaining and improving the app. You can delete your account at any time from Settings. Everything you created in Yumiam is then deleted, immediately and permanently. If your household has other members, they keep its recipes, meal plans and groceries. A Yumiam Plus subscription is cancelled separately, in the App Store or Google Play. For access to, correction of or export of your data, write to support@yumiam.app. We answer within the time limits set by applicable regulation.
Contact
For any question about this policy: support@yumiam.app.