Your data,in plain words

Who we are

Yumpot is made and run by Shamil Musaev, based in Sweden. In the words of data protection law, we are the controller of the personal data described here. You can reach us at dwhytestudio@gmail.com.

What stays on your phone

The app keeps the following on your device. We do not store it on our servers; the next section lists the parts that are sent to us for a moment so that the app can do its job.

• the first name you may give at the start, used only to greet you;
• your answers to the setup questions: how many people you cook for, which days, how long dinner may take, your kitchen equipment, your diet, your allergies, the foods you never eat, what you like and your budget;
• your weekly menus and which dinners you cooked;
• your shopping list and what you ticked off;
• your answers to "would you cook it again", your own notes on recipes and the chests you opened;
• your settings, such as the language.

Deleting the app deletes all of it. If you back up your iPhone with iCloud or a computer, Apple may include this data in that backup under its own terms.

What is sent to our server

When a week is planned

To choose your dinners the app sends our server:

• the days you cook, the number of people, the longest time a dinner may take, the kinds of food you like and your budget setting;
• a list of recipe numbers the app has already found suitable for you. Your diet and allergies are applied on the phone, before anything is sent, so the list itself does not name them;
• for those recipes, whether you said you would cook them again, and which recipes were on last week's menu.

When you ask the kitchen helper

To answer you the app sends our server:

• the recipe and the step you are on;
• the text of your question and the last few questions and answers of the same conversation;
• the language of the app;
• your diet, your allergies and the foods you never eat, so that the helper does not suggest them.

The first question you type yourself is sent only after you agree to this in the app. The ready-made answers offered at each step are part of the app and are not sent anywhere.

Please do not type names, addresses or other personal details into a question. The helper only needs to know about the cooking.

Technical data

Like every server on the internet, ours sees the IP address a request comes from. We use it for one thing: to stop a single address from sending too many requests. This count is kept in the server's working memory for about ten minutes and is not written to a database. Our hosting provider keeps standard access logs (time, address, the page requested) for a limited time, normally up to 30 days.

None of these requests contains your name, an account, an advertising ID or an ID of your device.

The AI behind it

The weekly menu and the helper's answers are produced by an AI model. Our server passes the request described above to Google Cloud (the Gemini models on Vertex AI), which processes it on our behalf and returns the answer. Under Google Cloud's terms this data is not used to train Google's models.

An answer to a question may be kept in our server's memory for up to 12 hours, so that the same question about the same step can be answered at once. It is stored without anything that points to the person who asked.

If we move to another AI provider, we will name it here before the change.

Subscriptions

Payments are handled by Apple through your Apple ID. We never see your card or your billing details. To know whether your subscription is active we use RevenueCat, a service that receives from the app a random identifier created for your installation, the record of your purchases from Apple, and basic technical details such as the version of the app and of iOS and the country of your App Store. RevenueCat works on our behalf and may process this data in the United States. We also use this purchase data, without your name, to count how many people start a trial, subscribe or cancel.

What we never do

• We do not show ads and do not share data with advertisers.
• We do not record what you do inside the app: the screens you open, the recipes you cook and your taps stay unknown to us. The only statistics we keep are the subscription numbers described above.
• We do not follow you across other apps or websites.
• We do not sell or rent personal data.
• The app does not ask for your location, contacts, photos, camera or microphone.

Why we may use it

Data protection law asks us to say on what ground we process each kind of data:

• To give you the service you asked for (performance of a contract): planning your week, answering your questions, checking your subscription.
• Your consent, for the diet, allergies and foods you choose to tell the app about, which can say something about your health. You give them so that the app keeps such dishes away from you, and you can change or remove them at any time in the app's settings.
• Our legitimate interest in keeping the service safe and working: limiting the number of requests and keeping short server logs.

How long it is kept

Where it travels

Our server runs in the European Union (Finland). The AI models of Google Cloud and the systems of RevenueCat and Apple may process data in other countries, including the United States. When personal data leaves the European Economic Area, it is protected by the safeguards the law provides, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct or delete it, object to its use or ask us to limit it, and withdraw a consent you gave. Because there is no account and almost everything lives on your phone, the fastest way to erase your data is in the app itself: change your answers in the settings, or delete the app.

For anything else write to dwhytestudio@gmail.com. We answer within one month. If you live in the European Union or the United Kingdom you may also complain to your data protection authority; in Sweden this is Integritetsskyddsmyndigheten (IMY). People in California and other US states have comparable rights to know, delete and correct, and we do not sell or share personal information as those laws define it.

Children

Yumpot is a cooking app for adults and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to dwhytestudio@gmail.com and we will delete it.

This website

This website sets no cookies. To see how many people visit it we count page views with Vercel Web Analytics: it records the page opened, the site you came from, and the country, browser and type of device, and it does not identify you or follow you to other websites. The company that hosts the site keeps standard access logs, as described above. If you write to us by email, we keep your message and address for as long as it takes to help you.

Changes and contact

When the app changes what it does with data, we change this page first and put the new date at the top.

Questions about privacy: dwhytestudio@gmail.com. See also the terms of use and the support page.