Welcome to SomeYum

SomeYum ("we," "our," or "us") helps you decide what to eat by swiping through AI-generated dish ideas and recipes. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It covers the SomeYum mobile app and the SomeYum web app.

We've written this to describe what the product actually does - not a generic template.

1. Information We Collect

1.1 No account is required

The mobile app does not require you to create an account. We do not ask for your name, email, or a password to use it. Instead, the app generates a random, anonymous guest identifier on your device to save your preferences and sync them.

The web app only asks for an email address if you start or restore a paid subscription (so we can link the subscription to you). We do not use it for marketing unless you separately opt in.

1.2 Information you provide

  • Food preferences: your swipes (yes/no), saved recipes, dietary restrictions / avoid-lists, audience mode, and filters
  • Taste signals: the choices you make during the onboarding "taste test" and over time
  • Feedback: anything you send us through the in-app feedback form

1.3 Information collected automatically

  • Usage data: how you interact with the app (e.g. swipes, recipe views, spins) to power and improve recommendations
  • Device & app data: device type, operating system, app version, language
  • Diagnostics: crash reports and error logs to keep the app working
  • Subscription status: whether you have an active CravePass subscription (not your payment-card details - see §4)
  • Push token: if you enable notifications, a push notification token so we can send reminders

We do not collect your precise or city-level location, and we do not use device fingerprinting.

2. How We Use Your Information

  • Generate personalized dish and recipe recommendations (our AI uses your preferences and taste signals - see §5)
  • Save your recipes, dietary settings, and history across sessions
  • Operate subscriptions and unlock premium features
  • Send reminders/notifications if you opt in
  • Diagnose crashes and improve features, performance, and reliability
  • Provide support and respond to feedback
  • Comply with legal obligations

3. Legal Bases (EU/UK – GDPR)

Where GDPR applies, we rely on:

  • Performance of a contract - to provide the app and your subscription
  • Legitimate interests - to keep the app secure, fix bugs, and improve recommendations
  • Consent - for push notifications and (on the web) optional analytics; you can withdraw consent at any time

4. Payments

Subscriptions (CravePass) are processed by Apple (in-app purchases on iOS, via RevenueCat) and Dodo Payments (on the web). Your payment-card details are handled by those providers - we never see or store your full card number. We receive only your subscription status and a transaction identifier.

5. AI-Generated Content

Recommendations and recipes are generated by Google's Gemini models through our secure server. To do this, we send the model relevant inputs such as your dietary preferences, taste signals, and the dish you tapped - not your identity, email, or payment data. Generated dish images may come from Google's Imagen or from stock providers (Unsplash, Pexels, Pixabay).

AI output can be wrong. See our Terms of Service for the recipe-safety disclaimer.

6. Who We Share Information With

We do not sell your personal information. We share data only with service providers ("sub-processors") that help us run the app, under contracts that limit their use of it:

Provider Purpose
Supabase Database & backend hosting (your preferences, saved recipes, settings)
Google Firebase App analytics and push notifications
Google (Gemini / Imagen) AI recommendation, recipe, and image generation
Sentry Crash and error diagnostics
RevenueCat / Apple iOS subscription management & billing
Dodo Payments Web subscription billing
Unsplash / Pexels / Pixabay Stock food imagery
Cloudflare / DigitalOcean Content delivery, security, and hosting
Google Analytics Cookieless website analytics (see our Cookie Policy)

We may also disclose information when required by law, to protect our rights or users, or in connection with a merger or acquisition. We may share anonymized, aggregated data that cannot identify you.

7. International Data Transfers

Our providers may process data outside your country (for example, in the United States or the EU). Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

8. Data Security

We use industry-standard measures including encryption in transit and at rest, restricted access, and reputable cloud infrastructure. No method of transmission or storage is 100% secure, but we work to protect your data.

9. Data Retention & Deletion

We keep your information while you use the app and as needed to provide the service or meet legal obligations. You can erase your data at any time using "Start Fresh" in the app, which clears your saved recipes, preferences, and history. To request deletion of subscription/email records, contact us (see §12).

10. Your Rights

Depending on where you live, you may have the right to access, correct, delete, export (portability), restrict, or object to our processing of your data, and to withdraw consent. EU/UK users have these rights under GDPR; California residents have rights under the CCPA/CPRA, including the right to know and delete and to opt out of "sale"/"sharing" (we do neither). To exercise any right, contact us (see §12).

11. Children's Privacy

SomeYum is not directed to children. We do not knowingly collect personal data from children under 16 (or the minimum age of digital consent in your country, which may be as low as 13). If you believe a child has provided us data, contact us and we will delete it.

12. Contact Us

For privacy questions or to exercise your rights:

13. Changes to This Policy

We may update this policy as the app evolves. We'll change the "Last Updated" date above and, for material changes, notify you in the app. Continued use after an update means you accept the revised policy.

By using SomeYum, you acknowledge that you have read and understood this Privacy Policy.