Welcome to SomeYum
SomeYum ("we," "our," or "us") helps you decide what to eat by swiping through AI-generated dish ideas and recipes. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It covers the SomeYum mobile app and the SomeYum web app.
We've written this to describe what the product actually does - not a generic template.
1. Information We Collect
1.1 No account is required
The mobile app does not require you to create an account. We do not ask for your name, email, or a password to use it. Instead, the app generates a random, anonymous guest identifier on your device to save your preferences and sync them.
The web app only asks for an email address if you start or restore a paid subscription (so we can link the subscription to you). We do not use it for marketing unless you separately opt in.
1.2 Information you provide
- Food preferences: your swipes (yes/no), saved recipes, dietary restrictions / avoid-lists, audience mode, and filters
- Taste signals: the choices you make during the onboarding "taste test" and over time
- Feedback: anything you send us through the in-app feedback form
1.3 Information collected automatically
- Usage data: how you interact with the app (e.g. swipes, recipe views, spins) to power and improve recommendations
- Device & app data: device type, operating system, app version, language
- Diagnostics: crash reports and error logs to keep the app working
- Subscription status: whether you have an active CravePass subscription (not your payment-card details - see §4)
- Push token: if you enable notifications, a push notification token so we can send reminders
- Install source (mobile app only): if you installed the app after tapping one of our ads, we receive which campaign brought you - on Android through the Google Play install referrer, on iOS through Apple's SKAdNetwork. To match an install to the ad that led to it, our attribution provider may also compare general signals available at that moment, such as your IP address, device type, and operating-system version
We do not collect advertising identifiers - Apple's IDFA and Android's Advertising ID are switched off in our builds, the app never asks for tracking permission, and it shows no advertising. The install signals above are used only to attribute an install to a campaign - never to build an advertising profile of you, and never to target ads at you.
1.4 Location - only if you ask for prices near you
In Ukraine, the shopping list can price itself at nearby supermarkets. This is the only feature that uses location, and it never runs on its own:
- We ask only at the moment you tap to compare prices, never when you open the app. The screen explains what it is for before the system prompt appears.
- If you allow it, your device's coordinates are sent to our server once, to find which branches are within range. We do not store them. What we keep is the city and which branch of each chain to price at, saved on your device so you are not asked again.
- If you decline, nothing is sent to your operating system or to us. You pick a city from a list instead, and you can change or clear it at any time.
- Outside Ukraine the feature does not appear and location is never requested.
2. How We Use Your Information
- Generate personalized dish and recipe recommendations (our AI uses your preferences and taste signals - see §5)
- Save your recipes, dietary settings, and history across sessions
- Operate subscriptions and unlock premium features
- Send reminders/notifications if you opt in
- Write out a recipe from a cooking video you choose to import (see §5)
- Show what your shopping list would cost at shops near you, if you ask (Ukraine only - see §1.4)
- Measure which marketing channel brought you to the app, so we know where to spend (mobile app only)
- Diagnose crashes and improve features, performance, and reliability
- Provide support and respond to feedback
- Comply with legal obligations
3. Legal Bases (EU/UK – GDPR)
Where GDPR applies, we rely on:
- Performance of a contract - to provide the app and your subscription
- Legitimate interests - to keep the app secure, fix bugs, and improve recommendations
- Consent - for push notifications and (on the web) optional analytics; you can withdraw consent at any time
4. Payments
Subscriptions (CravePass) are processed by Apple (in-app purchases on iOS), Google (in-app purchases on Android), and Paddle (on the web). Both app-store purchases are managed through RevenueCat. Your payment-card details are handled by those providers - we never see or store your full card number. We receive only your subscription status and a transaction identifier.
5. AI-Generated Content
Recommendations and recipes are generated by Google's Gemini models through our secure server. To do this, we send the model relevant inputs such as your dietary preferences, taste signals, and the dish you tapped - not your identity, email, or payment data. Generated dish images may come from Google's Imagen or from stock providers (Unsplash, Pexels, Pixabay).
Photographs you choose to take. Some features work from a picture: scanning a restaurant menu or your fridge for dish suggestions, adding a recipe from a photo, and making a card from the dish you just cooked. When you use one of these, that photograph is sent to Gemini so it can be read or described, and the answer is returned to your phone. We do not store the photograph on our servers, and it is never attached to your name or email. These features only ever run when you choose to take or pick a picture.
Recipes you import from a video. If you paste or share a link to a public post on TikTok, Instagram, YouTube, X or Facebook, we read the video behind it so that the recipe can be written out for you. The link goes to our server, which asks a private worker of ours, running on Google Cloud Run in the EU, to fetch that post's video, caption, and creator name. The video is held only for as long as the reading takes, in temporary storage that is discarded straight afterwards - we keep no copy, and the app never plays or offers the video itself. The video's cover image is saved as the picture on your recipe, and the creator is credited on it. Because these posts are public and the reading does not depend on who asked for it, the recipe text we extract is cached against the video's address and reused if anyone imports the same video later. That cache holds the recipe only, never anything about you.
AI output can be wrong. See our Terms of Service for the recipe-safety disclaimer.
6. Who We Share Information With
We do not sell your personal information. We share data only with service providers ("sub-processors") that help us run the app, under contracts that limit their use of it:
| Provider | Purpose |
|---|---|
| Supabase | Database & backend hosting (your preferences, saved recipes, settings) |
| Google Firebase | App analytics and push notifications |
| Google (Gemini / Imagen) | AI recommendation, recipe, and image generation |
| Sentry | Crash and error diagnostics |
| RevenueCat / Apple / Google | App-store subscription management & billing (iOS and Android) |
| Paddle | Web subscription billing |
| Unsplash / Pexels / Pixabay | Stock food imagery |
| Google Cloud Run | Fetches the public post behind a link you choose to import - its video, caption, and creator name. The video is held only while it is read, then discarded |
| Cloudflare / DigitalOcean | Content delivery, security, and hosting |
| AppsFlyer | Mobile install attribution - which ad campaign led to an app install, and whether it led to first use. Mobile app only; receives your guest identifier, IP address, and device type, never your name, email, or payment data |
| Google Analytics | Cookieless website analytics (see our Cookie Policy) |
| Microsoft Clarity | Heatmaps & session recordings on our website and apps to improve the experience; records interactions (text masked); the web version also sets analytics cookies (see our Cookie Policy) |
We may also disclose information when required by law, to protect our rights or users, or in connection with a merger or acquisition. We may share anonymized, aggregated data that cannot identify you.
7. International Data Transfers
Our providers may process data outside your country (for example, in the United States or the EU). Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
8. Data Security
We use industry-standard measures including encryption in transit and at rest, restricted access, and reputable cloud infrastructure. No method of transmission or storage is 100% secure, but we work to protect your data.
9. Data Retention & Deletion
We keep your information while you use the app and as needed to provide the service or meet legal obligations.
Delete Profile. You can reset your profile at any time: open the app, go to the My Kitchen tab, open the Data section, tap Delete Profile, and confirm. This erases your taste profile, swipe history, dietary preferences and filters, and your audience-mode assignment, and returns you to onboarding.
This control does not remove your saved recipes, your CravePass subscription (if any), or your anonymous device identity. For full erasure, including your saved recipes and the underlying anonymous account, email us at [email protected] (see §12). Full-account deletion is currently a manual process; there is no self-serve full-account deletion yet.
10. Your Rights
Depending on where you live, you may have the right to access, correct, delete, export (portability), restrict, or object to our processing of your data, and to withdraw consent. EU/UK users have these rights under GDPR; California residents have rights under the CCPA/CPRA, including the right to know and delete and to opt out of "sale"/"sharing" (we do neither). To exercise any right, contact us (see §12).
11. Children's Privacy
SomeYum is not directed to children. We do not knowingly collect personal data from children under 16 (or the minimum age of digital consent in your country, which may be as low as 13). If you believe a child has provided us data, contact us and we will delete it.
12. Contact Us
For privacy questions or to exercise your rights:
- Email: [email protected]
- In-app: the Feedback option in My Kitchen
13. Changes to This Policy
We may update this policy as the app evolves. We'll change the "Last Updated" date above and, for material changes, notify you in the app. Continued use after an update means you accept the revised policy.
By using SomeYum, you acknowledge that you have read and understood this Privacy Policy.