Privacy Policy

1. Introduction

Welcome to YumCrush ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application and related services (collectively, the "App").

By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect the following types of information:

a. Personal Information

• Name and/or display name
• Email address
• Profile photo or avatar

b. Authentication Data

• Login credentials (email and password, securely stored and hashed)
• Sign-in data from Google or Apple (where applicable)

c. Content You Provide

• Photos of your fridge or ingredients (to recognize products and manage your inventory)
• Chat messages with AI
• Messages shared within family groups (for shared inventory and shopping lists)

d. Technical Data

Collected automatically by our services and third-party tools:

• Device information (model, OS, unique identifiers)
• IP address
• App usage logs and crash analytics

e. Subscription and Payment Data

• Processed securely by Apple App Store and Google Play Billing.
• We do not store or process payment card information directly.

3. How We Use Your Information

We use your information to:

• Provide and maintain the App's core functionality
• Generate AI-based recipe suggestions based on your preferences, allergies, and ingredients
• Enable inventory management and family sharing
• Process your authentication and maintain account security
• Manage subscriptions and purchases
• Analyze app performance and improve user experience
• Communicate with you for support or updates

4. AI and Data Processing

YumCrush uses OpenAI's API to provide recipe generation and conversational features. Messages sent to the AI may be transmitted to OpenAI's servers for processing and returned as a response.

We do not use your data to train our own models, and we rely on OpenAI's privacy and security standards for handling AI interactions.

For details, see OpenAI's Privacy Policy.

5. Data Storage and Third-Party Services

Your data may be stored or processed using the following services:

• Supabase (user accounts, storage, real-time data)
• Firebase (analytics and crash reporting)
• Google Cloud (app hosting and storage)
• Upstash (cache and queue infrastructure)
• Resend (transactional email delivery)
• OpenAI (AI chat and content generation)

Each service operates under its own privacy and security policies.

6. Data Sharing

We do not sell your personal information. We may share limited data with third-party services only to:

• Provide essential features (authentication, hosting, analytics)
• Comply with legal obligations (if required by law or authorities)
• Protect against fraud or misuse of the service

7. Data Retention

We retain your personal information only for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes

You can delete your account at any time, and associated data will be permanently removed from our systems within a reasonable period.

8. Your Rights

Depending on your location, you may have rights under applicable privacy laws (e.g., GDPR, CCPA) to:

• Access your personal data
• Request correction or deletion
• Withdraw consent
• Export your data (data portability)

Requests can be sent to [email protected].

9. Children's Privacy

YumCrush is not specifically targeted at children, but it is suitable for all age groups. We do not knowingly collect personal information from anyone under 13 years old.

If you believe that a child has provided us with personal data, please contact us to delete it.

10. Data Security

We use industry-standard encryption and security measures to protect your data, including:

• Encrypted connections (HTTPS)
• Secure password storage (hashed & salted)
• Access controls on all databases and storage systems

Despite these measures, no system is 100% secure, and you use the App at your own risk.

11. International Data Transfers

Your data may be processed and stored in multiple countries, including outside your home country. We ensure that all transfers comply with applicable data protection regulations (such as GDPR).

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new version on our website or within the app. The "Effective Date" at the top will reflect the most recent update.