Privacy Policy

1Who is responsible

Yumqy (the app and yumqy.com) is run by Igor Szyszka, Poland, who is the controller of your personal data ("we", "us"). Questions and requests: hello@yumqy.com.

2What stays on your phone only

Some things never reach our servers, and we cannot see them:

• your allergy and diet profile (health data under the GDPR) — it is stored encrypted on your phone and used there to show "may contain" hints and to filter dishes;
• the photos you take of dishes, the places and notes in your passport;
• your order on the waiter card and its phrases (they are part of the app).

Deleting the app deletes them.

3What we process, and why

An app identifier. When you open Yumqy it creates an anonymous account: a random identifier, with no name, email or phone number. It lets us keep your collection and apply daily limits. Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR).

Your email, only if you save your passport. Saving the passport (or opening it on another phone) uses your email address and a one-time 6-digit code we send to it — no password. The email is kept with your account to sign you in and to recover your passport; we send no marketing. The code emails are delivered by Resend. Basis: Art. 6(1)(b).

Menu photos. A photo you scan is uploaded to our storage, read by an AI model (Claude by Anthropic) and deleted right after reading, whether the reading worked or not. What was read — dish names, descriptions, prices, sections and their translations — is kept as a menu in a shared cache, so the same menu opens at once for the next person; it contains no personal data. We keep a record of your scan (time, language, result, which menu) linked to your identifier, to show you your menus and apply limits. Before your first scan the app tells you this and asks you to agree. Basis: Art. 6(1)(b).

Approximate location, only if you allow it. If you have given Yumqy location access in your phone settings, a scan carries an area of about 1 km (never your exact position), so a menu someone already read nearby opens instantly. The app never asks for location during a scan. The area is also kept with the menu in the shared cache (without anything about you) and with the record of your scan, for as long as your account exists. Basis: your consent (Art. 6(1)(a)), which you can withdraw in the phone settings at any time.

Your collection. The dishes you save, try and react to ("worth coming back for", "it was good", "not for me") and your stamps are kept with your identifier, so they appear on your other screens and survive the app restarting. Basis: Art. 6(1)(b).

Dishes you add yourself. When you stamp a dish that isn't on our list, its name and country join the shared list of dishes — without anything about you — so the stamp counts. The photo, place and note of your stamp stay on your phone. Please don't put personal details in a dish's name. Basis: Art. 6(1)(b).

Reports. If you report a dish's picture, a translation or an allergen hint as wrong or inappropriate, we keep the report — the dish, the menu line, the reason you picked and your language, never any text of yours or your allergies — with your identifier, to check and fix it. Basis: our legitimate interest in accurate and appropriate content (Art. 6(1)(f)).

Your passport number and invitations. Every passport has a random six-character number. If you enter a friend's number, we record that link (as two identifiers) and when your first scan counted, so your friend receives a guest. Your friend sees only how many guests and on which days — never who. Basis: Art. 6(1)(b).

Shared menu links. When you share a menu, we create a random link that points to that menu and is stored with your identifier, to prevent abuse. Anyone with the link sees the menu and your passport number, nothing else — never your allergies or your order.

Usage and fair use. For each AI call we record its technical size and cost with your identifier, and when a limit stops a request we record that too, so the service stays fair and affordable. No menu text and no allergy data is part of these records. Basis: our legitimate interest in preventing abuse and controlling costs (Art. 6(1)(f)).

Usage statistics and crash reports. To see which parts of the app work and what breaks, the app sends anonymous events — for example "a scan finished", "the paywall was shown", which screen opened, the app version and language, and the technical details of a crash — to PostHog, hosted in the EU. They carry a random identifier of the app on your phone, not your account, email or location (nothing is located from your IP address), and never your allergies, diet, menu text, photos, places or notes. You can switch this off at any time in Passport and settings → Anonymous statistics. Basis: our legitimate interest in keeping the app working and making it better (Art. 6(1)(f)).

Dish photos. Pictures of dishes are generated by an AI model (Gemini by Google) from the dish's name and description only — nothing about you is sent. They are shared by everyone as illustrations.

Exchange rates. Our server fetches daily rates from open.er-api.com. Nothing about you is sent.

Subscriptions. Premium is bought through the App Store or Google Play; Apple or Google handle the payment, and we never see your card. To know whether your subscription is active we receive its status (product, dates, an anonymous purchase identifier) through RevenueCat, linked to your identifier. Basis: Art. 6(1)(b).

Reminders. The reminder before a free trial ends is a notification scheduled on your phone; no push service is involved.

The website. yumqy.com is hosted by Vercel, whose servers log technical data such as your IP address for security. Your country, as seen by the server, is used only to show prices in your currency and is not stored by us. The website uses no cookies and no analytics.

4Who helps us

We use these service providers, bound by data processing terms:

• Supabase — database, file storage and server functions, hosted in Frankfurt, Germany (EU);
• Anthropic — reading menu photos (USA);
• Google — generating dish pictures, without personal data (USA);
• Vercel — hosting yumqy.com;
• Apple and Google — app stores and payments;
• RevenueCat — subscription status (USA);
• PostHog — app usage statistics and crash reports, hosted in Frankfurt, Germany (EU);
• Resend — sending the sign-in codes (USA).

Where data goes outside the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses. We do not sell or rent personal data, and we do not use it for advertising.

5How long we keep it

• Menu photos: deleted right after reading, usually within seconds.
• Your identifier, email, collection, scan records, invitations and shared links: as long as your account exists, until you delete it.
• Reports of a picture, translation or hint: as long as your account exists, until you delete it.
• Sign-in code emails: Resend keeps a log of each one (address, subject, time) for 30 days.
• Usage and cost records: as long as needed for limits and accounting.
• Usage statistics and crash reports: up to 7 years — the period our analytics provider keeps them. They identify no one, and switching the statistics off stops new ones from being sent.
• Menus in the shared cache contain no personal data and may be kept indefinitely.

6Your rights

You can delete your account and its data yourself at any time in the app: Passport and settings → Delete account and data — it is gone from our servers at once (more at yumqy.com/delete). You can also ask for access to your data, a copy of it (portability), its correction or deletion, and you can restrict or object to processing and withdraw consent at any time. Write to hello@yumqy.com and include your passport number (YQ followed by six characters, shown in your passport) or the email you saved it with, so we can find your data. We answer within one month.

You may also complain to a data protection authority — in Poland the President of the Personal Data Protection Office (uodo.gov.pl) — or to the authority where you live.

7Children

Yumqy is not directed at children under 16, and we do not knowingly process their data.

8Security

Data travels encrypted (TLS). Each account can reach only its own data, enforced in the database itself; menu photos are deleted after reading; your allergy profile is stored encrypted on your phone. Only the operator has access to the systems.

9Changes

If this policy changes, we update the date above; important changes are announced in the app.