Privacy policy
Your data,
your rules.
What we collect, why, for how long, and how you stay in control.
- We collect the minimum. To sign you up for the beta or the iPhone waitlist: your email and the phone you are signing up for (Android or iPhone). They are only used to run the beta and let you know.
- Your meals, meal photos, weight and goals are health data. We only process them with your explicit consent, asked for separately and which you can withdraw at any time.
- We don't sell your data. Your health data is never used for advertising or commercial profiling, and the app contains no advertising tools during the beta.
- YUUUM is an organization tool, not a medical device. Calories, goals and estimates are indicative and do not replace the advice of a healthcare professional.
- You can download or delete everything, from the app or by email at hello@yuuum.app.
Who is responsible for your data?
YUUUM is a service published by its founders. YUUUM, the company, is being registered: until then, the founders act as data controllers within the meaning of the GDPR. Once registered, the company will take over this role and this policy will be updated.
There is no Data Protection Officer (DPO). For any question or request: hello@yuuum.app.
Who is this policy for?
Anyone who visits the YUUUM presentation site, signs up for the beta or uses the app.
YUUUM is for people aged 18 and over. If we learn that an account belongs to a minor, we delete it.
The data we collect
| Category | What it includes |
|---|---|
| Beta sign-up or iPhone waitlist | Email, the phone system you are signing up for (Android or iPhone, depending on the form you fill in), date and proof of your consent. |
| Account | Email or Google account used to sign in, password (stored hashed, never readable), username, profile photo, bio. |
| Health and nutrition | Meals, calories and macronutrients, meal photos sent for analysis, weight, height, age, sex (if you provide them), goal (loss, maintenance, muscle gain), physical activity, challenges, and their use by Swing when the feature is active. |
| Content and social activity | Recipes, photos and videos, comments, private messages, collections, likes, follows, blocked or muted accounts, reports. |
| Technical data | Device model, Android and app version, session identifier, IP address, error logs, push notification token. |
| Premium subscription | When Premium launches: subscription status and transaction ID sent by Google Play. We never receive your card number. |
| Communications with us | Your emails, beta feedback and requests to exercise your rights. |
Why we use it, and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Manage beta sign-ups, select testers and contact you about it | Your consent (Art. 6(1)(a) GDPR) | Up to 3 months after the end of the beta for people not selected |
| Let you know by email when the app is available on iPhone (waitlist) | Your consent (Art. 6(1)(a) GDPR) | 12 months, or until the app is released on iPhone if that comes first |
| Create your account and run YUUUM (feed, messages, collections) | Performance of a contract (Art. 6(1)(b)) | As long as your account is active, then 30 days after your deletion request |
| Process your health and nutrition data (calories, meal photos, weight, goals, Swing) | Your explicit consent (Art. 9(2)(a)) | As long as your account is active; erased with it or on your request |
| Security, abuse prevention, moderation of reported content | Legitimate interest (Art. 6(1)(f)) and legal obligations (Art. 6(1)(c)) | Connection logs: 12 months. Reports: for the duration of handling, then 12 months |
| Manage your Premium subscription, when Premium launches | Performance of a contract; legal obligation for accounting records | Duration of the subscription, then 10 years for accounting records |
| Fix bugs and monitor app stability | Legitimate interest (Art. 6(1)(f)) | 12 months maximum |
| Push notifications | Your consent (phone setting) | Until you turn them off |
| Answer your requests and exercise your rights | Legal obligation and legitimate interest | Up to 5 years (evidence) |
We do not use your data for targeted advertising or commercial profiling. The tools that monitor app stability receive no health data. If this ever changes, we would ask you first.
Your health data
Your meals, meal photos, calories, weight, height and goals are health data within the meaning of Article 9 of the GDPR. We only process them with your explicit consent: it is requested in the app, separately from the terms of use and from this policy, before you enter your first piece of data.
You can withdraw this consent at any time in the settings: nutrition tracking stops and you can delete this data. Withdrawal does not affect what was done before. This data is never used for advertising or commercial profiling, and is never sent to an advertising tool.
Who sees what
What you publish (recipes, photos, comments) is visible according to your settings: public or private account, who can comment on, mention or message you. You can block, mute and report accounts or content.
We do not access your private messages, unless a message is reported or the law requires it. By default, your data is private: your weight, height and weight goals are not visible to any other member. You choose what you make public; the information you display on your profile is visible according to your settings.
Who we share it with
We do not sell your data. It is accessible to the founders and to service providers acting on our instructions:
- Brevo, a French company: beta and iPhone waitlist sign-up form, storage of your email and sending of the related emails;
- Google: Android distribution through Google Play, analysis of your meal photos, payment and subscription management;
- the host and the database that run the app;
- email and notification delivery services.
We may also disclose data if a competent authority legally requires us to. Content you make public can be seen by anyone, including outside YUUUM.
Transfers outside the European Union
Some providers, such as Google, may process data outside the European Union, notably in the United States. These transfers are covered by a European Commission adequacy decision (for example the EU–US Data Privacy Framework) or, failing that, by standard contractual clauses. Sign-up data stored by Brevo is hosted in the European Union.
Security
Exchanges with the site and the app are encrypted (HTTPS), passwords are stored hashed and access to data is limited to those who need it. In the event of a data breach presenting a risk to you, we notify the CNIL within 72 hours and you directly if the risk is high.
No system is infallible: choose a unique password and sign out of devices you no longer use (Settings › Account and security › Connected devices).
Your rights
At any time you can request access, rectification, erasure, restriction or portability of your data, object to processing based on our legitimate interest, withdraw your consent and set instructions for what happens to your data after your death.
- Download your data: Settings › Privacy › My data and permissions. The archive is emailed to you within 48 hours.
- Delete your account: Settings › Account and security › Delete my account. You have 30 days to change your mind by signing back in; after that, your recipes, collections and messages are permanently erased.
- Unsubscribe from the list: use the “unsubscribe” link at the bottom of every email, or simply write to hello@yuuum.app.
- Any other request: write to hello@yuuum.app. We reply within one month; we may ask you to prove your identity.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France · www.cnil.fr).
Changes to this policy
We update this policy as the beta evolves. The version and date are on the first page. If a change affects your rights or how your data is used, we notify you by email or in the app before it applies.
- Version 1.2 · 21 October 2026. Beta sign-up through Brevo (hosted in the European Union) instead of the Google form, iPhone waitlist kept 12 months, “by default, your data is private” wording, no audience-measurement tool during the beta.
- Version 1.1 · 21 October 2026. Added explicit consent for health data, analysis of meal photos, the “not a medical device” statement and the commitment never to use this data for advertising.
- Version 1.0 · 21 October 2026. First version.
Contact us
A question, a request, a doubt: hello@yuuum.app.