Yummy - Privacy Policy

1. Information We Collect

Information You Provide

Account data: username, email address, display name, profile photo, and bio when you register or edit your profile.
Content: recipes, photos, comments, and any other material you post or upload.
Communications: messages or reports you submit through in-app support or report flows.
Authentication data: password (stored as a hashed value; we never store it in plain text) or Google OAuth token when you sign in with Google.

Information Collected Automatically

Device information: device model, operating system version, unique device identifiers (e.g., advertising ID).
Usage data: features accessed, pages viewed, interactions (likes, bookmarks, follows), and session duration.
Push notification token: an FCM token used to deliver push notifications to your device.
Log data: IP address, timestamps, crash reports, and error logs for debugging purposes.

Information from Third Parties

Google Sign-In: if you sign in with Google, we receive your Google email address, display name, and profile picture URL from Google.

2. How We Use Your Information

Create and manage your account and authenticate your identity.
Display your profile, recipes, and social interactions (followers, following) to other users.
Deliver push notifications about activity on your account (new followers, comments, likes).
Personalise your content feed based on your follows and preferences.
Show advertising through Google AdMob (see Section 7).
Measure aggregated app analytics via Firebase Analytics and Facebook App Events to understand how the Service is used and improve it.
Enforce our Terms of Service, detect abuse, and moderate user-generated content.
Respond to your support requests or reports.
Comply with legal obligations.

3. User-Generated Content and Community Safety

Yummy is a social platform. Content you post (recipes, photos, comments, profile information) is visible to other users according to your privacy settings.

Reporting: any user may report a recipe, comment, or another user for violating our community guidelines. We review reports and act on confirmed violations within 24 hours by removing the content and, where warranted, suspending or terminating the offending account.
Blocking: you may block any other user from your profile. Blocking immediately hides their content from your feed and prevents them from seeing your profile and recipes. We may receive notice of the block to help us identify patterns of abusive behaviour.
Moderation: we may automatically or manually filter, remove, or restrict content that violates our Terms of Service or community guidelines without prior notice.
No tolerance policy: we have zero tolerance for objectionable content (hate speech, harassment, explicit material, violence, or illegal content). Accounts that repeatedly violate these standards will be permanently suspended.

4. Third-Party Services

We use the following third-party services that may collect data independently under their own privacy policies:

Service	Provider	Purpose	Privacy Policy
Firebase Authentication & Cloud Messaging	Google LLC	User authentication, push notifications	policies.google.com/privacy
Firebase Analytics	Google LLC	App usage analytics	policies.google.com/privacy
Google Sign-In	Google LLC	OAuth authentication	policies.google.com/privacy
Google AdMob	Google LLC	In-app advertising	policies.google.com/privacy
Facebook App Events SDK	Meta Platforms, Inc.	App event analytics, registration tracking	facebook.com/privacy/policy

We do not control the data practices of these third parties. We encourage you to review their privacy policies.

5. Advertising

We display advertisements served by Google AdMob. AdMob may use your advertising identifier (IDFA on iOS, GAID on Android) and other signals to show you personalised ads. You can limit ad personalisation at the system level:

iOS: Settings → Privacy & Security → Tracking → turn off "Allow Apps to Request to Track".
Android: Settings → Google → Ads → "Delete advertising ID" or opt out of ads personalisation.

We comply with Apple's App Tracking Transparency (ATT) framework and will request your permission before accessing your IDFA for personalised advertising.

6. Information Sharing

We do not sell your personal information. We share your information only in the following circumstances:

With other users: your username, display name, profile photo, bio, recipes, and public social metrics (followers, following count) are visible to other users of the Service as part of the social features.
Service providers: we share data with third-party vendors (listed in Section 4) who provide infrastructure, analytics, and advertising services strictly on our behalf and under confidentiality obligations.
Legal obligations: we may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Yummy, our users, or the public.
Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.
With your consent: in any other circumstances where you have given explicit consent.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

Account data and content: retained until you delete your account (see Section 9).
Usage and analytics data: retained for up to 24 months in aggregate, anonymised form.
Log data: retained for up to 90 days for security and debugging purposes.
Legal holds: certain data may be retained longer if required by applicable law or to resolve disputes.

8. Data Security

We use industry-standard safeguards to protect your information, including:

HTTPS/TLS encryption for all data in transit.
Passwords stored using strong one-way hashing algorithms.
JWT tokens stored in encrypted device storage (Flutter Secure Storage).
SSL certificate pinning in the mobile app to prevent man-in-the-middle attacks.
Access controls limiting who on our team can access personal data.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Account Deletion

You have the right to permanently delete your account and all associated data at any time. Account deletion is irreversible. Once deleted, your profile, recipes, comments, likes, and all other data will be permanently removed from our systems (subject to the retention exceptions in Section 7).

How to delete your account in the app

Open Yummy and sign in to your account.
Tap the menu icon and go to Settings.
Scroll to the bottom and tap Delete Account.
Confirm your intention in the first dialog, then type DELETE in the confirmation field.
Tap Delete Account to permanently delete your account.

Deletion is immediate and permanent. You will be logged out automatically. If you experience any issues deleting your account through the app, please contact us at tomakacheishvili@gmail.com and we will process your request manually within 30 days.

Note: Deactivating or temporarily disabling your account is not available as a substitute for deletion. Your request will result in complete, permanent removal of your data.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Correction: update or correct inaccurate information via your profile settings or by contacting us.
Deletion: permanently delete your account and all associated data (see Section 9).
Portability: request an export of your data in a machine-readable format.
Restriction: request that we limit processing of your data in certain circumstances.
Opt-out of personalised ads: manage ad preferences through your device settings (see Section 5).
Push notifications: disable push notifications at any time through your device's notification settings.

To exercise any of these rights, contact us at tomakacheishvili@gmail.com. We will respond within 30 days.

11. Children's Privacy

Yummy is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at tomakacheishvili@gmail.com and we will delete that information promptly.

12. Push Notifications

With your permission, we send push notifications about activity related to your account (e.g., new followers, likes, or comments on your recipes). You can opt out of push notifications at any time through your device settings (iOS: Settings → Notifications → Yummy; Android: Settings → Apps → Yummy → Notifications).

13. International Data Transfers

Yummy is operated from Georgia and uses cloud infrastructure that may process data in the United States and other countries. By using the Service, you acknowledge that your data may be transferred to and processed in countries outside your country of residence. We take appropriate steps to ensure such transfers comply with applicable data protection laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you through the app or by email. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: tomakacheishvili@gmail.com
In-app: Settings → Help & Support

We aim to respond to all privacy-related inquiries within 30 days.

Yummy Privacy Policy