Privacy Policy

1. Data We Collect

Upon registration:

• Email address
• Name (if signing in via Google)
• Profile photo (if signing in via Google)

During service use:

• AI requests (message text)
• Number of requests used
• Liked and saved dishes
• Subscription data (plan, status)

Automatically:

• Browser technical data
• Interface language
• Service interaction statistics (dish views, clicks on suggestions) — used to improve recommendations

When subscribing:

• Email and order identifier, transmitted to the payment provider Paddle for billing
• We do not see or store your card details — they are processed exclusively by Paddle as the Merchant of Record

2. How We Use Data

• Providing personalized AI recommendations
• Subscription and payment management
• Request limit tracking
• Improving service quality
• Responding to support requests

We do not sell your data to third parties.

Legal bases for processing (for users in the EU/EEA):

• Performance of a contract — providing access to the Service's features and processing your subscription
• Consent — processing AI requests and optional sign-in via Google
• Legitimate interest — service security, abuse prevention, analytics, and quality improvement
• Legal obligation — compliance with tax and other legal requirements (including via Paddle's reporting)

3. Third Parties

Some of these providers (Google Gemini AI, Vercel, Paddle) may process data on servers in the USA or other countries outside the EU/Ukraine. In such cases, the appropriate data protection safeguards provided by these vendors apply (including the EU Standard Contractual Clauses).

4. Data Storage

Data is stored on Supabase servers (EU region). We apply standard security measures to protect your data.

Account data is stored until deletion. After account deletion, data is removed within 30 days.

5. Your Rights

• Access: you can request a copy of your data
• Correction: update data in profile settings
• Deletion: delete your account in profile settings
• Objection: refuse data processing
• Portability: receive your data in a machine-readable format to transfer to another service

To exercise your rights, contact us: yumsvit@gmail.com

If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with the data protection authority of your country (for the EU, your local data protection supervisory authority; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights).

6. Cookies

We only use technical cookies necessary for the service (session, interface language). No advertising or tracking cookies are used.

• Authentication session cookies (Supabase Auth) — so you don't have to log in again
• Interface language cookie — to remember your selected language

You can delete or block cookies in your browser settings, but this may affect how the Service works (for example, you may need to log in again).

7. Policy Changes

We will notify you by email of significant changes. Continued use of the service means acceptance of the updated policy.

8. Contact

For privacy questions: yumsvit@gmail.com

9. Children and Age Restrictions

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with their data without parental or guardian consent, please notify us and we will delete that data.

10. Browser extension data

The YumSvit browser extension analyzes only the pages you explicitly submit for analysis via the extension button: the menu page text and/or its screenshots are sent to the AI provider (Google Gemini) to generate a response. We do not track your browsing history and do not collect content from other pages in the background.

Screenshots and text submitted for analysis are sent to Google Gemini and processed temporarily to produce the response; they are not stored on our servers.