Privacy Policy

1. Who we are

This policy describes how Yumitos Corporation (16192 Coastal Highway, Lewes, Delaware 19958-9776, USA) handles personal data in the Yumitos app and on the Yumitos websites. For allergy and dietary information we maintain a separate Consumer Health Data Privacy Policy, which governs that data wherever this policy and it overlap.

2. Data we collect

• Account and identity. Email address, name, unique handle, and a phone number, which we verify by SMS code during signup. If you sign in with Google, Facebook, or Apple, we receive your name and email from that provider.
• Profile and preferences. Profile details, cuisine preferences, and the allergy and dietary information described in the Consumer Health Data Privacy Policy.
• Content you share. Photos, videos, posts, reviews, routes, and messages. If a photo you upload carries location metadata, the app may read that location to place your content on the map.
• Location. With your permission, your device location while you use the app, for finding nearby food, powering Yumi searches, and, if you join a group outing and turn it on, sharing your live location with that outing's members until you stop. We do not track your location in the background.
• Orders. What you ordered, delivery address and any delivery or item instructions you type, and order status.
• Payments. Your card details go directly to Stripe and never touch Yumitos servers. We store only a Stripe customer reference and, for display, the card brand and last four digits.
• Device and diagnostics. Push notification tokens for your devices, and crash reports through Sentry, which include your account identifier and may include a screenshot of the app at the moment of the crash.
• Website waitlist. Name, email, and city, with your consent recorded against the policy version you accepted. The city field is pre-filled from your IP address and editable.

3. Why we use it

To run the Service: accounts, feeds, search, routes, orders, and payments. To personalize discovery, including honoring the dietary constraints you set. To keep the platform safe: verification, fraud prevention, moderation. To communicate with you about orders and the Service. And to fix problems, using diagnostics and crash reports. We do not sell personal data, and the app contains no third-party advertising or analytics trackers.

4. AI features

Some features use AI models run by third parties. Recipe suggestions send your saved cuisine preferences, dietary preferences, and allergies to Google's Gemini model to generate recipes that are safe for you; food scanning sends the photo you scan to Gemini; some content features use Anthropic's Claude models. Yumi's food search itself does not use an AI model: it is our own server code working from your query, your location, and your party's saved dietary constraints. AI providers process this data to provide the feature, not to advertise to you.

5. Who we share it with

• Vendors you order from receive your order contents, the instructions you type, your name, and delivery details needed to fulfil the order.
• Other users see your profile, handle, and the content you post. Dietary and allergy information can also be visible to other signed-in users, most directly to members of your groups, as described in the Consumer Health Data Privacy Policy.
• Service providers that process data for us: Google (Firebase infrastructure, Maps and Places, Gemini), Stripe (payments), Twilio (SMS verification), Resend (transactional email), Mux (video), Cloudflare (media storage), Typesense (search), Sentry (crash reporting), Anthropic (AI features), Vercel (website hosting), and Wise (vendor payouts in certain countries). The Facebook SDK is used for sign-in only, with advertiser data collection disabled.
• Legal. When required by law or to protect the Service and its users.

6. Advertising

Yumitos does not currently serve third-party ads and does not share your data for cross-context behavioral advertising. If vendor promotions launch in the app, this policy will be updated first and the version above will change.

7. Retention

We keep your data while your account is active. Order and payment records are kept as long as tax and accounting law requires. Beyond that, we delete or de-identify data when it is no longer needed for the purposes described in this policy.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to certain processing. Email legal@yumitos.com and we will respond within the time your law requires. Washington residents: for allergy and dietary data, the Consumer Health Data Privacy Policy describes additional rights and an appeals process. EEA and UK visitors: see the GDPR Information page. You can turn off location access and push notifications in your device settings at any time.

9. Deleting your account

You can delete your account in the app under Account settings. Deleting your account permanently deletes your sign-in credentials and removes your profile and content from the Service. Some records are retained where the law requires it, including order history. You can additionally ask us to delete specific personal data by emailing legal@yumitos.com, and we will honor the request to the extent the law allows.

10. Children

The Service is not for children under 13. Users 13 to 17 require parental consent as described in the Terms of Service. We do not knowingly collect data from children under 13; if you believe we have, contact legal@yumitos.com and we will delete it.

11. International transfers

Our infrastructure runs in the United States. Commerce is offered in the United States, Canada, and Mexico; discovery features are available in parts of Latin America. Wherever you use the Service from, your data is processed in the United States under this policy.

12. The website

The Yumitos website uses no third-party analytics or advertising cookies. The waitlist form records what you submit plus your consent; your IP address is used to suggest your city and for rate limiting, and is not stored with your signup.

13. Changes and contact

Material changes will be announced through the Service or by email before they take effect; the version and effective date above identify the text in force. Privacy inquiries: legal@yumitos.com. Yumitos Corporation, 16192 Coastal Highway, Lewes, Delaware 19958-9776, USA.