Yumcal

Privacy Policy

Last updated: 22 September 2026 · Effective: 22 September 2026

Yumcal is an AI nutrition tracker. To work, it needs to know what you eat and a few facts about your body. This page explains exactly what we collect, why, who we share it with, and how to get it all deleted.

1. Who we are

Yumcal (“we”, “us”) is operated by Baslel Workineh Ayele, a sole trader based in Dubai, United Arab Emirates. We are the data controller for the information described here.

For any privacy question or request, contact basketouae@gmail.com.

2. What we collect

Data	Why we need it	Legal basis
Account Email address, name, and — if you sign in with Google or Apple — the identifier from that provider.	To create your account, sign you in, and sync your data across devices.	Performance of a contract
Health & fitness profile Sex, age, height, weight, goal weight, activity level, dietary preference, allergies and food restrictions.	To calculate your calorie and macronutrient targets. This is the core function of the app.	Explicit consent
Meal logs Photos of meals, food names, portion sizes, nutrition values, and the time you logged them.	To identify your food, calculate its nutrition, and show your progress over time.	Explicit consent
Progress data Weight entries, water intake, streaks and achievements.	To chart your progress and keep your streak.	Explicit consent
Coach conversations Messages you send to the in-app AI coach and its replies.	To answer your questions with the context of your recent meals and targets.	Performance of a contract
Groups & chat Groups you join or create and messages you post in them.	To run the social features. Anything you post in a group is visible to that group’s members.	Performance of a contract
Push token A device notification token and your platform (Android/iOS).	To send meal reminders and account notices. Only stored if you enable notifications.	Consent
Subscription status Whether you have an active plan, which plan, and its renewal date.	To unlock paid features. Handled by RevenueCat and Google Play.	Performance of a contract
Diagnostics Crash reports and error logs.	To find and fix bugs.	Legitimate interest

What we do not collect

We do not collect your advertising ID. The app explicitly blocks that permission.
We do not collect your precise or approximate location.
We do not collect your contacts, calendar, SMS or call logs.
We do not sell your personal data to anyone, ever.
We do not use your data for advertising or share it with advertising networks.

Camera, microphone and photos

The camera is used only when you choose to photograph a meal or scan a barcode. The microphone is used only while you are recording a voice meal log. Photo library access is used only for the image you pick. Nothing is captured in the background, and nothing is uploaded except the specific meal image or recording you submit for analysis.

3. How your data is used

We use the data above to:

identify food in your photos and estimate its nutrition;
calculate and adapt your personal calorie and macro targets;
show your history, trends, streaks and reports;
answer your questions through the AI coach;
send the reminders you asked for;
process your subscription;
keep the service secure and fix faults.

We do not use your personal data or meal photos to train third-party AI models. If you explicitly correct one of our estimates, we may store that correction to improve our own accuracy.

4. Who we share it with

We share data only with the processors needed to run the service:

Processor	Purpose	Data shared
Clerk	Authentication	Email, name, sign-in identifiers
Neon	Database hosting	All account and meal data
Vercel	Site and API hosting	Requests in transit
Google (Gemini API)	Food recognition and coach replies	The meal image or text you submit, and relevant nutrition context
RevenueCat	Subscription management	A pseudonymous user id and purchase status
Google Play Billing	Payment processing	Handled entirely by Google; we never see your card details
Expo	Push notification delivery	Device push token and message content
Open Food Facts, USDA FoodData Central	Food and barcode lookup	The barcode or search term only — never your identity

We may also disclose data where legally required, or to protect the rights and safety of our users. If Yumcal is ever acquired, your data may transfer to the acquirer under this same policy, and we will notify you beforehand.

5. International transfers

We are based in the United Arab Emirates and our processors operate globally, so your data may be processed outside your country. Where data leaves the European Economic Area or the UK, we rely on Standard Contractual Clauses or an equivalent safeguard.

6. How long we keep it

Account and meal data — for as long as your account exists.
After you delete your account — erased from our live database immediately, and from encrypted backups within 30 days.
Meal photos — deleted with your account.
Payment records — retained as long as tax and accounting law requires.

7. Your rights

You can, at any time:

Access and export your data — Profile → Export data, which produces a complete JSON file.
Correct anything inaccurate — every profile field and meal entry is editable in the app.
Delete your account and all associated data — Profile → Delete account, or via our account deletion page. This is immediate and irreversible.
Withdraw consent — turn off notifications in Profile, or stop using a feature.
Object or restrict — email us and we will act on it.
Complain to your local data protection authority.

We respond to every request within 30 days, and we never charge for it.

8. Security

All traffic between the app and our servers uses TLS. Data is encrypted at rest by our database provider. Access to production systems is restricted and authenticated. No system is perfectly secure, but if a breach ever affects your data we will notify you and the relevant regulator without undue delay.

9. Children

Yumcal is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

10. Not medical advice

Yumcal estimates nutrition and offers general guidance. It is not a medical device and does not provide medical advice, diagnosis or treatment. AI estimates can be wrong. Always consult a qualified healthcare professional before making significant changes to your diet, particularly if you are pregnant, managing a medical condition, or have a history of disordered eating.

11. Changes to this policy

If we make a material change we will notify you in the app before it takes effect. The “last updated” date at the top always reflects the current version.

12. Contact

Baslel Workineh Ayele
Dubai, United Arab Emirates
basketouae@gmail.com