Política de privacidade

Draft template · effective from: [DATE TO BE PROVIDED]

1. Who processes your data

The data controller is I & B sp. z o.o., ul. Katowicka 86, 43-190 Mikołów (KRS 0000357995, NIP 6351812554, REGON 241614310). Contact for personal data matters: hello@yumifit.app.

2. How the service works (data flow)

YumiFit is a food diary. Entries reach it in two ways:

• Manually in the app (PWA) – we store what you enter.
• Through a connected assistant (ChatGPT or Claude) – the assistant analyses your message or photo on its own side, under its provider's terms, and sends us only the result through an authorised connection (e.g. food name, amount and nutrition values).

We do not read your conversations with the assistant and have no access to them. We only store what the assistant sends through the connection. We do not use our own artificial intelligence, OCR or photo analysis.

3. What we store

• account data: e-mail address, password hash or a link to your Google account, e-mail confirmation, acceptance of the terms, language and timezone;
• diary: meals and items (names, amounts, units, nutrition values, date and optional time), estimate markers, day status (complete/unconfirmed) and the day's limit;
• goals and an optional estimated energy requirement (with effective date, method and assumptions);
• saved products and recipes;
• short assistant comments about a meal or a day (with which assistant wrote them);
• technical data: results of write operations (to prevent double saving), IP address and account ID for login/registration attempt limits, error logs.

Friends group (only if you join one): we store the group’s name, the name you choose, and the dates you joined and consented. People in your group see that name, how many days you logged and completed this week, your streak and whether anything was logged today. They do not see your meals, calories, weight, goals or e-mail address. Basis: your explicit consent, which you withdraw by leaving the group; we then remove this data from the group. [FOR LEGAL REVIEW]

Photos: the current version does not store meal photos. Private attachments are off by default and not available.

4. Purposes and legal bases

Providing the diary service you asked for (account, storing and showing your data) and keeping it secure (attempt limits, logs). Legal bases: [TO BE PROVIDED BY THE OPERATOR].

5. Recipients

Hosting and database provider: [TO BE PROVIDED]. E-mail delivery provider: EmailLabs (Vercom S.A., Poznań, Poland). Google – only if you sign in with Google. The assistants (OpenAI – ChatGPT, Anthropic – Claude) receive diary data from us only if you connect them to your account yourself and the assistant asks for it in your conversation.

6. How long we keep data

Until you delete your account. A meal deleted in the app is marked as deleted (you can undo it) and disappears from the diary and statistics; its data is erased permanently together with the account. Retention periods for technical logs: [TO BE PROVIDED]. After account deletion, data may remain in encrypted backups until their retention period ends: [PERIOD TO BE PROVIDED]. Write-operation results (protection against duplicate saves) are deleted after 30 days.

7. Your rights and controls

• Export: Settings → Account → "Download my data" (a JSON file with all account data, without passwords or tokens).
• Deletion: Settings → Account → "Delete account" – deletes the account and all diary data; assistant connections stop working.
• Disconnect an assistant: Settings → Connected assistants.
• Rights of access, rectification, restriction, objection and complaint to a supervisory authority: [DETAILS TO BE PROVIDED].

8. Cookies and browser storage

We only use the necessary session cookie (sign-in) and form protection. No ads, no analytics. The app may store only static files in your browser (styles, icons, the "offline" page) – never diary data. Logging out clears cookies, storage and cache of this site.

9. Estimates are not medical advice

Nutrition values are often estimates (by the assistant or by you). The service is not a medical device and does not replace advice from a doctor or dietitian.