Privacy Policy

1. Data controller

The controller of your data is:

• Owner: Juan Burillo
• Tax ID (NIF): 70267645T
• Address: C. Vía del Berrocal, 47, 28411 Moralzarzal, Madrid
• Contact email: hello@yumatic.app

2. What data we process

• Account data: your name, your email address and your password, which we store encrypted and never in plain text.
• Usage data: the recipes you save (with their ingredients, meal type, diet types and calories) and the number of recipes you generate each day, to apply the Free plan limits.
• Subscription data: whether you have Yumatic Pro and the customer identifier Stripe assigns to you. Your card details are handled directly by Stripe; we never see or store them.
• Technical data: your IP address, which we use temporarily to prevent abuse of the service, and your account session, which is stored in your browser's local storage.
• Advertising data: if you use the Free plan, Google may use cookies and identifiers to show you ads (see section 7).

3. Why we use it and on what legal basis

• To provide the service: creating and managing your account, generating and saving recipes and applying your plan limits. Legal basis: performance of the contract you accept when you sign up.
• To send you necessary emails: account verification, password recovery and subscription confirmation. Legal basis: performance of the contract.
• To manage Yumatic Pro payments. Legal basis: performance of the contract and compliance with tax and accounting obligations.
• To protect the service against abuse and measure its technical performance. Legal basis: our legitimate interest in keeping the service secure and working well.
• To show ads on the Free plan. Legal basis: your consent, where advertising uses cookies or personal data.

We do not sell your personal data or use it to make automated decisions that significantly affect you.

4. Who we share your data with

To run Yumatic we work with these providers, which process data on our behalf and only to provide their service to us:

• OVHcloud: hosts our server and database in the European Union.
• Vercel: hosts the website and measures its technical performance in aggregate.
• OpenAI: generates the recipes. It only receives the ingredients, meal type, diet types, calories and language; never your name or email address.
• Brevo: sends the service's emails.
• Stripe: processes Yumatic Pro payments and manages your subscription.
• Google (AdSense): shows ads to Free plan users.

We may also disclose data to authorities when the law requires us to.

5. International transfers

Some of these providers (Vercel, OpenAI, Stripe and Google) may process data outside the European Economic Area, mainly in the United States. In those cases, transfers rely on the EU-U.S. Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

6. How long we keep your data

We keep your data for as long as you have a Yumatic account. You can delete your account at any time from the "Your Account" page; when you do, we delete your account and your saved recipes. Payment and invoice data is kept for the periods required by tax and commercial law.

7. Cookies and advertising

Yumatic does not use its own cookies to track you. Your session is stored in your browser's local storage and only keeps you logged in.

If you use the Free plan, we show Google AdSense ads. Google and its partners may use cookies to serve ads, measure their performance and, if you agree, personalize them based on your interests. If you are in the European Economic Area, the United Kingdom or Switzerland, we will ask for your consent first through a Google notice, and you can change your choice at any time.

You can read how Google uses data at policies.google.com/technologies/partner-sites and manage ad personalization at adssettings.google.com.

Yumatic Pro users do not see ads, and the website does not load Google AdSense code for them.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, at any time by writing to hello@yumatic.app. You can correct your name and delete your account directly from the "Your Account" page.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or with your local data protection authority.

9. Children

Yumatic is not intended for children under 14, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy to reflect changes in the service or the law. We will publish the new version here with its date and, if the changes are significant, we will notify you by email.