Privacy Policy

1. Scope

This policy explains the personal data processed through the Yemio mobile app and website. For the legal details, see the KVKK Notice.

2. What we process

We only collect what we need to provide the service:

• Account details: your e-mail address and user ID (if you create an account). You can also start without one.
• Preferences: number of people, days, budget, meal style, diet, favourite proteins, ingredients you avoid and your kitchen equipment.
• Allergy information: only with your explicit consent; it counts as health data and is protected separately.
• Usage data: the plans you create, ticks on your shopping list, favourites and ratings.
• Waitlist: your e-mail address and language if you join from the website.
• Technical logs: server logs kept for a limited time for security and debugging, with e-mail addresses and allergy details masked.

3. What we use it for

To build a weekly plan and shopping list that suit you, keep your account and preferences across devices, keep the service secure and, if you joined the waitlist, send the launch announcement.

Allergy information is only used to remove unsuitable recipes from your plan; it is never sent to analytics or AI services.

4. Where we keep it

All user data is kept on a server that only we manage; we do not use managed cloud database services. The server is in our hosting provider Contabo GmbH's data centre in France (European Union).

The database is backed up daily. Backups are encrypted before they leave the server and a copy is stored on Google Drive. Only we hold the decryption key; neither Google nor the hosting provider can read the backups. Backups are deleted after 14 days.

5. Third parties

We do not sell your data or share it for advertising. The following providers process data only on our instructions and only as far as needed to run the service:

• Hosting (Contabo GmbH, Germany; data centre in France): all app data.
• Encrypted backup copy (Google, Google Drive): encrypted backup files only.
• Email delivery (Zoho): your email address, for sign-in links and announcements.
• AI service (Anthropic, USA): only content that cannot identify you and contains no health data, for plan summaries and ingredient matching.
• Analytics and error tracking (PostHog, EU; Sentry): only when enabled; pseudonymous usage events and error logs. Your email address and allergy details are never sent.
• Sign in with Apple / Google: if you choose it, sign-in happens under that company's own terms.
• Transfers to providers abroad are made under the standard contracts published by the Turkish Personal Data Protection Board (KVKK art. 9). Details are in the KVKK Privacy Notice.

6. How long we keep it

When you delete your account it is disabled immediately and your data is permanently deleted within 30 days. Data from anonymous use is deleted after 12 months of inactivity. A waitlist entry is kept until the announcement is sent or you ask to leave.

7. Your rights

You can download your data or delete your account under Settings > My data in the app. You can withdraw your consent for allergy information at any time; your allergy details are then deleted. For your other rights under KVKK, see the KVKK Notice.

8. Cookies and browser storage

Our website uses no cookies and no ad tracking. Only your chosen appearance (light/dark) is stored in your browser; it is never sent to our server.

9. Changes and contact

When we update this policy we change its date and announce important changes in the app. Send questions to [email protected].