Yimo
Privacy Policy
This policy explains what personal data the Yimo app and website collect, why, and what you can do about it. Yimo (“we”, “our”, “us”) is responsible for this data. Contact us at contact@yimo.food.
What we collect
| Data | Why |
|---|---|
| Email address | To create your account and send your sign-in codes. |
| Name | Shown in your account. It starts as the first part of your email address. |
| Recipes, categories, and photos you add | To store your recipe book and show it back to you. |
| Sign-in codes | To confirm you own your email. Stored only as a hash and valid for 5 minutes. |
| Session data: IP address, device/browser type, sign-in times | To keep you signed in, secure your account, and prevent abuse. |
We don’t use advertising or third-party analytics, we don’t track you across other apps or websites, and we don’t sell your data.
Legal bases
We process your data to provide the Service you signed up for (performance of a contract), and session and security data for our legitimate interest in keeping the Service secure. Where the law requires consent, we will ask for it.
Who processes it for us
We use these providers to run Yimo. They process data only on our instructions.
| Provider | Purpose | Location |
|---|---|---|
| Railway | Hosting the API and database | Netherlands (EU) |
| Cloudflare | Storing recipe photos (R2), sending sign-in code emails, DNS and website | Western Europe for photo storage; global network for email and website |
Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
How long we keep it
- Account data, recipes, and photos: until you delete them or your account.
- Photos you upload but never save to a recipe: deleted automatically within about a day.
- Sign-in codes: expire after 5 minutes. Sessions expire after a period of inactivity or when you sign out.
Your rights
Depending on where you live, you can ask to access, correct, export, or delete your data, and object to or restrict some processing. To delete your account and its data, email contact@yimo.food from the address you sign in with. We reply within 30 days. You can also complain to your local data protection authority.
Children
Yimo is not intended for children under 13. If you believe a child has given us personal data, contact us and we will delete it.
Changes
We will update this policy when what we collect or how we use it changes, and tell you in the app or by email about significant changes.