Privacy Policy (GDPR)

1. Data Controller

The data controller is:

  • Mr. Gilles Dumas, Efficial Web
  • Contact: contact@yumi-app.com

2. Data Collected

When using Yumi, we collect the following data:

  • Registration data: name, email address, password (encrypted)
  • Profile data: date of birth, gender, weight, height, nutritional goals
  • Usage data: food diary, recorded meals, dietary preferences
  • Technical data: IP address, browser type, pages visited

3. Purpose of Processing

Your data is processed for the following purposes:

  • Creation and management of your user account
  • Providing personalised nutritional tracking services
  • Calculating your intake and dietary recommendations
  • Improving our services and user experience
  • Communications regarding your account and our services
  • Subscription and billing management

4. Legal Basis

The processing of your data is based on:

  • Performance of a contract: to provide the Yumi service
  • Your consent: for marketing communications and non-essential cookies
  • Legitimate interest: for improving our services and site security

5. Data Retention

  • Account data: retained for the duration of your registration, then 3 years after account deletion
  • Billing data: retained for 10 years in accordance with accounting obligations
  • Technical data (logs): retained for 12 months

6. Data Sharing

Your personal data is never sold. It may be shared with:

  • Stripe: for secure payment processing
  • Our hosting provider: Hostinger, for data storage

These providers are bound by strict contractual obligations regarding data protection.

7. Your Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to restriction: request limitation of processing

To exercise these rights, contact us at: contact@yumi-app.com

You may also lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

8. Cookies

The Yumi website uses cookies that are strictly necessary for the operation of the service (session, CSRF security). No advertising or tracking cookies are used.

9. Security

We implement appropriate technical and organisational measures to protect your data: password encryption, HTTPS connection, restricted data access, regular backups.

10. Changes to This Policy

This policy may be updated. The date of the last modification is indicated below. We encourage you to review it regularly.

Last updated: January 2026