Privacy Policy

Yum-mi is operated by QUICK FIT LTD, company number 15995367, registered at 7 Cresset Rd, London, United Kingdom, E9 7FS. QUICK FIT LTD is the controller of the personal data described in this Privacy Policy.

This policy explains how we process personal data when you use our Website, create an Account, purchase tokens, upload content, use our AI tools or contact support. For privacy enquiries, contact info@yum-mi.com.

This policy is an explanation of our processing practices. Browsing the Website does not constitute consent to all processing of personal data.

Information We Collect

Personal Information: When you register on yum-mi.com, we may collect your name, email address and the account details needed to provide the service.

Usage Information: We may also collect information on how you interact with our website, including IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

User Content and Nutrition Information: We process photographs, prompts and other information you submit to generate recipes, nutritional suggestions and food estimates. This may include your age, dietary preferences, goals and allergy information where you choose to provide them. Only the information needed for the selected feature is required.

Transactions and Usage: We process token purchases and balances, usage records, payment status and transaction references. Additional payment data is handled according to the arrangements described under “Payment Processing” below.

Payment Processing

Payments are processed by Secure-Processor on its hosted payment page at checkout.secure-processor.com. Secure-Processor collects the card details you enter on that page. We receive payment status, amount, currency, order reference and the email address used for the order. We do not receive the full card number from that hosted page. Their privacy information is shown on the hosted payment page before you pay.

How We Use Your Information

To Provide and Improve Our Services: We use your information to provide the AI generation services you request and to keep the service working.

To Communicate with You: We use your email address to send purchase confirmations and service messages. Marketing is sent only where we have a lawful basis, and you can unsubscribe from marketing without losing access to purchased services.

For Billing and Account Management: We use purchase and token records to credit tokens, show your balance and manage your account.

To Ensure Security and Compliance: We use your information to help maintain the security of our website and to comply with legal requirements.

Legal Bases and Health Information

We process Account, purchase and generation information where necessary to perform our contract with you. We process records required by law on the basis of legal obligation. We rely on legitimate interests for proportionate fraud prevention, security and troubleshooting; our interests are protecting customers and maintaining a reliable service, subject to your rights.

We obtain consent for optional cookies and marketing where required. You can unsubscribe from marketing without losing access to purchased services.

Information revealing your health, such as allergy information, receives additional protection. Where we rely on your explicit consent, we obtain it separately before processing that information to personalise your requested nutrition features. You can withdraw it at any time by contacting info@yum-mi.com. Withdrawal stops the consent-based processing and may affect features that depend on that information, but does not affect the lawfulness of earlier processing.

How We Share Your Information

Service Providers: Our providers include n8n (AI generation workflows), OpenAI (where an image or code feature is invoked), Clerk (authentication), Vercel (hosting), Neon (database hosting), Google (optional analytics, only after consent) and Secure-Processor (card payments). We send each provider only the data necessary for its function.

AI providers receive the prompts, food photographs and selected profile information you submit to generate the results you request. Their retention and use of this information are described below.

Clerk, Inc. provides sign-in. Its privacy information is at https://clerk.com/privacy. OpenAI’s privacy information is at https://openai.com/policies/privacy-policy. Google’s privacy information is at https://policies.google.com/privacy. Vercel’s privacy information is at https://vercel.com/legal/privacy-policy. Neon’s privacy information is at https://neon.com/privacy-policy.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.

AI Processing and Model Training

QUICK FIT LTD does not use your inputs or outputs to train its own models. We send prompts, food photographs and the profile details you include to n8n, and to OpenAI where an image or code feature is invoked, so those providers can return the generation you requested. We do not authorise those providers to use that content to train their general models. Any abuse-monitoring retention is the period described in the provider’s current privacy notice. You can ask info@yum-mi.com for the current retention arrangement.

Providing content for a generation does not grant an unrestricted right to use health information for unrelated purposes.

Automated Processing

The tools produce recipe suggestions and nutritional estimates for you to review. They do not decide credit, employment, insurance, or access to an essential service.

International Transfers

Account data, authentication data, payment status and the prompts or photographs needed for a generation may be processed outside the UK, including in the United States, by Clerk, OpenAI, Google, Vercel, Neon and n8n, and by Secure-Processor in the country where it hosts checkout.

Where a transfer safeguard is required, we use the mechanism that applies to that provider under UK GDPR or, where EU GDPR applies, under EU GDPR. You can obtain information about these safeguards by contacting info@yum-mi.com. If you are in the EEA, you can use the same address to ask about our EU GDPR arrangements, including any EU representative we are required to appoint.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Data Retention

We retain Account information for as long as the account is open and for as long afterwards as needed to handle a dispute or legal claim. We retain uploaded photographs, prompts and generated results for as long as the account is open so we can provide the result you requested, unless you ask us to delete them sooner. We retain nutrition profile and health information for the same period, and we stop using it for personalisation when you withdraw consent. We retain purchase and accounting records for 6 years from the end of the financial year of the transaction, to meet UK company record-keeping duties. We retain technical logs for as long as needed to secure the service and investigate abuse, and support correspondence for as long as needed to resolve the request and any follow-up.

We delete or anonymise information after the applicable retention period unless further retention is required by law or necessary for an ongoing dispute. AI-provider retention is the abuse-monitoring period stated in that provider’s current privacy notice.

Your Rights

Subject to applicable law and the relevant conditions, you may request access, correction, deletion, restriction of processing or portability of your personal data.

You may object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you may withdraw it at any time.

Contact info@yum-mi.com to exercise your rights. Requests are normally free of charge and are handled within the applicable statutory period, normally one month under the UK GDPR or EU GDPR. We will explain any lawful extension or permitted pause where required.

You may complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or another competent supervisory authority.

Children

Yum-mi is intended for adults aged 18 and over. If you believe that a child has provided personal data through our service, contact info@yum-mi.com so that we can investigate and take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and update the date at the top of the policy.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at info@yum-mi.com.