1. Introduction

Welcome to Yumm-AI ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ([Insert Website URL]) and use our mobile application (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect several types of information from and about users of our Services, including:

A. Information You Provide to Us Directly

• Account Information: When you register, we collect your name, email address, password, and profile information.

• Authentication Data: If you choose to log in via third-party services (e.g., Google Sign-In, Apple Sign-In), we collect the verification tokens and profile data provided by those services.

• Dietary and Health Information: To provide personalized recipes (e.g., Macro Chef, Pantry Chef), we collect your dietary preferences, food allergies, macro-nutrient goals, and pantry inventory data.

• User-Generated Content: Information you submit such as saved recipes, cooking notes, custom ingredients, and bug reports.

• Communications: Records and copies of your correspondence (including email addresses) if you contact us for customer support.

B. Information Collected Through Device Features

• Camera and Photos: Our Services include features like the "Fridge Scanner" and "Receipt Scanner." With your explicit permission, we access your device’s camera and photo gallery to capture images. These images are processed to extract ingredient data. Images may be securely uploaded to our cloud storage partners (e.g., Cloudinary) for processing.

• Push Notifications: With your consent, we may send push notifications regarding recipe updates, meal plans, or account alerts.

C. Information Collected Automatically

• Usage Data: Details of your access and use of the Services, including traffic data, location data, logs, and other communication data.

• Device Information: We collect information about your mobile device or computer, including the hardware model, operating system version, unique device identifiers, and mobile network information.

• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to track the activity on our Service and store certain information to enhance your user experience.

D. Payment Information
If you make in-app purchases or subscribe to premium features, your payment is processed directly through third-party platform providers (e.g., Apple App Store, Google Play Store). We do not collect or store your financial profile or full credit card numbers, though we may receive purchase confirmation tokens to grant you access to premium features.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide and Maintain the Services: Including account management, authentication, and displaying your pantry inventory and meal plans.

• Personalize Your Experience: Using AI to generate custom recipes based on your specific dietary preferences, available ingredients, and macro goals.

• Process Image Data: Analyzing photos from the fridge or receipt scanners to automatically update your digital pantry.

• Communicate with You: Sending you service-related notices, security alerts, and promotional messages (which you can opt out of at any time).

• Improve Our Services: Analyzing usage metrics and bug reports to enhance application performance, debug issues, and develop new features.

• Ensure Security: Monitoring against fraudulent activities, unauthorized access, and maintaining data integrity.

4. How We Share Your Information

We do not sell your personal data. We may share your information in the following situations:

• Service Providers: We may share your data with trusted third-party vendors who assist us in operating our Services (e.g., cloud hosting, email delivery systems, image processing services like Cloudinary, and push notification services).

• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

• Business Transfers: If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your data is transferred and becomes subject to a different Privacy Policy.

5. Data Retention and Security

• Retention: We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Account data is retained until you delete your account or request data deletion.

• Security: We use industry-standard administrative, physical, and technical safeguards (such as JWT authentication and secure storage) to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Your Data Privacy Rights

Depending on your location (such as under the GDPR, CCPA, or similar laws), you may have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you.

• Right to Deletion / Erasure: You can delete your account and associated data at any time via the "Delete Account" / "Profile Options" section within the app or website settings.

• Right to Rectification: You can update or correct your profile and dietary preferences directly in the app.

• Right to Opt-Out: You can opt-out of marketing communications and disable push notifications through your device settings.

To exercise these rights, please contact us at [Insert Contact Email].

7. Children's Privacy

Our Services are not intended for use by children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personally identifiable information from children. If you become aware that a child has provided us with Personal Data, please contact us. If we verify that we have collected Personal Data from a child without verification of parental consent, we take steps to remove that information from our servers.

8. Third-Party Links

Our Services may contain links to other websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.