Privacy Policy

Last updated: April 10, 2026

This Privacy Policy describes how Yaaam ("we", "our", or "the app") collects, uses, and protects your information when you use our mobile application.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address (if you sign up with email)
  • Apple Account information (if you sign up with Apple Sign In — only the name and email you choose to share)

Profile Information

During onboarding, you provide:

  • Gender
  • Height and weight
  • Date of birth
  • Activity level
  • Weight goal

This information is used solely to calculate your personalized daily calorie and macronutrient goals.

Meal Data

When you log meals, we collect:

  • Text descriptions of meals you enter
  • Photos of meals you choose to upload
  • AI-generated nutritional analysis results (calories, protein, fat, carbs, ingredients)
  • Meal dates and timestamps
  • Portion adjustments you make

Weight Data

If you use the weight tracking feature, we store your weight entries and dates.

Subscription Information

If you subscribe to Yaaam Pro, purchase and subscription status is managed by Apple and RevenueCat. We do not collect or store your payment information directly. We receive subscription status information to provide access to premium features.

How We Use Your Information

We use your information to:

  • Calculate personalized daily calorie and macro goals
  • Analyze meals using AI (photos and text descriptions are sent to OpenAI for nutritional analysis)
  • Track your nutrition and weight progress over time
  • Display your data in the app, including the home screen widget
  • Manage your subscription status

Third-Party Services

Supabase

We use Supabase for authentication and data storage. Your account and meal data is stored on Supabase servers. See Supabase Privacy Policy.

OpenAI

Meal photos and text descriptions are sent to OpenAI's API for nutritional analysis. This data is processed according to OpenAI's API Data Usage Policy. OpenAI does not use API inputs to train their models.

RevenueCat

We use RevenueCat to manage subscriptions. RevenueCat receives an anonymous user identifier to track subscription status. See RevenueCat Privacy Policy.

Apple

Sign In with Apple and in-app purchases are processed by Apple. See Apple's Privacy Policy.

Data Storage and Security

  • Your data is stored on Supabase servers with row-level security
  • Authentication uses industry-standard protocols (OAuth 2.0, PKCE)
  • Passwords are never stored — we use passwordless email authentication (one-time codes)
  • Photos are processed for analysis and are not shared with other users

Data Retention

  • Your data is retained as long as your account is active
  • You can delete individual meals and weight entries at any time within the app
  • To delete your entire account and all associated data, you can do so directly in the app settings

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Delete your data by removing individual entries or requesting full account deletion
  • Export your data by contacting us

Your Rights Under GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Data Controller: Konrad Hawro, doing business as OFF Konrad Hawro, ul. Obornicka 89/7, 51-114 Wrocław, Poland. VAT: PL6121837728.

Legal Basis for Processing:

  • Contract performance — processing your profile and meal data is necessary to provide the app's core functionality
  • Legitimate interest — improving the app and ensuring security
  • Consent — where required, such as for marketing communications (if any)

Your GDPR Rights:

  • Right of access — request a copy of all personal data we hold about you
  • Right to rectification — correct inaccurate or incomplete personal data
  • Right to erasure ("right to be forgotten") — request deletion of your personal data
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interest
  • Right to withdraw consent — where processing is based on consent, withdraw it at any time

How to Exercise Your Rights:

Contact us at the email address listed below. We will respond to your request within 30 days.

International Data Transfers:

Your data may be transferred to and processed in countries outside the EEA (including the United States) through our service providers (Supabase, OpenAI, RevenueCat). These transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

Right to Lodge a Complaint:

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO) — uodo.gov.pl.

Children's Privacy

Yaaam is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: [email protected]
Business: OFF Konrad Hawro, ul. Obornicka 89/7, 51-114 Wrocław, Poland. VAT: PL6121837728.