Last updated: 5 May 2026
Yami is designed to collect as little of your data as possible. This page explains what we do collect, why, on what legal basis, who we share it with, and how to remove it. Yami is operated from Sweden, in the EU, and the GDPR is our primary regulatory regime — so this policy is built around your GDPR rights, not as an afterthought.
Yami is operated by Adam Bergman Karlsson, based in Sweden, who acts as the data controller under the GDPR. For any privacy question or request, write to support@yamiapp.eu. Because Yami is established in the EU, no Article 27 representative is required.
This policy covers personal data we process when you use the Yami iOS app, the iOS share extension, and the yamiapp.eu website. It does not cover the practices of third-party services you reach via outbound links (recipe sources, App Store, payment processors, etc.); those services have their own policies.
When you sign up, we store your email address and a hashed password. We never see your plain-text password. Authentication is handled by Supabase, hosted in the European Union.
Anything you save in Yami — recipe links, ingredients, photos you upload or take, the collections you build, the recipes you mark as cooked, your ratings and notes — is stored in your account so the app can show it back to you and to anyone you've explicitly invited to a shared collection. Photos are stored in Supabase Storage in the EU.
If you subscribe to Yami Premium, Apple handles the payment. We receive only an entitlement signal that says "this account has an active subscription". We never see your card details, your full Apple ID, or your purchase history outside of Yami. Subscription state is processed via Superwall and Apple StoreKit 2.
To find and fix bugs and to understand how features are used, Yami sends anonymized usage events and crash reports to PostHog (which uses PLCrashReporter for crashes). These events describe what screens were visited, what taps happened, and what errors occurred — not who you are or what's in your recipes. We do not link these events to your email or your saved content.
When you set up your account, we ask a few optional questions to personalize your experience: your age range, dietary preferences (vegan, vegetarian, pescatarian, keto, high-protein, etc.), cooking frequency, and what you'd like to get out of Yami. These are voluntary, never used for advertising, and only used to surface recipes that are more relevant to you. You can skip them, change them, or clear them anytime under Settings.
Like most apps, Yami receives basic technical data when you connect: device model and OS version, app version, language and region settings, and the IP address used to make the request. We use this to deliver the service, fight abuse, and debug platform-specific issues.
If you email support@yamiapp.eu, we keep that thread to follow up on your issue. We don't add support correspondents to a marketing list.
Some dietary preferences (e.g. religious dietary restrictions, certain allergies) could be considered sensitive data under GDPR Article 9. We treat any dietary preference you supply with that level of care, only use it to filter and personalise recipes inside the app, never share it with third parties, and ask for your explicit consent during onboarding. You can clear or change it at any time.
We process personal data for the following purposes:
We do not use personal data for advertising, profiling for marketing purposes, or training third-party machine-learning models.
Each processing activity is grounded in a specific lawful basis:
Yami uses AI in a few specific places. We want to be transparent about each one:
None of these providers use your content to train their general-purpose models on Yami's behalf, and we do not authorise them to do so. Outputs (translations, plate images) become part of Yami's content (operator-provided per the Terms §5.3).
The third parties that help run Yami:
We do not sell, rent, or share your data with advertisers or data brokers — full stop.
Yami's database and file storage live with Supabase in the EU. Backend services run on Google Cloud Run in europe-west1 (Belgium). Some processors (Google Gemini, Runware, PostHog, Apify, Cloudflare, Apple) operate globally and may process data outside the EU/EEA. Where that happens, we rely on the European Commission's Standard Contractual Clauses, adequacy decisions, or other GDPR-approved transfer safeguards.
We use TLS in transit, encrypted storage at rest where the underlying provider supports it, hashed passwords (never plain text), and least-privilege access controls. We don't claim a system is impossible to breach — we claim we apply current good practice and respond seriously when something goes wrong. Material security incidents affecting your data will be notified to you and (where required) to the supervisory authority within 72 hours of discovery.
If you live in the EU, EEA, UK, or Switzerland, you have the right to:
You can exercise most rights directly in the app (export and delete are under Settings → Account). For anything else — or if something doesn't work — email support@yamiapp.eu and we'll respond within 30 days, as the GDPR requires.
The simplest path: open the app and tap Settings → Account → Delete account. A full data wipe completes within 30 days, with backups rolling off within 90 days. There's no "undo" — once deleted, your library is gone. If you can't access the app, email us from the address on file.
Yami is not intended for users under 18. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe a child has created an account, write to support@yamiapp.eu and we will delete it.
If you're a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a comprehensive privacy law, you generally have rights similar to those in §13 (access, deletion, opt-out of "sale" or targeted advertising). Yami does not "sell" personal information in the sense those laws use, and Yami does not run targeted advertising. To exercise a state-law privacy right, email support@yamiapp.eu from the address on your account; we may need to verify your identity before responding.
If we make a material change to how we handle your data, we'll update the date at the top of this page and notify you in-app or by email. Continued use of Yami after a change means you accept the updated policy.
Privacy questions, data requests, or anything that feels off — write to support@yamiapp.eu. We read every email.