Yolky turns a photo of food into a recipe. To do that we have to receive your photo, and to keep your cookbook we have to store what we make from it. This page says exactly what that involves — what is collected, who processes it, how long it lasts and how to get rid of it.
1. Who we are
Yolky is operated by Pypple Tech, a company registered in the State of Wyoming, United States ("Pypple Tech", "we", "us"). Pypple Tech is the data controller for the personal data described here. You can reach us at hello@pyppletech.com.
This policy covers the Yolky mobile app, its share extension and widgets, and this website.
2. What we collect
| Category | What it is | Where it comes from |
|---|---|---|
| Photos and images | Pictures of food, screenshots and fridge photos you choose to send. | You, when you pick or take one. |
| Links you import | The URL of a video or recipe page you share into the app, and the public thumbnail and caption that URL returns. | You, plus the public page at that URL. |
| Recipes and cookbook content | The recipes generated for you, plus your edits, notes, collections, grocery list, meal plans and timers. | Generated for you, and anything you type. |
| Account identifier | A pseudonymous user ID. If you sign in with Apple we also store the identifier Apple returns, and the email address Apple provides — which may be a private relay address if you chose to hide your email. | Firebase Authentication / Apple. |
| Onboarding answers | The preferences you give at setup — how you cook, dietary preferences, any goals. Used to personalise the recipes you get. | You. |
| Subscription status | Whether you have an active trial or subscription, which product, and when it renews or lapses. We never see your card details. | Apple, via RevenueCat. |
| Usage analytics | Which screens you open and which actions you take, with device type and app version. Event-level, tied to the pseudonymous ID above. | The app, via Mixpanel. |
| Diagnostics | Server logs and error reports, including timestamps and coarse request metadata. | Our backend. |
| Push token | An Apple push token, only if you allow notifications, so timers and import progress can update on your lock screen. | Apple Push Notification service. |
We do not collect your contacts, your precise location, your health records, your browsing on other apps or sites, or your payment card details.
3. Your photos — the part that matters most
When you send a photo, it is uploaded over an encrypted connection to our storage on Google Cloud, under a path that only your account can read. Our server then sends that image to Google's Vertex AI (Gemini) to identify the dish and produce the recipe, and stores the resulting recipe against your account so it appears in your cookbook.
- Your photos are used to produce your recipe and to show it back to you. Nothing else.
- They are never sold, and never used to target advertising.
- They are not used to train our models — we don't train models. Under the Vertex AI terms that apply to our paid usage, Google does not use content submitted through that API to train its models either.
- Only you can read your uploads: access is enforced per account by our storage rules.
- Fridge photos are treated exactly the same way as food photos.
4. Why we use it, and our legal basis
If you are in the UK, the EEA or Switzerland, the UK GDPR / GDPR requires us to name a legal basis for each purpose:
| Purpose | Data used | Legal basis |
|---|---|---|
| Turning your photo or link into a recipe | Photos, links, onboarding answers | Performance of a contract |
| Keeping your cookbook, grocery list and meal plans | Recipes and cookbook content | Performance of a contract |
| Managing your account and sign-in | Account identifier | Performance of a contract |
| Running subscriptions and trials | Subscription status | Performance of a contract |
| Sending timer and import notifications | Push token | Consent (you allow notifications; you can withdraw in iOS Settings) |
| Understanding which features are used, and fixing bugs | Usage analytics, diagnostics | Legitimate interests — improving the app, balanced against your privacy by keeping the data pseudonymous |
| Preventing abuse and enforcing usage limits | Account identifier, diagnostics | Legitimate interests — keeping the service available and affordable |
5. Who we share it with
We do not sell personal data and we do not share it for cross-context behavioural advertising. We use the following service providers, who process data on our instructions:
| Provider | What it handles | Where |
|---|---|---|
| Google Cloud / Firebase | Authentication, database, photo storage, backend functions | United States |
| Google Vertex AI (Gemini) | Reading the photo and producing the recipe | Google's global endpoint |
| RevenueCat | Subscription and trial status | United States |
| Mixpanel | Product analytics | United States |
| Apple | App distribution, Sign in with Apple, purchases, push notifications | United States |
| TikWM | Only when you import a TikTok link: the public video URL is sent so the thumbnail and caption can be retrieved | Third-party API |
We may also disclose data if we are legally required to, or to establish or defend legal claims. If Pypple Tech is ever acquired or merged, data may transfer to the acquirer, who would remain bound by this policy until it is replaced with notice to you.
6. How long we keep it
- Photos, recipes and cookbook content — until you delete them, or until you delete your account.
- Account identifier and onboarding answers — for the life of the account.
- Subscription records — for as long as needed to run the subscription and to meet tax and accounting obligations.
- Analytics events — retained by Mixpanel under our plan's retention window.
- Server logs — a rolling short-term window for debugging and abuse prevention.
7. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to object to or restrict processing, to data portability, and to withdraw consent at any time.
If you are a California resident, you have the rights to know, delete, and correct, and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not process sensitive personal information for the purpose of inferring characteristics.
To exercise any of these, email hello@pyppletech.com from the address associated with your account, or use the in-app controls. We respond within 30 days. You may also lodge a complaint with your local data protection authority.
8. Deleting your data
You can delete an individual recipe at any time from your cookbook. To remove everything, open Settings in the app (the gear icon on the Cookbook tab) and choose Delete account. That erases your recipes, cookbook, grocery list, meal plans, onboarding answers and every photo you have uploaded.
If you can't reach the in-app control, use the account deletion request page.
9. International transfers
We are based in the United States and our providers are largely US-based, so if you use Yolky from outside the US your data is transferred there. Where we transfer personal data out of the UK or EEA, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) as incorporated into our agreements with those providers.
10. Children
Yolky is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, email us and we will delete it.
11. Security
Data is encrypted in transit with TLS and encrypted at rest by our cloud provider. Access to your stored photos and documents is restricted per account by server-side security rules, and access to production systems is limited to people who need it. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the relevant regulator where the law requires it.
12. Changes to this policy
If we change this policy we will update the date at the top of the page. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
13. Contact us
Pypple Tech
Registered in Wyoming, United States
Email: hello@pyppletech.com
See also the Terms of Use and the support page.