Privacy Policy

Last updated: October 2, 2026 · Effective: October 2, 2026

This policy explains what information Yumizo (the “app”) collects, why, who we share it with, how long we keep it, and the choices and rights you have. It applies to the app on iPhone, iPad and Android, and to https://yumizo.app where the website links to this policy.

If you live in Washington or Nevada, or you want the details on how we handle health-related information, also read our Consumer Health Data Privacy Policy at https://yumizo.app/consumer-health-privacy.

1. The short version

• You must be 18 or older to use the app.
• You can start without signing up. The app creates an anonymous account the first time you open it. You can save your progress later with Apple, Google or an email address.
• Health data only with your consent. Your age, sex, height, weight, weigh-ins, body goals and your answers about your eating habits are health data. We ask for your explicit consent before we collect them, and you can withdraw it any time in the app.
• AI features only with your consent. Meal photos, voice, meal descriptions and meal-plan requests are sent to a third-party AI service provider to estimate nutrition and write meal plans — but only after you allow it in the app. Our AI service provider is contractually barred from using that information to train its AI models.
• No ads. No selling. No tracking across apps. We don’t show ads, we don’t sell your personal information, and we don’t share it for cross-context behavioral advertising.
• Your data, your controls. You can download your data, request a full copy, and delete your account from inside the app.
• Estimates, not medical advice. Calorie and nutrient figures are estimates. Nothing in the app is medical advice.

2. Who we are

FAMO Connect LLC, a Georgia limited liability company based in Tucker, Georgia, USA (“we”, “us”, “our”), provides the app and is responsible for your personal information.

• Privacy questions and requests: privacy@yumizo.app
• General support: support@yumizo.app

Yumizo is not currently offered in the European Economic Area, the United Kingdom or Switzerland.

3. Age requirement

The app is made for adults. You must be at least 18 years old to use it. The app asks your age during setup. If you tell us you are under 18, setup stops and none of your answers are saved to our servers. See section 16 (“Children”).

4. Information we collect

4.1 Information you give us

Account information

• An anonymous account ID, created automatically the first time you open the app.
• If you save your progress: your email address and, if you choose, a password (sign in with email); or the information Apple or Google shares when you sign in with them — usually your email address (which may be an Apple private relay address) and your name. Passwords are handled by our sign-in service provider (section 9); we never see them in plain text.

Your setup answers (the “interview”)

• Things that are not health data: your main goal type, how long you have been tracking, where you usually eat, your diet type, the units you use, your pet’s name and personality, how you heard about the app (for example, an influencer’s name or a social network), and your reminder preferences.
• Health data (only with your consent — see section 5.1): your age, sex, height, weight, target weight and weekly pace, activity level, body and wellbeing goals, and your answers about eating habits (for example, weekend eating, cravings, habits you want to change, food restrictions, hydration, meals per day and fasting preferences).

Your diary and trackers

• Meals and foods you log, with their names, portions and calorie and nutrient values; water; fasts; workouts; your step goal; and weigh-ins.
• Saved meals, custom foods, your meal plan and the dishes you rate in it.
• Your nutrition plan (daily calorie and macro targets and goal date) and any targets you set yourself.

Meal photos, voice and descriptions (AI features — only after you allow AI processing, see section 5.2)

• Photos of meals and nutrition labels you take or pick from your photo library.
• Voice: depending on the voice option you use, either the words your phone’s own speech recognition heard (Your phone), or your voice itself, recorded or streamed while you speak, for our AI service provider to turn into words (Smart listening).
• Meal descriptions you type, and corrections you ask the AI to make.
• For a meal plan: your calorie and macro targets, diet, foods to leave out (including allergies), meals per day, cooking time, servings, your eating-habit answers (the health-related ones only while health-data consent is on), and the dishes you rated.

Your pet, rewards and settings

• Your pet’s state, hearts, Berries, outfits and scenery; streaks, quests and savers; your Home layout; reminder times; sound, haptics and unit settings.

Messages to us

• Feedback you send from the app (for example, a report that a meal estimate was wrong, with the meal it concerns), support and feature requests, and any email address you give us for a reply.
• Requests for a full copy of your data, including the email address you want it sent to.

4.2 Information collected automatically

• Device and app information: app version, platform (iOS or Android), device model and operating-system version, language and region settings, and your time zone (for example, “America/Chicago”). We use your time zone to know when your day starts; we do not collect your precise location.
• Identifiers: your account ID, a random ID for this installation of the app, and installation IDs used by our infrastructure provider’s services (see section 9). The app does not collect your device’s advertising identifier.
• App integrity checks: to block fake or tampered apps, the app obtains an attestation token from Apple or Google and sends it with requests to our servers.
• Usage counters: how many AI logs, corrections, transcriptions and meal plans you have used today, and how many barcodes we have looked up for you today in an outside food database (section 9.3), so we can apply daily allowances and fair-use limits fairly across your devices.
• Server logs: when the app calls our servers, we log technical details such as your account ID, the time, the type of request, how long it took and whether it succeeded. Our infrastructure provider’s request logs also record your IP address. We never log the content of your photos or voice recordings.
• Searches that find little or nothing: when a food search returns no or few exact matches, we log the first 40 characters of the search words so we can improve the food library. This log does not include your account ID or any other identifier, and it is written apart from the record of your request.
• Crash reports: when the app crashes or hits a serious error, it sends a crash report (see section 5.4).
• Analytics (only if you turn it on): which screens get used and where the app gets stuck (see section 5.3).

4.3 Information from others

• Apple and Google sign-in: your email address and name, if you sign in with them.
• App stores and our purchase-management provider: whether you have an active subscription, your purchase history (for example, a Berry pack purchase and its transaction ID), renewal and refund status. We do not receive your payment card details.
• Food databases: nutrition data for foods and packaged products. This is information about food, not about you.

4.4 Information that stays on your device

Some information is kept only on your phone or tablet, including a local copy of your diary for offline use, the voice option you picked, the timer for a limited-time offer, and whether you have seen certain screens. If you withdraw health-data consent, your health answers stay on your device (so you can pick up where you left off if you give consent again), and new weigh-ins are kept on your device instead of being sent to our servers.

5. Your consents

You can review and change all of these in the app under Me › Privacy › Your consents. We record when you gave or withdrew each consent, and which version of the consent wording you agreed to.

5.1 Health data

Before the app asks for any body information, it asks for your explicit consent to use your health data to build and update your plan. The app cannot build a personal plan without it.

If you withdraw consent:

• We stop using your health data. Your health answers are removed from our servers; they remain on your device only.
• Your plan pauses: your goals are put on hold and the app counts against a standard day instead.
• New weigh-ins stay on your device and are not sent to our servers.
• Your diary stays. Meals, water and weigh-ins you already logged remain in your account until you delete them or delete your account.
• The health-related answers are also removed from any saved meal plans.

You can give consent again at any time and the app picks up where it left off.

5.2 AI processing of your meals

Nothing is sent to our AI service provider until you allow it. The first time you use an AI feature — logging a meal from a photo, a nutrition label or your voice, “Analyze with AI,” “Adjust with AI,” or generating a meal plan — the app explains what will be sent, who receives it and why, and asks you to Allow or choose Not now.

• What is sent: meal and label photos; your voice, or the words your phone heard; what you type about a meal; and, for a meal plan, the inputs listed in section 4.1. We do not send your name or email address with these requests.
• Who receives it: our AI service provider, listed in section 9, acting on our behalf.
• Why: to estimate the foods, portions and nutrients in your meal, and to write your meal plan.
• No training: our provider’s terms bar it from using this information to train its AI models.
• Not now: nothing is sent. Search, barcode scanning, quick add and your own foods still work, and the app will ask again the next time you use an AI feature.
• Withdrawing: switch it off in Your consents. From then on nothing is sent, and the app asks again before sending anything. If we materially change what is sent or who receives it, the app asks for your consent again.

5.3 Analytics

Analytics is off by default. If you turn it on, the app sends usage information to our analytics provider (section 9): which screens are used, app opens and sessions, how far you got through setup, which paywalls were shown, whether a purchase was started or made (and of which product), and when the app asked your device to show its review prompt.

If you have also given health-data consent (section 5.1), analytics includes events that say you logged a meal (and which way, for example by photo, voice, barcode or search), started or ended a fast (and whether it reached its goal), logged a workout, or got a meal plan. These events carry the type and outcome only — never which foods, how much, or your body information. Withdrawing either consent stops them.

Analytics never includes what you eat or weigh, your photos or your voice, or your name, email address or account ID. It uses a random ID for this installation of the app, and our analytics provider works out an approximate location (such as your country and city) from your IP address. Setup asks whether you want to turn it on, and you can change it any time in Your consents. Nothing in the app depends on it.

5.4 Crash reports

Crash reports are always sent so we can find and fix problems that could, for example, lose someone’s diary. The app tells you this on the Your consents page. A crash report contains technical information such as the error and where in the code it happened, device model, operating-system version, app version, free memory and disk space, and an installation ID. Crash reports never include your meals, weight or photos.

5.5 Device permissions

The app asks your device’s permission before it uses the camera (to photograph meals and scan barcodes), your photo library (only the photos you pick), the microphone and speech recognition (for voice logging), and notifications (for reminders). You can change these at any time in your device’s settings.

You choose the voice option in Me › Application › Voice logging. If you use Your phone (the default), your phone’s own speech recognition turns your voice into text. That service is provided by Apple or Google as part of your device’s operating system. The app asks for recognition on the device; where your phone or language can’t do that, Apple or Google may process the audio on their servers under their own terms. If you use Smart listening, your phone streams your voice directly to our AI service provider instead (section 8), under section 5.2.

6. How we use your information

We use your information to:

1. Provide the app: create and keep your account, sync your diary and settings across your devices, restore your data when you sign in on a new phone, and run your pet, rewards and reminders.
2. Build and update your plan from your health data (only with consent): daily calorie and macro targets, pace and goal date.
3. Run the AI features (only with consent): estimate nutrition from photos, voice and descriptions, apply your corrections, and write meal plans.
4. Look up foods: search our food database and look up barcodes.
5. Handle purchases: unlock Plus, credit Berry packs, restore purchases and apply daily AI allowances.
6. Keep the app secure and working: verify app integrity, prevent abuse and fraud, enforce fair-use limits, diagnose crashes and errors, and keep the service running.
7. Improve the app: understand which features are used (only if analytics is on), learn which foods people search for but can’t find, and review feedback about inaccurate estimates.
8. Support you: answer your messages and handle your data requests.
9. Meet legal obligations: respond to lawful requests, keep required records and enforce our Terms of Service.

We do not use your information to show you ads, to build advertising profiles, or to make decisions about you that have legal or similarly significant effects. We do not train our own AI models on your information.

7. Our reasons for using your information

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that already happened.

8. How the AI features work

When you use an AI feature, the app sends your photo, your words or a voice recording to our servers, which pass them to our AI service provider and return the result.

Smart listening is the one exception. While you speak, your phone streams your voice directly to our AI service provider, using a short-lived key from our servers that can start only that one listening session. Because your phone connects to the provider itself, the provider also receives your IP address and basic connection data from your device (such as the time of the connection and the software making it). The words it hears come back to your phone, and the meal is then estimated through our servers like a meal you typed. Everything else goes through our servers.

The results are automated estimates. They can be wrong, especially for mixed dishes, sauces, oils, drinks and anything the camera can’t see. You can edit any value, and you can tell us how an estimate did with the thumbs up or down.

Your calorie targets, goal date, nutrition scores, awards and meal plans are also generated automatically from your answers and your diary. They are meant to guide you, not to decide anything about you, and they do not have legal or similarly significant effects. Nothing in the app is medical advice.

9. Who we share information with

We share personal information only as described here.

9.1 Service providers (processors)

These companies process personal information on our behalf, under contracts that limit their use of it to providing their services to us.

Our AI service provider processes what we send under its terms for business customers, which prohibit it from using that information to train its AI models. It may keep information briefly to provide the service and to detect abuse, as its terms allow.

9.2 Companies that act independently

• Apple and Google as app stores. When you buy a subscription or Berries, you pay Apple (App Store) or Google (Google Play). They process your payment under their own privacy policies.
• Apple and Google as sign-in providers, if you choose to sign in with them.
• Apple and Google as device providers, for app-integrity checks and, if you use the Your phone voice option, speech recognition (section 5.5).

9.3 Food databases

We host our own copy of the OpenNutrition food database, so food searches don’t go to OpenNutrition. When a barcode isn’t in that database, our servers look it up in Open Food Facts. Only the barcode number is sent — never your account ID or other information about you.

9.4 Other disclosures

We may also disclose information:

• If the law requires it, for example in response to a valid court order, and to protect the rights, property or safety of our users, the public or us.
• In a business transfer, such as a merger, acquisition or sale of assets, subject to this policy. We will tell you before your information becomes subject to a different privacy policy.
• At your direction, for example when you share your data export file.

9.5 What we don’t do

• We do not sell your personal information.
• We do not share your personal information for cross-context behavioral advertising.
• We do not show ads in the app, use your information for targeted advertising, or give it to data brokers.

10. Advertising and tracking

The app contains no ads. It does not collect your device’s advertising identifier, and it does not ask to track you. We do not track you across other companies’ apps or websites, and we do not use your health data, diary, photos or voice for any advertising purpose.

11. Where your information is stored

We are based in the United States. Our servers, database and file storage are in the United States. Our AI service provider may process requests in any of the locations where it operates. RevenueCat is based in the United States.

If you use the app from outside the United States, your information is transferred to and processed in the United States, where data protection laws may differ from those where you live.

12. How long we keep your information

We keep information only as long as we need it for the purposes in this policy.

We may keep information longer if the law requires it or to resolve a dispute, but only for that purpose.

13. Deleting your data and your account

• Delete an entry: you can edit or delete any meal, weigh-in or other diary entry. Deleting a meal also deletes its photo, unless a copy of that meal you made still shows it. All photos are deleted when you delete your account.
• Delete your account: open the Me tab and tap Delete my account. For a saved account, you’ll be asked to confirm it’s you. We then immediately delete your account, your profile, diary, meal photos, pet, rewards, settings, and the feedback and data requests linked to your account. About an hour later, a second clean-up removes anything a device that was still signed in may have saved in the meantime. This can’t be undone.
• Logging out of an anonymous account deletes it and its data (the app warns you first).
• Subscriptions are separate. Deleting your account or the app does not cancel a subscription. Cancel it in your App Store or Google Play account settings.
• If you can’t access the app, email privacy@yumizo.app, or follow the steps at https://yumizo.app/delete-account. We will need to verify that the account is yours (section 14.5), and we delete it within 30 days.

14. Your choices and rights

14.1 Tools in the app (everyone)

Your export file contains links to your meal photos. Anyone who has one of those links can view that photo, so take care when sharing the file.

14.2 Your rights

Depending on where you live, you may have the right to:

• access your personal information and get a copy of it;
• correct inaccurate information;
• delete your information;
• restrict or object to how we use it;
• data portability — receive the information you gave us in a machine-readable format, or have it sent to another company;
• withdraw consent at any time, without affecting earlier processing; and
• complain to a privacy regulator where you live.

Most of these you can do yourself with the tools in section 14.1. For anything else, see section 14.5.

14.3 If you live in the United States

No sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not use personal information for targeted advertising or for profiling that produces legal or similarly significant effects.

Where a state’s comprehensive privacy law applies to us (for example, in California, Colorado, Connecticut, Oregon, Texas or Virginia), you may have the right to:

• know and access the personal information we have collected about you, including the categories, sources, purposes and the categories of recipients;
• correct inaccurate personal information;
• delete personal information;
• data portability;
• opt out of sale, sharing, targeted advertising and certain profiling (we don’t do these);
• limit the use of sensitive personal information (see below);
• withdraw consent to the processing of sensitive data;
• appeal a decision we make on your request; and
• not be discriminated against for exercising your rights.

Sensitive personal information. We collect health information and account log-in credentials, which are “sensitive” under California law and “sensitive data” under other state laws. We process health information only with your consent, and we use sensitive personal information only to provide the app you asked for, to keep it secure and working, and for other purposes the law permits without offering a right to limit. Because we don’t use it for anything else, the California “right to limit” does not apply — but you can always withdraw your consents in the app.

Do Not Track and Global Privacy Control. Because we don’t sell or share personal information or track you across other sites and apps, a “Do Not Track” or Global Privacy Control signal doesn’t change how we process your information. Our website uses no cookies, analytics or tracking.

Appeals. If we decline your request, you can appeal by emailing privacy@yumizo.app with the subject “Privacy appeal.” We will respond within the time your state’s law requires (generally 45 or 60 days). If you are not satisfied, you can contact your state attorney general.

Consumer health data. Residents of Washington and Nevada have additional rights over consumer health data. See our Consumer Health Data Privacy Policy at https://yumizo.app/consumer-health-privacy.

14.4 California: notice at collection and disclosures

Where the California Consumer Privacy Act applies to us, this section is our notice at collection. The table describes the personal information we collect and have collected in the past 12 months.

We do not collect biometric information. Your photos and voice are not used to identify you.

14.5 How to make a request

• In the app: use the tools in section 14.1. Requests made while signed in are verified by your sign-in.
• By email: privacy@yumizo.app. Tell us what you want and which account it concerns.

To protect your information, we verify that a request comes from the account holder — for example, by asking you to send the request from the app while signed in, or to confirm access to the email address on the account. An anonymous account can only be identified from the app on your device, so please use the in-app tools for it.

You may use an authorized agent where the law allows. We will ask for proof that the agent is authorized and may ask you to verify your identity directly.

We respond to requests within 45 days, and may extend this once by 45 days where the law allows, telling you why.

15. How we protect your information

• Information travels between the app and our servers encrypted (TLS), and our infrastructure provider encrypts it at rest.
• Security rules allow only you, signed in to your account, to read or change your account’s data. Usage counters and purchase records can only be changed by our servers.
• Our servers check that requests come from genuine copies of the app (app-integrity checks). The one exception is account deletion, which always works so you can never be locked out of deleting your account.
• Deleting a saved account requires you to have signed in recently.
• Our server code runs with only the permissions it needs, and secrets are kept in a managed secret store.
• We do not log the contents of photos or voice recordings.
• Meal photos are stored in access-controlled storage and served through links that contain a hard-to-guess token.

No system is perfectly secure. If we become aware of a breach that affects your information, we will notify you and the authorities as the law requires.

16. Children

The app is not for anyone under 18, and it is not directed at children under 13. We do not knowingly collect personal information from children under 13, or from anyone under 18.

If someone says they are under 18, setup stops and we do not save their answers to our servers. The anonymous sign-in ID that is created when the app is first opened holds no other information and is deleted automatically after 90 days of inactivity.

If you believe a child has given us personal information, contact us at privacy@yumizo.app and we will delete it.

17. Links to other services

The app links to other services, such as our social media pages, the food databases’ websites, and the App Store or Google Play. Their privacy practices are governed by their own policies.

18. Changes to this policy

We may update this policy. If we make a material change, we will tell you in the app or by email before it takes effect and, where the law requires, ask for your consent again. The “Last updated” date at the top shows when the policy last changed.

19. Contact us

FAMO Connect LLC
Tucker, Georgia, USA
Privacy: privacy@yumizo.app
Support: support@yumizo.app