Privacy Policy
Vibe Yum (“we”, “us”) is a family recipe database and companion apps (web, iOS, Android, and optional AI connectors). This Privacy Policy describes how we handle information when you use Vibe Yum at https://app.consumer.vibeyum.com and related services (including this site at https://consumer.vibeyum.com).
Who we are
- Product: Vibe Yum
- Operator: Zadius LLC
- Contact: support@vibeyum.com
Information we collect
Depending on how you use the product, we may process:
- Account information: your name, email address, and profile photo when you sign in with Apple, Google, or email and password, plus your sign-in provider. If you use Hide My Email with Apple, we receive Apple’s relay address. Passwords are handled by Google Firebase Authentication; we never see or store them.
- Recipe, shopping list, meal plan, sharing-group, and preference data you create or edit in the app (stored in our Firebase / Google Cloud backend for your account and people you explicitly share with).
- Dietary and allergen tags (for example Gluten-free or Peanut-free) are labels you or your family set on recipes. We use them only to search and filter your recipes. We don’t infer anything about your health or beliefs from them.
- Photos you choose from your library or take with your camera for recipes, lists, meal plans, or your profile. They are stored with your account in Google Cloud Storage. We only access the camera or library when you choose to.
- Device push token, if you allow notifications, so we can tell you about shares and invites. You can turn this off in your device settings.
- Gravatar: if you have no profile photo, Vibe Yum checks Gravatar, a service run by Automattic, for a picture and public name linked to your email address. To do this we send Gravatar a one-way hash of your email address, not the address itself. To stop showing your Gravatar picture, remove it on the Account page and tap Save.
- Subscription status: purchases are handled by Apple, Google Play, or our web checkout, and managed through RevenueCat. We receive your subscription status, not your card number.
- Security signals needed to keep the service safe, such as sign-in sessions, app-integrity checks, and basic logs.
- Optional AI assistant connector usage if you connect an assistant, such as Claude or ChatGPT, which you authorize. It can only act on your signed-in account and on content you own or that is shared with you. You can disconnect it at any time.
We do not sell your personal information. We do not use analytics or advertising SDKs to track you, and we do not use an advertising ID.
How we use sign-in data
If you sign in with Google, we use Google account data only to:
- Authenticate you into Vibe Yum
- Show your account identity in the app (name / photo when available)
- Apply the sharing permissions tied to your account
We do not use Google user data for advertising. Use of Google user data is limited to providing or improving user-facing features of Vibe Yum consistent with Google API Services User Data Policy (including Limited Use requirements where applicable).
If you sign in with Apple, we use the name and email Apple shares (which may be a private relay address) only to create and identify your account.
If you sign in with an email address and password, we use that email address to identify your account and to send account emails such as verification. Passwords are handled by Google Firebase Authentication.
How we store and share data
- Primary application data is stored in Google Firebase / Google Cloud (including the hosting for the optional AI assistant connector).
- We share recipes / lists / plans with other users only when you use sharing features (for example sharing groups or invites you create).
- We may disclose information if required by law or to protect the security of the service.
These companies run parts of Vibe Yum for us. They use your data only to provide their service to us:
- Google (Firebase and Google Cloud): hosting, sign-in, database, file storage, notifications, and server logs, in the United States.
- Apple: Sign in with Apple and notifications on Apple devices.
- Amazon Web Services: sends our emails, such as sign-in and sharing emails.
- Microsoft: our support mailbox, when you email support@vibeyum.com.
- RevenueCat: subscription status for Vibe Yum Premium.
- Gravatar (Automattic): when you have no profile photo, we may look up a public Gravatar picture and name using a one-way hash of your email address.
- The AI assistant providers you choose to connect.
If a security incident affects your data, we tell you and the services involved, including AI assistant providers, as the law and our agreements require.
Where your data is stored
Vibe Yum is operated by Zadius LLC in the United States. We store your data with Google Cloud in the United States.
AI assistant connectors
You can connect Vibe Yum to an AI assistant such as ChatGPT, Claude, Grok, or Meta’s Muse. When you do, you sign in to Vibe Yum and approve access on a Vibe Yum consent screen. You choose Read and change, or Read only. The assistant can then read (and, if you chose Read and change, change) only the recipes, shopping lists, meal plans, sharing groups, ratings, and settings your account can already access, and only when it calls a Vibe Yum tool during your conversation. The data returned by a tool is sent to that assistant’s provider and handled under that provider’s privacy policy. We don’t receive your conversation, only the tool requests the assistant sends. We keep a record of each change an assistant makes (your email, the tool, what changed, and the time) to show you what changed and to prevent abuse.
We use data from AI assistant connections only to do what you ask and to run, secure, support, and improve the Vibe Yum connector. We don’t sell it, use it for advertising, build profiles from it, infer sensitive characteristics from it, or use it to train AI models. We share it only as needed to do what you asked, for example with the person you share a list with. The assistant’s provider handles what it receives under its own privacy policy and settings, including whether it uses your conversations to improve its models.
You can disconnect an assistant at any time in the assistant’s settings. When an assistant disconnects or revokes its access, Vibe Yum stops accepting its tokens within about a minute and deletes that connection’s sign-in records and any proposals it hadn’t saved. Access tokens expire within an hour and refresh tokens within 30 days.
Retention
We keep account and content data while your account exists and as needed to provide the service. Other data is kept for these periods:
| Data | Kept |
|---|---|
| Account and content | While your account exists |
| After you delete your account in the app | Your sign-in account is deleted at once. Your content is removed from view at once and deleted from our live systems within 30 days. Backup copies are deleted within 100 days after that (see Backups) |
| AI connector access tokens | 1 hour |
| AI connector refresh tokens | 30 days from issue, and deleted on use or revoke |
| Sign-in sessions for connectors (login and consent state, authorization codes) | Minutes; deleted automatically |
| AI recipe proposals | Can be approved for 1 hour. The record of whether it was saved is deleted 30 days later, or when the assistant is disconnected |
| Records that an assistant connection was revoked | 2 hours |
| Request ids for repeated assistant requests | 24 hours |
| Request counters for rate limits | Minutes |
| AI change records | 90 days, then deleted; deleted with your account |
| Unused connector registrations | 180 days after last use |
| Sharing invites and invite links | Expire after 14 days |
| Email delivery records | 30 days |
| Addresses that bounced or marked our email as spam | Kept on a do-not-email list so we don’t send to them again |
| Support emails | As long as we need them to help you |
| Server logs | 30 days |
| Database backups | Daily backups kept 90 days, and point-in-time recovery for 7 days. Copies of deleted data are gone within 100 days after it’s deleted from live systems |
| Purchase records | As required by law and by the app stores |
You can delete your account in the app: open Account, then tap Delete account. Your sign-in, profile, and profile photo are deleted right away, your AI assistant connections stop working, and you are removed from anything other people shared with you. Recipes, grocery lists, meal plans, and groups you own disappear from the app right away and are permanently erased, with their photos, about 30 days later. Copies of your recipes that other people already saved stay in their accounts. Deleting your account does not cancel a subscription you bought through Apple or Google; cancel it in the App Store or Google Play. You can also email support@vibeyum.com to ask us to delete your account.
We keep a small amount of information after deletion: email delivery records for up to 30 days, short-term service logs, and your email address on our do-not-email list if an email to you bounced or you marked one as spam.
Backups
We keep backups of our database so we can recover from mistakes or outages. When you delete your account, your content is removed from Vibe Yum right away and deleted from our live systems within 30 days. Copies in our backups are deleted automatically within 100 days after that.
Our backups are encrypted, only the people who run Vibe Yum can access them, and we use them only to recover our systems, never for anything else.
Your choices
- You can sign out in the app.
- Delete your account in the app (Account, then Delete account), or email us to request access, correction, or deletion: support@vibeyum.com.
- Disconnect an AI assistant in that assistant’s connector settings.
- Turn notification types on or off in the app or through a connected assistant.
- Turn Let people find me by email on or off.
- You can revoke Apple or Google sign-in access in your Apple Account or Google Account settings.
Children
Vibe Yum is not directed at children under 13 (or the age required in your jurisdiction). Teens aged 13 to 17 may use Vibe Yum with a parent or guardian’s permission where local law requires it.
Changes
We may update this Privacy Policy. The “Last updated” date will change when we do. Continued use after an update means you accept the revised policy.
Contact
Questions about this Privacy Policy: support@vibeyum.com.