Back to home

Privacy Policy

Last updated: September 2026

Privacy Policy for Yemevo

Protecting your personal data is important to us. This Privacy Policy explains which personal data we process when you use the Yemevo app, for what purposes we process such data, which service providers we use, and what rights you have.

Yemevo is a consumer application for general lifestyle, nutrition, meal-planning, and wellness purposes. Yemevo is not intended for medical diagnosis, treatment, or prevention of disease and does not replace individualized advice from qualified healthcare or nutrition professionals.

1. Data Controller

The controller within the meaning of the General Data Protection Regulation ("GDPR") is:

Monadion GmbH
Schönbrunner Straße 181/1
1120 Vienna
Austria

Managing Director: Ing. Arapsih Güngör, MSc

Commercial Register Court: Commercial Court of Vienna
Commercial Register Number: FN 667594g
VAT ID: ATU82735426

Privacy and support contact:
support@yemevo.com

2. Who is Yemevo intended for?

Yemevo is intended exclusively for individuals aged 18 or older.

During registration and onboarding, we use the date of birth you provide to verify whether you meet the required minimum age.

Yemevo is a lifestyle and nutrition application. In particular, the app provides personalized meal plans, nutrition suggestions, food analysis, tracking features, and simulation-based lifestyle estimates.

Yemevo is specifically not intended to:

  • diagnose diseases,
  • treat diseases,
  • predict or prevent diseases,
  • make medical decisions, or
  • replace medical or nutrition-therapy advice.

3. What data do we process?

Depending on which features you use, we may process the following categories of data.

3.1 Account and identification data

This may include:

  • email address,
  • technical user identifier,
  • login provider,
  • language setting,
  • account status,
  • registration timestamp,
  • necessary technical authentication information.

If you sign in with Google or Apple, information made available by the respective provider may also be processed.

If you use email/password authentication, your password is processed through Firebase Authentication. Yemevo does not store your password in plain text.

4. Profile and lifestyle data

For personalization of Yemevo, depending on the information you provide, we may process:

  • name within your Yemevo profile,
  • date of birth,
  • age,
  • gender,
  • weight,
  • height,
  • target weight,
  • weight goal,
  • target date,
  • activity level,
  • calorie target,
  • meal frequency,
  • preferred cooking time,
  • meal-prep preferences,
  • nutrition priorities,
  • preferred cuisines,
  • favorite foods,
  • disliked foods,
  • specific food restrictions,
  • weight history,
  • steps,
  • water intake,
  • other lifestyle-tracking data you choose to use.

We use this information primarily to provide the Yemevo features you request and to personalize the app according to your settings.

The legal basis is generally Article 6(1)(b) GDPR where processing is necessary to provide the Yemevo features you use. Where processing is based on your consent, the legal basis is Article 6(1)(a) GDPR.

5. Allergies and intolerances

You may voluntarily provide Yemevo with information about allergies and intolerances.

This may include:

  • selected allergies,
  • other allergies,
  • intolerances entered in free-text form.

Such information may reveal details about your health and may therefore constitute special-category personal data under Article 9 GDPR.

We therefore process this information only if you have first explicitly consented to the processing of this sensitive nutrition information.

The legal bases are:

  • Article 6(1)(a) GDPR, and
  • Article 9(2)(a) GDPR.

Your consent is documented separately within Yemevo under the purpose "Sensitive nutrition information."

You may withdraw this consent at any time under:

Profile → Privacy & Data

If you withdraw your consent:

  • we delete your stored allergies,
  • we delete information stored under otherAllergies,
  • we no longer process this information going forward.

Your Yemevo account and other lifestyle data remain intact.

Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before it was withdrawn.

6. Food restrictions

Yemevo may take into account specific food-related rules, for example:

  • no pork,
  • no alcohol as an ingredient,
  • no shellfish,
  • no combination of meat and dairy products.

Yemevo uses these entries exclusively as food and nutrition preferences.

In particular, Yemevo does not infer your religion, religious affiliation, or other belief-related characteristics from such choices.

We do not use these preferences for advertising, religious profiling, or marketing segmentation.

7. AI-powered features

Certain Yemevo features use artificial intelligence.

These include in particular:

  • generation of personalized meal plans,
  • generation of future weekly meal plans,
  • Meal Scan,
  • Metabolic Twin,
  • certain voice features,
  • AI-assisted shopping-list features.

The general AI chat is currently not enabled for consumer users.

AI-generated content is identified in the app using labels such as:

  • "AI-generated",
  • "AI estimate", or
  • "Estimated projection".

8. Consent to AI personalization

External AI features are used only if you have consented to AI personalization.

This consent is separate from:

  • acceptance of the Terms of Use,
  • acknowledgement of the Privacy Policy, and
  • consent to sensitive nutrition information.

Without active AI consent, no new personal data is transmitted to our external AI provider for personalized AI functionality.

You may withdraw your AI consent at any time under:

Profile → Privacy & Data → AI & Personalization

After withdrawal, future external AI requests for your account will be blocked. Your account and previously stored data are not automatically deleted as a result.

The legal basis for this processing is Article 6(1)(a) GDPR.

Where an AI feature processes data that, in the specific context, qualifies as special-category personal data, such processing is carried out only where the required explicit consent under Article 9(2)(a) GDPR is in place.

9. Data minimization for AI requests

Yemevo uses a technical privacy layer designed to limit the information transmitted to external AI systems to what is necessary for the relevant feature.

For standard meal-plan generation, the following information is, in particular, not sent to the external AI service:

  • your name,
  • your email address,
  • your internal Yemevo user ID,
  • your Firebase user ID,
  • Stripe IDs,
  • your full date of birth,
  • your age,
  • your gender,
  • your exact weight,
  • your exact height,
  • your exact target weight,
  • your exact goal date.

Where possible, calculations such as your daily calorie target are performed within Yemevo's own infrastructure.

The AI then receives only the information required to generate the meal plan, for example:

  • calculated calorie target,
  • number of meals,
  • preferred cooking time,
  • meal-prep preference,
  • dietary restrictions,
  • allergies, where the required consents are active,
  • preferred cuisines,
  • favorite or disliked foods,
  • planning priorities,
  • previously used recipe titles.

10. OpenAI

We use the API services of OpenAI for AI-powered functionality.

Depending on the feature used, only the information necessary for that specific function is transmitted to OpenAI.

For standard meal-plan generation, OpenAI does not receive a direct Yemevo account ID, email address, or other direct account identifiers.

A randomly generated technical request or trace ID may be used to associate a single technical process. This identifier is not permanently linked to your user account.

According to OpenAI's current information, data submitted through the API platform is not used to train OpenAI models by default unless the API customer has expressly opted in to such use.

Under standard API configurations, OpenAI may retain API inputs and outputs for up to 30 days for service provision and abuse monitoring purposes. OpenAI also offers separate Zero Data Retention options for eligible configurations.

We do not voluntarily enable the use of your API data for model training.

11. Metabolic Twin

The "Metabolic Twin" is a lifestyle simulation feature.

It allows you, for example, to explore how changes in certain lifestyle factors may potentially affect a projected development.

Depending on the selected scenario, the following information may be processed:

  • current weight,
  • target weight,
  • calorie values,
  • steps,
  • selected scenario adjustments,
  • other lifestyle baseline data necessary for the simulation.

Where necessary for the simulation, minimized baseline and scenario data may be transmitted to the AI provider.

The feature provides estimates and simulations only. Actual results may differ.

The results do not constitute a medical prognosis or diagnosis.

12. Meal Scan

Meal Scan allows you to have a photo of a meal analyzed.

The image is processed temporarily in order to identify foods, ingredients, and estimated nutritional values.

Before external processing, the image is technically normalized.

Yemevo:

  • accepts only supported image formats,
  • removes original image metadata through re-encoding,
  • uses randomized filenames without direct user identifiers,
  • stores Meal Scan images only temporarily,
  • uses short-lived access mechanisms for analysis, and
  • deletes the temporarily stored image after completion or cancellation of the analysis.

This process is specifically intended to prevent original EXIF and GPS metadata from being transmitted to the external AI service.

A Meal Scan image is not stored as a permanent profile image or food-photo archive.

Meal Scan results are AI-based estimates and may be inaccurate.

13. Voice features

Yemevo may use voice input to simplify the recording of certain lifestyle information.

For example, a spoken weight entry may be converted into structured data.

Yemevo does not permanently store the raw voice transcript.

Where interpretation requires AI processing and active AI consent is in place, the transcript may be processed temporarily by our AI provider.

After successful processing, only the relevant structured information is stored, for example a weight value.

Depending on your operating system, speech-recognition functions provided by your device or operating-system provider may also be used. In such cases, Apple's or Google's privacy policies and your device settings may additionally apply.

14. Registration and Firebase Authentication

We use Firebase Authentication by Google for user authentication.

Depending on the login method, the following information may be processed:

  • email address,
  • password or authentication credentials,
  • Firebase User ID,
  • IP address,
  • user agent or technical device information.

Firebase Authentication is used for:

  • registration,
  • login,
  • email verification,
  • password recovery,
  • authentication with the Yemevo backend.

According to Google's current information, Firebase Authentication may process authentication-related data in the United States.

The legal basis for using Firebase Authentication is Article 6(1)(b) GDPR.

15. Google Sign-In

You may voluntarily sign in to Yemevo using your Google account.

When using this feature, data required for authentication is exchanged between Google and Yemevo.

This may include:

  • Google account identifier,
  • email address,
  • name or basic profile information you have made available,
  • authentication information.

We use the information received exclusively for authentication and management of your Yemevo account.

Use of Google Sign-In is voluntary. Where available, you may use another offered login method instead.

16. Sign in with Apple

On supported devices, you may use "Sign in with Apple."

Apple provides Yemevo with the information required for authentication.

Depending on your Apple settings, this may include:

  • Apple account identifier,
  • name,
  • email address or an Apple-generated private relay address.

Apple allows users, during the initial sign-in process, to choose whether to share their real email address or use a private relay address.

We use this information exclusively for authentication and management of your Yemevo account.

17. Hosting and storage with AWS

We use Amazon Web Services ("AWS") for backend and storage infrastructure.

Yemevo's primary infrastructure is configured in the AWS region:

eu-central-1 – Frankfurt, Germany

The following information may be stored or processed there:

  • account data,
  • questionnaire data,
  • lifestyle data,
  • weight-tracking data,
  • meal plans,
  • recipes,
  • shopping lists,
  • goals,
  • consent information,
  • technical AI metadata,
  • temporary Meal Scan files.

We use technical and organizational security measures, including access controls and encrypted communications.

Temporary Meal Scan files are not stored permanently.

18. Stripe and payments

We use Stripe for paid Yemevo subscriptions and payment processing.

Stripe processes the data required for payment and subscription management.

Yemevo stores in particular:

  • Stripe Customer ID,
  • Subscription ID,
  • price or plan information,
  • subscription status,
  • cancellation information.

Yemevo does not store full credit card numbers.

Payment information such as card details is processed directly by Stripe and/or the payment providers involved.

Stripe may act as a processor for certain processing activities and as an independent controller for others.

The legal basis for processing required for contract performance and subscription management is Article 6(1)(b) GDPR.

Where we are required to retain payment or accounting information due to statutory obligations, the legal basis is Article 6(1)(c) GDPR.

Under Austrian tax law, books, records, and supporting documents generally must be retained for seven years. Longer retention may apply in certain cases.

19. Open Food Facts

Yemevo may retrieve barcode and food-product information from Open Food Facts.

In particular, the scanned or entered product barcode is transmitted to the service in order to retrieve available product and nutritional information.

As a rule, we do not transmit your Yemevo email address or Yemevo user ID to Open Food Facts.

Product information obtained from external databases may be incomplete or inaccurate.

20. Technical data and security logs

When using Yemevo, technically necessary information may be processed, for example:

  • IP address,
  • request timestamp,
  • requested endpoint,
  • HTTP status,
  • app version,
  • device or operating-system information,
  • technical error information,
  • randomized trace IDs.

This processing serves in particular to:

  • provide the app technically,
  • maintain system security,
  • detect misuse and errors,
  • ensure stability and troubleshoot issues.

The legal basis is Article 6(1)(f) GDPR.

Our legitimate interest lies in providing Yemevo securely, reliably, and free from misuse.

Where possible, we avoid storing sensitive nutrition information, complete AI prompts, or direct personal content in technical logs.

21. No advertising profiles based on sensitive data

We do not use:

  • allergies,
  • intolerances,
  • weight-related data,
  • specific food restrictions

for personalized advertising or religious or health-related marketing profiling.

Yemevo currently does not create consumer advertising profiles based on such information.

22. AI audit and metadata

For technical monitoring of AI features, we may store limited metadata, for example:

  • randomized trace ID,
  • feature used,
  • model designation,
  • prompt version,
  • timestamp,
  • technical status information,
  • latency,
  • token count,
  • validation status.

Complete personal user profiles and complete AI prompts and responses are not stored permanently in the regular current audit flow.

Technical AI audit metadata is generally retained for 30 days and then automatically deleted.

23. Meal plans and other app content

Generated meal plans, recipes, goals, weight history, and shopping lists are stored in association with your user account so that they remain available to you in the app.

This information is generally retained for as long as your account remains active or until you delete the relevant information within the app, unless a different statutory retention obligation applies.

When your account is deleted, personal data associated with your account is removed as part of our deletion process.

General recipe information that can no longer be associated with an identifiable person may continue to exist independently where it no longer contains personal data.

24. Retention periods

We retain personal data only for as long as necessary for the relevant purpose or as required by applicable law.

Typical retention periods include:

Account and profile data
Until deletion of your account.

Questionnaire and lifestyle data
Until deletion or modification by you, or deletion of your account.

Weight history and goals
Until deleted by you or your account is deleted.

Meal plans and shopping lists
Until deletion or account deletion.

Allergies and intolerances
Until you remove them, withdraw the relevant consent, or delete your account.

Meal Scan photos
Only temporarily for the duration of analysis; deleted afterwards.

Raw voice transcripts
Not stored permanently by Yemevo.

AI audit metadata
Generally 30 days.

Payment and tax-relevant records
In accordance with statutory retention periods, generally seven years.

Technical security logs
Only for as long as required for security, stability, troubleshooting, or abuse prevention. The exact period depends on the type and purpose of the relevant log.

25. International data transfers

Some service providers we use may process data outside the European Economic Area.

This may apply in particular to certain services provided by:

  • Google/Firebase,
  • OpenAI,
  • Stripe,
  • Apple.

Where personal data is transferred to countries outside the EEA, we ensure that the requirements of the GDPR for such transfers are met.

Depending on the service provider, transfers may in particular be based on:

  • an adequacy decision of the European Commission,
  • a valid certification under an approved data-protection framework, or
  • Standard Contractual Clauses under Article 46 GDPR together with additional safeguards where required.

You may request further information about the safeguards used by contacting support@yemevo.com.

Yemevo records relevant consent and acknowledgement events in a versioned manner.

These include in particular:

Terms of Use

TERMS_OF_USE

Records your acceptance of the applicable Terms of Use.

Privacy Policy

PRIVACY_NOTICE

Records which version of the Privacy Policy was provided to or acknowledged by you.

The Privacy Policy itself does not constitute blanket consent to data processing.

Sensitive nutrition information

SENSITIVE_NUTRITION_DATA

Records your explicit consent to the processing of allergies and intolerances.

AI_PERSONALIZATION

Records your consent to the use of external AI for personalized functionality.

For consent-related events, we may store in particular:

  • type of consent or acknowledgement,
  • version,
  • time of acceptance,
  • time of withdrawal,
  • language.

Withdrawn consents may remain documented historically together with the time of withdrawal.

27. Data export

Yemevo allows you to export your personal data through the app.

Depending on the data available in your account, the export may include:

  • profile information,
  • questionnaire information,
  • weight history,
  • meal plans,
  • goals,
  • shopping lists,
  • consent history.

The export is generated as a temporary file.

The export file created by Yemevo in the app cache is deleted after completion, cancellation, or failure of the export/sharing process, as far as technically possible.

Any copy that you choose to save through your operating system or share with another service is subsequently outside our control.

28. Account deletion

You may delete your Yemevo account from within the app.

As part of account deletion, personal data associated with your consumer account is removed in accordance with our deletion process.

This includes, where applicable:

  • profile data,
  • questionnaire data,
  • allergies and intolerances,
  • weight and lifestyle data,
  • meal plans,
  • goals,
  • shopping lists,
  • consent data,
  • technical user-related feature data,
  • AI audit data.

We also initiate deletion or termination of the relevant authentication and payment associations with our service providers where technically and legally possible.

Data that must continue to be retained due to mandatory statutory retention obligations is deleted only after the applicable retention period has expired.

29. Automated processing

Yemevo uses automated and AI-assisted processes, for example to:

  • generate meal plans,
  • analyze food images,
  • simulate lifestyle scenarios,
  • convert voice input into structured information.

These features are used to provide lifestyle, nutrition, and meal-planning suggestions.

Yemevo does not make solely automated decisions on this basis that produce legal effects concerning you or similarly significantly affect you.

30. Your rights

Under the GDPR, subject to the applicable statutory requirements, you have in particular the following rights:

  • right of access,
  • right to rectification,
  • right to erasure,
  • right to restriction of processing,
  • right to object,
  • right to data portability,
  • right to withdraw consent.

You may exercise certain rights directly within Yemevo, for example by:

  • changing your profile information,
  • withdrawing your AI consent,
  • withdrawing consent to sensitive nutrition information,
  • exporting your data,
  • deleting your account.

For any further privacy request, please contact:

support@yemevo.com

31. Right to lodge a complaint

If you believe that the processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with a data-protection supervisory authority.

In Austria, the competent authority is in particular:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)

You may also contact another supervisory authority that is competent under the GDPR.

32. Security

We implement appropriate technical and organizational measures designed to protect personal data against:

  • unauthorized access,
  • loss,
  • alteration,
  • disclosure,
  • misuse.

Depending on the relevant system, these measures include:

  • authentication and access controls,
  • encrypted data transmission,
  • private cloud storage,
  • data minimization,
  • short-lived access mechanisms for temporary files,
  • removal of image metadata for Meal Scan,
  • separate consent checks,
  • minimized external AI contexts,
  • reduced technical logging.

However, no technical system can guarantee absolute security.

33. Changes to this Privacy Policy

We may update this Privacy Policy if:

  • Yemevo's functionality changes,
  • our processing activities change,
  • the service providers we use change, or
  • legal requirements change.

The current version will be made available within Yemevo and/or through the privacy page linked from Yemevo.

Where changes are material, we will inform you in an appropriate manner.

34. Contact

If you have questions about how we process your personal data, wish to exercise your rights, or have questions regarding this Privacy Policy, please contact us:

Monadion GmbH
Schönbrunner Straße 181/1
1120 Vienna
Austria

Email: support@yemevo.com

Managing Director: Ing. Arapsih Güngör, MSc
Commercial Register Number: FN 667594g
Commercial Register Court: Commercial Court of Vienna
VAT ID: ATU82735426