Legal
Effective Date: May 12, 2025 · Version 1.0
This Privacy Policy explains how Umamy ("we", "us", "our") collects, uses, and protects information when you use our application and related services ("App", "Service"). By using Umamy, you agree to the practices described in this Policy.
Umamy is a nutrition and wellness application registered under the laws of Ukraine. For any privacy-related questions, contact us at: support@umamy.app
Umamy is intended exclusively for users aged 18 and older. We do not knowingly collect data from persons under 18. If we become aware that a user is under 18, we will promptly delete their account and all associated data.
3.1 Data You Provide Directly
Email address (for account creation), body weight entries, dietary preferences, food goals, nutritional targets, and favourite foods.
3.2 Technical and Device Data
Device type, OS version, app version, country/region, and in-app behavioural events (e.g. screens opened, features used). Collected in depersonalised form — not linked to your identity or nutritional data.
3.3 Payment Data
We do not collect or store payment card information. All payment processing is handled by Creem (creem.io), which acts as the merchant of record and collects your payment and billing details directly on its own checkout page. From Creem we receive only your subscription status, the plan and renewal date, and the identifiers Creem assigns to your customer and subscription records.
We use the data we collect solely for: calculating your personalised nutritional needs and generating meal plans; tracking body weight progress; managing your account and subscription; improving App performance based on anonymised analytics; communicating service-related updates.
We do not use your personal data for advertising profiling, automated decision-making, or any purpose beyond delivering and improving the Service.
Each third-party service receives only the minimum data necessary for its function. Your nutritional data — weight entries, dietary preferences, goals, and meal plans — is never transmitted to any third-party service. The single exception to data sharing is your email address, which is passed to our payment provider at checkout so that a purchase can be matched to your Umamy account (see 5.4).
5.1 Analytics
PostHog — depersonalised product analytics. Google Analytics — depersonalised session and event data.
5.2 Marketing Analytics
Meta Pixel — conversion tracking via Meta Click ID (fbclid) only. We do not transmit your email, name, weight, or other personal data to Meta.
5.3 Infrastructure
Supabase — database and authentication, hosted in the EU. Vercel — application hosting. Upstash — serverless caching.
5.4 Subscription Management
Creem (creem.io) — payment processing and subscription management, acting as the merchant of record for all purchases. Creem collects and stores your payment and billing details on its own systems in order to take recurring charges, and receives your email address so the subscription can be linked to your Umamy account. It receives no nutritional or body data. Creem's handling of that data is governed by its own privacy policy at creem.io.
We do not sell, rent, or transfer your personal data to any third party, except where required by Ukrainian law or a valid court order.
We retain your data while your account is active. Upon account deletion, all personal data is permanently deleted within 30 days. Depersonalised analytical data may be retained longer for statistical purposes.
8.1 Access
You may request a copy of the personal data we hold about you.
8.2 Rectification
You may request correction of inaccurate or incomplete data.
8.3 Erasure
Request deletion via App settings or email support@umamy.app. We will process within 30 days.
8.4 Portability
You may request an export of your personal data in a machine-readable format.
8.5 Right to Object
You may object to processing of your data for specific purposes by contacting support@umamy.app.
We use encrypted storage via Supabase (EU), HTTPS for all data in transit, and access controls limiting who can access user data.
The App may use cookies for session management, performance optimisation, and depersonalised analytics. You may disable cookies via device or browser settings.
We may update this Policy from time to time. When we do, we will update the Effective Date and publish the changes within the App. Continued use constitutes acceptance.
This Policy is governed by the laws of Ukraine, including the Law of Ukraine on Personal Data Protection.
Umamy · support@umamy.app · Last updated: May 12, 2025
Questions? support@umamy.app