Controller
The controller of your personal data is IDEAL GENIUS ADVANCE SRL (Tax ID 37213946), Șos. Olteniței nr. 113, bl. 27, sc. 3, et. 8, ap. 108, camera 1, Sector 4, 041304 București. For any privacy question or request, write to yum@purceas.com.
What we process and why
Browsing: our host processes technical data (IP address, browser type, the page requested, time) to deliver the site, keep it secure and stop abuse. Legal basis: our legitimate interest in running a safe service (Art. 6(1)(f) GDPR).
Chat: the messages you type in "Ask Yum" and the recent messages of the same conversation are sent to our server and processed by an AI model to produce the answer. We do not store the content of your conversations in a database (even if you have an account) and we do not use them to train AI models. Technical logs that may contain parts of a request are kept for at most 30 days for security and debugging. Your conversation is saved only in your own browser, so you can continue it, and you can delete it with "New chat". Legal basis: providing the service you ask for (Art. 6(1)(b)) and our legitimate interest in security (Art. 6(1)(f)).
Account: if you create an account we process your email address, the profile you choose to fill in (name, diet, foods to avoid, calorie target, household size, cooking level), your saved recipes, meal plans and shopping list, and the number of AI questions you ask each day. Legal basis: providing the service you asked for (Art. 6(1)(b)). Your profile is used to personalise the AI chef's answers; it is not used for advertising.
Payments: if you subscribe to Yum Plus, Stripe processes your payment details as an independent controller; we receive and store only your Stripe customer id, subscription status and renewal date. Legal basis: contract (Art. 6(1)(b)) and our legal accounting obligations (Art. 6(1)(c)).
Calorie calculator: your age, sex, height and weight are calculated in your browser and are never sent to us.
Measurement: only if you choose "Allow measurement" in the cookie banner, we use Google Analytics 4 to count visits and see which pages are useful, with IP addresses truncated. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time from "Cookie settings" in the footer.
Statistics: we count page views and actions (for example "started cook mode") with Cloudflare Workers Analytics Engine, without cookies, without storing your IP address and without any identifier that could recognise you. Legal basis: our legitimate interest in improving Yum (Art. 6(1)(f)).
Sunday email: only if you tick the box in your account, we email you 3 recipes each Sunday, chosen using your profile. You can switch it off at any time from your account. Legal basis: your consent (Art. 6(1)(a)).
Who receives the data
Cloudflare, Inc. hosts the site and runs the AI model (Cloudflare Workers AI) as our processor. Google Ireland Ltd. provides analytics, only with your consent. Some of their processing can take place outside the European Economic Area; it is covered by the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.
Stripe Payments Europe Ltd. (Ireland) processes subscription payments. Cloudflare also stores account data in its D1 database (European region) and sends our sign-in emails.
We do not sell personal data and we do not share it with advertisers.
How long we keep it
Security and technical logs: up to 30 days. Analytics data: 14 months. Data in your browser stays there until you delete it or clear your browser's site data.
Account data: until you delete your account (Account → Delete my account), which erases it immediately; invoices and payment records are kept for 10 years as Romanian accounting law requires. Daily AI question counters: 30 days. You can download all your data at any time from your account.
Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent at any time, without affecting processing done before. Write to yum@purceas.com and we answer within one month.
You can also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro), or to the authority in your own EU country.
Children
Yum is not directed at children under 16, and we do not knowingly process their data.