Privacy Policy

Umay is published by Koruki Corp (SAS), the data controller. Contact: hello@koruki.fr. This page describes what we collect, why, who processes it, and how to exercise your rights. Version dated September 25, 2026.

What we collect, and why

• Your account: email address (sign-in with a link or code sent by email, or with your Google or Apple account), first name and avatar if you provide them. Purpose: to sign you in and personalize the app.
• Your "Notify me" email (home page, no account needed): the address and the store you picked (Android or iOS). Purpose: to email you once when the app is out on that store; the address is then deleted.
• Your food preferences: diet, allergies, dislikes, restrictions, equipment and supplements. Purpose: to adapt recipes, suggestions and the assistant's answers. This data may reveal beliefs or health information. It is used only for personalization and is never sold or shared for advertising.
• Your journal: meals, weight, activity, goals, and the journal of children in your household if you add them (a first name or nickname is enough). Purpose: Tracking. Children's first names from Tracking are not sent to models; the names of household members you enter may be, when the assistant reads your profile.
• Your content: generated or imported recipes, collections, menus, events, votes and ratings. Purpose: your library and the community.
• Photos you send (fridge, plate, label, restaurant menu, receipt, dish to recreate, scanned recipe): analyzed, then forgotten, and never stored by Umay. The only exception: if you choose to share a product with Open Food Facts, its packaging photos are published there.
• Your voice (voice mode and dictation): transcribed to understand your request. Umay does not keep the audio; the transcript of a voice conversation joins your thread with the mascot.
• Your location: only when you look for stores or restaurants near you, with your permission. Purpose: that search.
• Anonymizable usage events (screens opened, features used and performance measurements) and feedback sent through the ideas box. Purpose: to improve the product.
• Cookies and local storage: the `epicure_session` session cookie (sign-in, 90 days), the `umay_lang` language cookie (1 year), the `umay_voter` cookie that remembers your votes on a shared collection (1 year), and your browser's local storage for display settings. If you accept audience measurement, Microsoft Clarity also sets its own cookies (including `_clck`, up to 1 year, and `_clsk`, 1 day) to link the pages of a single visit. No advertising cookies.

Your consent before anything is sent

Before your first photo, dictation or message to the chef or the assistant, the app asks for your consent to send that content to the automated processing providers listed below. Without it, nothing is sent and the rest of the app keeps working. Audience measurement is a separate, optional box, unchecked by default: without it, Microsoft Clarity is not loaded. Voice mode asks for its own consent. To withdraw a consent, turn it off in Profile > App > Privacy; you can also write to hello@koruki.fr.

What the assistant reads to answer you

When you write or talk to the chef or the assistant, it may read your profile (allergies, diet, dislikes, goals, appliances, household members and their allergies), today's journal and your fridge, and send them to the provider that writes the answer. Recipe generation receives your request, your allergies, your diet and your equipment. Your email address is never sent to models.

Who processes what (service providers)

Some of them are located outside the European Union, notably in the United States.

• Hetzner (Germany): app and data hosting.
• Requesty: router that passes the text, photos and profile needed for each answer to the models below.
• Google Gemini (through Requesty): photo analysis and, depending on the feature, written conversations with the chef and the assistant.
• DeepSeek (served by Fireworks, through Requesty): recipe generation, Describe a meal, remixes, weekly meal prep, reading restaurant menus and imported recipes, and, depending on the feature, written conversations with the chef and the assistant. It receives your request and the relevant profile.
• Perplexity (through Requesty): nutrition estimate for a food we cannot find, when you ask for it; it receives the food name.
• OpenAI (United States): voice conversations, assistant dictation transcription, meaning-based recipe search (through Requesty) and food photo generation. During a voice conversation, your voice, its transcript, your food profile (including your allergies) and your conversation thread with the mascot are sent to it; it keeps them for up to 30 days and does not use them to train its models. Search receives what you type; photo generation receives the recipe's description and ingredients.
• Groq: transcription of dictation in the Describe panel and of the audio of videos you import.
• TypeSafe AI (United States): checks on the recipe chef's answers and on generated recipes (an answer does not suggest a food that conflicts with your profile, a recipe is coherent, an emergency is recognized). It receives your message, the chef's answer, the recipe and your food constraints (including your allergies), never your email address or first name; it keeps nothing and does not train its models on it.
• Resend: email delivery (sign-in, newsletter, app launch notice, follow-up on your requests, ideas box); it receives your email address and the message content.
• RevenueCat: Umay Premium subscription management; it receives a technical identifier for your account and your subscription status, never your email.
• Apple (App Store) and Google (Google Play): subscription payment and renewal; Umay receives proof of purchase, never your payment details.
• Google (sign-in): identity check when you sign in with Google.
• Apple (sign-in): identity check when you sign in with Apple; the address Apple shares with us may be a private relay address that hides yours. When you delete your account, we also ask Apple to revoke the access granted to Umay.
• Google Places: stores and restaurants near you; it receives the location you authorize and, for restaurants, the dish you searched for.
• OpenStreetMap (Nominatim, Overpass) and OpenFreeMap: typed addresses, nearby stores and map tiles; they receive the relevant location or address, and your device's IP address for map tiles.
• Open Food Facts: product lookup by barcode or name; a product is published only if you choose to.
• Notification services (Apple, Google, Mozilla): delivery of the notifications you turned on.
• Microsoft Clarity: audience measurement, only if you checked the box; it receives your navigation in the app (pages, clicks, scrolling) and your device's IP address.

How long we keep data

Your data is kept while your account exists. Sessions expire after 90 days. Sign-in links expire after 15 minutes. When you delete your account, everything is erased immediately (see below), consents included; usage events are anonymized. Our voice provider keeps voice exchanges on its side for up to 30 days, including after you delete your account. Purchase records are kept without a link to your identity for the legally required period.

Your rights

Access, correction, portability and deletion are available in the Profile section of the app.

• Export my data: download a complete JSON file in one click.
• Delete my account: immediately and permanently delete your account, journals, recipes, collections, menus, events and household. Content shared with others (such as a voted menu or a dish offered through a referral) also disappears from their accounts when it belonged to you. Deleting your account does not cancel an active subscription: cancel it in your store settings.

For questions, to withdraw a consent, or for requests that cannot be handled in the app, contact hello@koruki.fr. You may also contact the CNIL (cnil.fr).