Skip to main content

Privacy policy

This policy explains what data Yoki processes, why it is used and how to exercise your rights.

Last updated: September 3, 2026.

1. Data controller

The publisher identified in the Legal notice controls the processing required to operate Yoki. The service remains pre-commercial until the sole proprietorship is registered.

2. Data processed

  • Account: email address, technical identifier and authentication information managed by Supabase.
  • Profile and personalization: goals, diet, allergens, excluded foods, cooking time, servings and other preferences provided in the application.
  • Content: recipes created or imported, source URLs, meal plans, grocery lists, pantry, cooking history and photos added by the user.
  • Subscription: selected product, status, renewal date and transaction identifier supplied by Apple and RevenueCat. Yoki does not receive payment card details.
  • Usage measurement: pseudonymous user identifier, screens or actions used, categorical settings, technical information and application environment.
  • Diagnostics: errors, application version, device, operating system and pseudonymous user identifier when required to investigate an incident.

3. Purposes and legal grounds

  • Creating the account, personalizing suggestions, saving recipes and plans and providing requested functions: performance of the service.
  • Managing premium access and restoring purchases: performance of the service and transaction-related obligations.
  • Securing Yoki, preventing misuse, fixing errors and understanding feature usage: legitimate interest in maintaining and improving the service.
  • Sending notifications or using a device permission: consent requested by the application where required.
  • Answering rights requests and keeping legally required evidence: legal obligation.

4. Service providers and recipients

Yoki does not sell personal data. Access is limited to what is technically required for the service.

  • Supabase: authentication, database and primary storage, with the project hosted in the European Union.
  • Cloudflare: website hosting and delivery and storage of certain images.
  • Apple and RevenueCat: subscription purchase, renewal, restoration and verification.
  • PostHog: pseudonymous usage events. Automatic screen capture, interaction capture and session replay are disabled.
  • Sentry: error reports and diagnostics. Session replay is disabled in the application.
  • ScrapeCreators and OpenRouter: retrieving and structuring public content selected by the user when importing a recipe, including the URL, text, image, audio or video required for the import.

5. International transfers

Some providers are based in or process data in the United States. These transfers are governed by the GDPR mechanism applicable to the provider, including an adequacy decision or standard contractual clauses.

6. Retention and deletion

  • Account data and personal content are retained while the account remains active.
  • Using Profile > Delete my account immediately triggers deletion of the active account and its related data. Uninstalling the application does not delete the account.
  • Residual copies may temporarily remain in backups and security logs until their normal rotation. Data subject to a legal obligation is isolated and retained for the required period.
  • Usage events and diagnostics are retained for a limited period configured in the relevant tools, then deleted or aggregated.

7. Website and cookies

The website has no account registration form. When Cloudflare Web Analytics is enabled, it measures traffic without tracking cookies. The website does not use personalized advertising.

8. Your rights

You may request access, correction, erasure or portability of your data, restrict processing or object where the law allows. You may withdraw consent at any time without affecting previous processing.

Yoki responds within the periods required by the GDPR. You may also complain to the French data protection authority, the CNIL.

9. Children

Yoki is a cooking application open to everyone. A child must use it with the authorization and under the responsibility of a parent or legal guardian, who may exercise the child’s rights and request account deletion.

10. Security and updates

Yoki uses technical and organizational measures intended to limit unauthorized access, loss or alteration. No service can guarantee absolute security.

This policy may change to reflect changes to the service or the law. The date shown at the top identifies the applicable version.