Legal

Privacy Notice

Last updated: May 11, 2026

This Privacy Notice explains how Yummy Yums ("Yummy Yums", "we", "us"), the operator of Vivit.health (the "Service"), collects, uses, shares, and protects your personal data. Yummy Yums is the data controller of the personal data described below.

1. Data We Collect

Account data: email address, login credentials, and OAuth identifiers if you sign in with Google.
Bio profile: information you provide about your body, dietary preferences, allergies, goals, and macro targets.
Usage data: recipes you save, remix, search for, or add to your cart, and interactions with the app.
Device & technical data: device type, browser, IP address, language, and crash/diagnostic logs.
Support data: messages you send us when contacting support.

2. How We Use Your Data

To create and maintain your account (legal basis: contract).
To personalize recipes and macros to your bio profile (legal basis: contract).
To operate, secure, and improve the Service, including fraud and abuse prevention (legitimate interests).
To send transactional and account emails (contract).
To comply with legal obligations (legal obligation).

3. AI Processing

We send the bio profile data and recipe content needed to remix a recipe to AI providers acting as our processors. We do not sell your bio data, and we do not use it for advertising.

4. Sharing

We share personal data only with:

Hosting and infrastructure providers that run the Service (e.g. cloud hosting, database, email delivery).
AI processors used to generate personalized recipes.
Stripe Payments Europe, Ltd. and its affiliates, our payment processor, for subscription billing, payment processing, fraud prevention, and tax calculation.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law.

5. International Transfers

Some of our processors are located outside your country, including outside the UK and EEA. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or applicable adequacy decisions.

6. Retention

We keep personal data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion at any time (see "Your Rights").

7. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials, and access controls, to protect your data. No system is perfectly secure, so we encourage you to use a strong, unique password.

8. Your Rights

Subject to applicable law, you may have the right to access, rectify, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. UK/EEA users have the right to lodge a complaint with their supervisory authority. We aim to respond to requests within one month. To exercise any right, contact privacy@vivit.health.

9. Cookies

We use a small number of essential cookies and local storage entries needed to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

10. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes

We may update this Notice; material changes will be notified through the Service or by email.

12. Contact

Yummy Yums — privacy@vivit.health.