Privacy Policy

1. Information We Collect

Personal Information

When you create an account, we collect:

• Full name
• Email address
• Profile photo (if provided)
• Business name and details (if provided)

Financial Data

To provide our core services, we collect and store:

• Transactions (income and expenses)
• Invoices and invoice details
• Inventory items and pricing
• Budget and savings goals
• Tax-related data and categories
• Reports and financial summaries

Usage Data

We automatically collect certain information about how you interact with the Service, including:

• Features used and frequency of use
• App navigation patterns
• Error logs and crash reports
• Session duration and timestamps

Device Information

We may collect device-specific information such as:

• Device type and operating system version
• App version
• Unique device identifiers
• IP address (for security and fraud prevention)

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service — Process your transactions, generate invoices, manage inventory, track budgets, and deliver core app functionality.
• Power AI insights — Analyse your financial data to provide intelligent suggestions, spending summaries, forecasts, and actionable business insights through our AI features.
• Improve the app — Understand usage patterns to improve performance, fix bugs, develop new features, and enhance the overall user experience.
• Send notifications — Deliver important service updates, payment reminders, goal progress alerts, and feature announcements (you can control notification preferences in your settings).
• Ensure security — Detect and prevent fraud, abuse, and unauthorised access to your account.
• Comply with legal obligations — Meet applicable laws, regulations, and legal processes.

3. Data Storage & Security

Your data is stored on secure cloud servers hosted on Render, a trusted cloud infrastructure provider. We implement industry-standard security measures to protect your information:

• Database encryption — All data stored in MongoDB is encrypted at rest and in transit using TLS/SSL protocols.
• Authentication tokens — We use JSON Web Tokens (JWT) for secure session management and API authentication.
• Password hashing — Passwords are hashed using bcrypt and are never stored in plain text.
• File storage — Uploaded files (receipts, photos, documents) are securely stored on Cloudinary with access controls.
• Access controls — Only authorised personnel have access to production systems, and all access is logged and monitored.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to using commercially reasonable measures to protect your personal information.

4. Third-Party Services

YUMO integrates with the following third-party services to provide functionality:

• Firebase — Used for user authentication (sign-in and account management). Firebase may collect device identifiers and authentication tokens. See Firebase Privacy Policy.
• RevenueCat — Used for managing in-app subscriptions and purchases across platforms. See RevenueCat Privacy Policy.
• Shopify — Integration available only when you explicitly connect your Shopify store. We access your store data solely to sync products and orders. See Shopify Privacy Policy.
• Stripe — Integration available only when you explicitly connect your Stripe account. We access transaction data solely to sync payments. See Stripe Privacy Policy.
• eBay — Integration available only when you explicitly connect your eBay account. We access listing and order data solely to sync sales. See eBay Privacy Policy.
• Cloudinary — Used for secure file upload and storage (receipts, invoices, profile images). See Cloudinary Privacy Policy.
• Groq — Used for AI-powered processing and insights. Data sent to Groq is anonymised and stripped of personally identifiable information before processing. See Groq Privacy Policy.

We only share the minimum data necessary for each service to function. We do not sell your personal data to any third party.

5. Your Rights

You have the following rights regarding your personal data:

• Right to Access — You can request a copy of the personal data we hold about you at any time.
• Right to Correction — You can update or correct your personal information directly within the app settings or by contacting us.
• Right to Deletion — You can permanently delete your account and all associated data at any time through our account deletion page. This action is irreversible.
• Right to Data Portability — You can request an export of your data in a machine-readable format.
• Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Object — You can object to processing of your data for certain purposes, including direct marketing.

To exercise any of these rights, please contact us at support@yumoapp.co.

6. Cookies & Tracking

YUMO uses minimal cookies and tracking:

• Session cookies — We use essential session cookies for authentication purposes (keeping you logged in). These are strictly necessary for the Service to function.
• No third-party tracking cookies — We do not use any third-party advertising or analytics tracking cookies.
• No cross-site tracking — We do not track your activity across other websites or applications.

As a mobile-first application, YUMO primarily relies on secure token-based authentication rather than browser cookies.

7. Children's Privacy

YUMO is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@yumoapp.co so we can take appropriate action.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Notify you in-app with a prominent notice
• Update the "Last updated" date at the top of this page
• Where required by law, seek your consent to the changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@yumoapp.co
• Company: YUMO Ltd

We will respond to all privacy-related enquiries within 30 days.