Privacy Policy

Data Controller

1991 Southern Sky SRL 1281 Chaussée de Mons 1070 Anderlecht, Belgium BCE/KBO: BE0790291365 Contact: hello@umamilab.app

Personal Information We Collect

When you create an account, we collect: your email address, first name, username, and profile information (bio, avatar) you choose to provide. When you subscribe to a paid plan, Stripe collects your payment information on our behalf - we do not store credit card details.

When you use the Service, we automatically collect: your IP address, browser type, device information, pages visited, and usage patterns through cookies and similar technologies.

When you import recipes, the content you provide (URLs, photos, text) is processed by third-party AI services (Google Gemini, MiniMax) to extract recipe data. This content is sent to these services solely for processing and is not stored by them beyond what is necessary for the request.

How We Use Your Information

We use your information to: provide and maintain the Service, process your payments via Stripe, send transactional emails (account confirmation, password reset), improve the Service based on usage patterns, and prevent fraud and abuse.

We do not sell your personal information. We do not send marketing emails unless you explicitly opt in.

Data Processors and Third Parties

We share your information with the following third-party services, solely for the purposes described:

• Supabase - database hosting and authentication (EU region)
• Stripe - payment processing
• Google Gemini - AI recipe extraction
• MiniMax - AI text processing
• Railway - application hosting

Cookies

We use essential cookies for authentication and session management. We use analytics cookies only with your consent. You can manage cookie preferences through your browser settings.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data and private recipes within 30 days. Payment records are retained for 7 years as required by Belgian accounting law. AI processing logs (anonymized cost data) are retained for service monitoring.

Your Rights (GDPR)

As a European resident, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Request restriction of processing
• Data portability (receive your data in a structured format)
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, contact us at hello@umamilab.app. We will respond within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), secure authentication via Supabase, and secure payment processing via Stripe.

International Transfers

Some of our service providers (AI processing, hosting) may process data outside the EU. Where this occurs, we ensure appropriate safeguards are in place through Standard Contractual Clauses or equivalent mechanisms.

Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16.

Changes

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

Contact

For questions, data requests, or complaints, contact us at:

hello@umamilab.app 1991 Southern Sky SRL 1281 Chaussée de Mons 1070 Anderlecht, Belgium

If you are not satisfied with our response, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données): www.dataprotectionauthority.be