What Yumbo keeps

What’s kept

• Your name, the username you sign in with, and your password, stored only as a scrambled form that can’t be turned back into the password.
• Everything your household puts in: recipes, photos, the week’s plan, the shopping list, what’s in the fridge, the diary and its notes, and ratings.
• One cookie per device, to keep you signed in for 30 days. There are no other cookies.
• Anything sent through Feedback, with the page you were on, your browser, your screen size and the time, so a problem can be found.

Who can see it

• The people in your household, and nobody from any other household.
• Households you are friends with, once both sides have agreed, see your diary: what was cooked and when, who cooked it, the notes and the photos. They see your recipes only when an owner of your household shares them — one at a time, or the whole book — and they can never change anything of yours. Ending a friendship stops all of it at once.
• A friend can save a copy of a recipe you share, into their own household. That copy is theirs: it stays with them if you stop sharing, and your later changes don’t reach it.
• The person who runs Yumbo. It lives on a server they rent, and anyone running a server can read what’s stored on it. They don’t browse it, but you should know they could.
• In the app itself, that person sees a list of households and who is in each, how much each is using, and the feedback everybody sends, with names on it. They do not see your recipes, photos, plans or diary. They can also make a link that lets someone choose a new password after forgetting one.

What leaves the server

• The words of a web search in “What can I make?”, sent to a search service (Tavily) to find recipes. Nothing else goes with them.
• When you import a recipe from a link, the server fetches that page, so the site sees the server’s address, not yours.
• Reading the words off a photographed recipe happens on your phone. The photo is only sent if you save it.

Backups

Everything is backed up every night, and each backup is kept for two weeks, on the server and on the computer of the person who runs Yumbo.

Taking it away

You can delete your account from your profile page. Any household you’re the only person in goes with it, photos included; in a shared household your recipes and notes stay for the others, without your name. Backups made before then are gone within two weeks.