YummSnap
Privacy Policy
Last updated: 9 May 2026
YummSnap (“the app”, “we”, “us”) is an AI-powered meal photo tracking app for iOS and Android. The app is operated by Momchil Gorchev, trading as Belgor Media (“the operator”), based in Bulgaria.
We take a privacy-first approach: YummSnap has no backend of its own. Your profile, meal log, streak data, avatar, and notification preferences live only in your device’s local storage. We do not run a server that stores them, and we cannot read them.
A small number of third-party services are used to deliver core features. This page explains exactly what leaves your device, when, and to whom.
1. Information stored on your device
The following information is created by you and stored locally on your device only (Android: AsyncStorage; iOS: UserDefaults):
- Profile: height, weight, age, sex, activity level, goal, dietary preferences, optional avatar photo.
- Meal log: each photo-scanned, barcode-scanned, or manually entered meal, including its photo (where you provided one), nutrition estimate, timestamp, and any notes returned by the analysis.
- Streak and goal-progress counters.
- Reminder/notification preferences (meal-time and water reminders).
- Daily scan counter (used by the free-tier 5-scans-per-day limit).
We never receive copies of this data. Uninstalling the app or using “Reset all data” in Profile permanently deletes it from the device.
2. Information sent to third parties
To analyse meals, look up barcodes, and process subscription purchases, the app sends the following to the third parties listed. No identifying account, name, or contact information is sent — only the data needed to provide each feature.
2.1 Google Gemini (Google LLC)
When you take a meal photo or use Fridge mode, the photo and any short text description you typed are sent to the Google Gemini API for nutrition / recipe analysis. Google processes the request and returns a structured response (calories, macros, recipe ideas, etc.).
- We do not send your name, email, profile, or any device identifier.
- Google’s handling of API requests is governed by the Google API Terms of Service and Google Privacy Policy.
- Gemini API requests are not used to train Google’s models when accessed via paid API keys (per Google’s API data usage terms).
2.2 Open Food Facts (Open Food Facts Association)
When you scan a packaged-food barcode, the barcode number alone is sent to the public Open Food Facts API to look up product nutrition. No personal data is included.
- Privacy policy: openfoodfacts.org/privacy
2.3 RevenueCat (RevenueCat, Inc.)
If you purchase a YummSnap Premium subscription, the app uses RevenueCat as a thin layer between the app and the App Store / Google Play billing systems. RevenueCat receives:
- A pseudonymous app-user ID generated by the SDK (not linked to your email or device fingerprint).
- The store receipt issued by Apple or Google for your purchase.
- Your active entitlement state (“premium” or “free”).
Privacy policy: revenuecat.com/privacy
2.4 Apple App Store / Google Play
All payments are processed by Apple (iOS) or Google (Android). YummSnap never sees your payment instrument. The stores’ privacy policies apply to the purchase flow:
- Apple: apple.com/legal/privacy
- Google: policies.google.com/privacy
3. Permissions the app requests
| Permission | Why we ask | Optional? |
|---|---|---|
| Camera | To photograph meals or barcodes for analysis | Yes — without it, only manual entry and gallery import work. |
| Photo library | To pick an existing meal photo or set an avatar | Yes |
| Notifications | To send meal-time and water reminders you opt in to | Yes — disabled by default until you enable a reminder. |
We do not access your contacts, location, microphone, or any other device data.
4. Children
YummSnap is not directed at children under 13 (under 16 in the EEA), and we do not knowingly collect data from children. If you believe a child has used the app and you are their parent or guardian, contact us and we’ll help you delete any associated device data.
5. Your choices and rights
Because all of your data lives on your device:
- Access / portability: use Profile → “Export your data” to export your meal log as CSV or PDF.
- Deletion: Profile → “Reset all data” wipes the local profile, meal log, streak, and avatar. Uninstalling the app has the same effect.
- Subscription: manage or cancel via Profile → “Manage subscription” (which opens the App Store / Play Store flow), or directly in the store.
- Third-party requests: if you want data deleted from a third party listed above (e.g. RevenueCat purchase history), contact us and we will forward the request — see below.
EU/EEA, UK, and California residents have additional rights under GDPR / UK GDPR / CCPA (access, rectification, erasure, restriction, portability, objection, opt-out of “sale” — we do not sell data). Contact us to exercise them.
6. Security
Local data is protected by the operating system’s standard app sandboxing. Network traffic to the third-party services listed above uses HTTPS. No system is perfectly secure; if you discover a vulnerability, please report it to the contact address below.
7. Changes to this policy
If we change this policy, we will update the “Last updated” date at the top and, for material changes, surface a notice in the app. The current version always lives at the URL listed in the App Store and Google Play listings.
8. Contact
- Email: momchil.gorchev@gmail.com
- Operator: Momchil Gorchev, trading as Belgor Media
- Website: belgormedia.com