Privacy Policy
Last updated November 11, 2026
This policy explains what the Yumstash app collects, why, who helps us process it, and the choices you have. Yumstash is made by Billy Canales, doing business as Candoo Apps ("we", "us"). Questions:candooapps.support@gmail.com.
The short version
- We collect what Yumstash needs to work: your account, the recipes and plans you add, and whether you have Premium.
- To read recipes, answer questions and search, Yumstash sends recipe content to an AI service, Anthropic's Claude.
- We don't sell your data, show ads, or track you across other apps and websites.
- You can export your recipes or delete your account and everything in it from the app's Settings.
What we collect
Your account
When you sign in with Apple, Google or email, we receive your email address and, if you share it, your name. With Sign in with Apple you can hide your email; we then get a private relay address from Apple. Sign-in is handled by Amazon Cognito.
What you add
Recipes and the links, text and photos you import; notes, cookbooks, meal plans, grocery lists and pantry items; and the preferences you set, such as default servings, diets, foods you avoid and measurement units.
Purchases
Apple processes payments for Premium. We never see your card details. Apple and RevenueCat, which manages subscriptions for us, tell us whether you have Premium, when a trial or renewal ends, and a purchase identifier linked to your Yumstash account.
Technical information
Our servers keep logs of requests (such as time, the address the request came from, and errors) to run and secure the service. If the app crashes, it may send a crash report with your device model, iOS version and what the app was doing, but not your recipes.
If you allow notifications, we keep a notification token for your device so we can tell you when an import is ready.
Camera, photos and microphone
The camera and photo library are used only for the pictures you take or pick to import a recipe. Yumstash doesn't browse your photo library. In cook mode, if you turn on voice control, the microphone listens for commands like "next step". Apple's speech recognition turns them into text and may process the audio on Apple's servers. We don't record or keep the audio.
We don't collect your location, contacts or health data.
How Yumstash uses AI
Some features send content to Claude, an AI model made by Anthropic, which we reach through Anthropic's API or Amazon Bedrock:
- Importing: the text of a page or post you share, and photos you import, so Claude can pull out the recipe.
- Ask about a recipe: your question, the recipe, its servings and your recent questions about it.
- Plain-English search: what you type in search.
Claude uses this only to produce the answer. Under Anthropic's commercial terms, content sent through its API isn't used to train its models. AI answers can be wrong: check cooking temperatures, allergens and anything that matters for your health.
When you import from a link, our servers visit that page to read it, so the website sees a visit from us, not from you.
How we use your information
- To provide Yumstash: saving, organizing, scaling and searching your recipes, planning meals and building grocery lists.
- To work out nutrition from your ingredients using public food data (USDA).
- To manage your subscription and send the reminders you turn on, such as before a trial ends.
- To keep the service secure, fix problems and answer your messages.
Who processes it for us
We share information only with the companies that run parts of Yumstash for us:
- Amazon Web Services: hosting, database, storage and sign-in (Amazon Cognito), in the United States.
- Anthropic: the Claude AI model, as described above.
- Apple: Sign in with Apple, payments and subscriptions, notifications, and speech recognition in cook mode.
- Google: Sign in with Google, if you use it.
- RevenueCat: subscription status.
- Sentry: crash reports.
We may also disclose information if the law requires it, or to protect the rights and safety of our users and us. If Yumstash is sold or merged with another business, your information would move with it and stay covered by this policy.
How long we keep it
- Your account and what's in it: until you delete them.
- Photos uploaded for an import: deleted within 7 days, unless one becomes a recipe's photo.
- Recipe export files: deleted after 1 day.
- Server logs: 14 days.
- Database backups: 7 days, so a deleted account is gone from backups within a week.
When you delete your account, we delete your recipes, photos, plans, pantry, preferences and sign-in. Deleting the app alone doesn't delete your account.
Your choices
- Export: Settings › Export my recipes downloads them as a CSV file.
- Delete: Settings › Delete account removes your account and everything in it.
- Notifications, camera, photos and microphone: turn reminders on or off in Settings, and any of these permissions in iOS Settings.
- Requests: to see, correct or delete your information, or ask a question about your privacy rights where you live, emailcandooapps.support@gmail.com. We answer within 30 days.
Depending on where you live, laws such as the GDPR or California's privacy laws may give you more rights, including complaining to your local data protection authority. We honor these requests wherever you live.
Security
Your information is encrypted on its way to our servers and while it's stored. Only the people who run Yumstash can reach the systems that hold it. No system is perfectly secure, and we'll tell you if a breach affects your information.
Children
Yumstash isn't meant for children under 13, and we don't knowingly collect information from them. If you think a child has given us information, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date above and, for important changes, tell you in the app.
Contact
Billy Canales, doing business as Candoo Apps
candooapps.support@gmail.com