Privacy Policy

Last updated October 14, 2026

YumLog is made by product.inc. In this policy, “we” means Product LLC, a California limited liability company, which is responsible for your data. It covers the YumLog apps for iPhone and Apple Watch, the YumLog service they connect to, and this website.

What we collect

Your account

You sign in with Apple. Apple gives us a stable identifier for you and, only if you choose to share them, your name and email address (which can be a private relay address from Apple). Each signed-in device gets a session key; we store only a scrambled (hashed) version of it.

What you log

• Food: what you ate, how much, when, which meal, and its calories, protein, carbs and fat.
• Usuals and recipes you save, and notes you ask YumLog to remember.
• Weigh-ins, whether you say them or they come from Apple Health.
• Goals and profile: calorie and macro goals, height, sex, birth year, activity level, starting and target weight, your units, and your time zone (so “today” means your today).

Conversations

What you say or type to YumLog and its replies are kept, so it can follow up (“do that”, “undo”) and so you can scroll back through your chats.

Photos

Photos you send are stored for 30 days and then deleted automatically.

Voice

On iPhone, Apple’s speech recognition turns what you say into text, on the device when it can. On Apple Watch, the recording is sent to our service, turned into text and not kept; only the text joins your conversation.

Apple Health

If you allow it, YumLog reads your weight, height, date of birth and sex from Apple Health, and writes the meals and weigh-ins you log back to it. Weights read from Apple Health are stored with your log so your progress includes your scale. Height, birth year and sex are saved to your profile only when you use them to set a goal. We never use health data for advertising, marketing or selling, and share it only with the service providers below, to run YumLog for you.

How the apps are used

The apps tell our service about a few moments it can’t see otherwise: when you open them, which setup steps you finish or skip, your answers when they ask for Apple Health, the microphone or permission to use Claude, and when the subscription screen appears and how it closes. Each is a short label kept with your account, never what you log, say or type. We also count when and how you log (by voice, on your watch, by hand), not what. The apps contain no third-party analytics, advertising or tracking code.

Keeping the service running

Our service keeps short-lived technical logs (such as the time of a request and any errors) to fix problems and keep it secure.

This website

The site sets no cookies. It counts visits with Cloudflare Web Analytics, which records the page, the site that sent you, and your browser and country, without cookies or anything that identifies you; visitors in the EU aren’t counted. The site is served by Cloudflare, and loads a font from Google Fonts, so Google sees your IP address and browser when the page loads. If you email us, we keep the email to answer it.

How we use it

• To log and total your food, answer your questions and track your progress.
• To keep your iPhone, Apple Watch, Siri and Apple Health in step.
• To keep YumLog working and secure, and to answer you when you contact us.
• To see how YumLog is used and where people get stuck, so we can make it better.
• To provide your subscription. Apple handles payment; we only learn whether your subscription is active, never your payment details.

We don’t sell your personal information, share it for advertising, or use it to train AI models.

Who processes it

We use a few service providers to run YumLog. Anthropic and Cloudflare process your data for us, under contract, and for nothing else. YumLog asks for your permission before anything goes to Anthropic, TypeSafe or Cloudflare’s speech-to-text, and you can withdraw it any time in the app (Profile › AI). Without it, you can still add food by hand.

• Anthropic (Claude) understands what you say, type or photograph and writes YumLog’s replies. With each request it receives your message, any photo, and what YumLog needs to answer: today’s log, your goals, recent weigh-ins (including ones from Apple Health), your saved usuals and recipes, your notes and the conversation so far. When YumLog looks up a restaurant’s nutrition, Claude searches the web; those searches are about food, like a menu item’s name. Under Anthropic’s commercial terms it doesn’t train its models on this data, and it keeps it only for a limited time.
• TypeSafe (Jev) picks which Claude model answers each message, so routine logs get a faster, lighter one. For each message it receives the text, whether a photo is attached (not the photo), the previous exchange in the conversation, and the names of your saved usuals and recipes. TypeSafe handles this under its own terms of service.
• Cloudflare hosts our service, database and photo storage, and turns Apple Watch voice recordings into text.
• Apple provides Sign in with Apple, Apple Health (on your devices) and App Store payments.

We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a sale or merger of YumLog, in which case this policy keeps applying to your data.

Where it’s stored

Your data is stored in the United States, in Cloudflare’s Western North America region. Our providers may process it in the United States and other countries where they operate.

How long we keep it

• Photos: 30 days, then deleted automatically.
• Everything else: for as long as you have an account. When you delete an entry, it’s marked as deleted so your other devices and Apple Health can catch up, and erased for good when you delete your account.
• When you delete your account (Profile › Delete Account), we erase your log, weigh-ins, usuals, recipes, notes, conversations, photos, usage records, profile and account from our service straight away. Copies in our providers’ short-lived logs expire on their own. What YumLog wrote to Apple Health stays there until you remove it in the Health app.

Your choices and rights

• See and correct your data in the app: tap any entry, or change your goals and profile.
• Delete your account and data in the app at any time.
• Withdraw permission to use Claude in the app (Profile › AI). Nothing more is sent from then on.
• Get a copy of your data, or ask any question about it, by emailing us.
• Change permissions for Apple Health, the microphone and the camera at any time in your iPhone’s settings or the Health app. YumLog keeps working without them, with less to go on.

Depending on where you live (California, for example), you may have rights to know, access, correct, delete or port your personal information. We give these to everyone, won’t treat you differently for using them, and answer requests within 30 days.

Age

YumLog is for people 18 and older. We don’t knowingly collect data from anyone younger. If you think someone under 18 is using it, tell us and we’ll delete their account.

Security

Everything travels over encrypted connections. Each account’s data is kept separate, session keys are stored only in scrambled form on our side and in the Keychain on your devices, and only the people who run YumLog can reach the systems behind it. No system is perfectly secure, but we work to protect yours and will tell you if a breach affects you.

Changes

If we change this policy, we’ll update the date at the top. If a change matters, for example a new kind of provider, we’ll tell you in the app before it applies.

Contact

Email support@yumlog.dev with any question or request about your data. Product LLC, California, USA.