Privacy Policy

Last updated: October 6, 2026

The short version
  • We collect what Yolk needs to build and adjust your meal plan. We don't run ads and we don't sell your data.
  • Health answers are optional, encrypted, used only to shape your plan, and never used for advertising.
  • Fridge, meal and table photos are sent to our AI provider, Anthropic, only to recognize the food. We don't store them, and they are not used to train AI.
  • Your progress photos sit in private storage that only your account can open.
  • We use no analytics or advertising tools and don't track you across other apps.
  • You can delete your account and its data from the app: You → Delete account.
  1. Who we are
  2. What we collect
  3. Health information
  4. Photos
  5. Apple Health
  6. How we use information
  7. Who processes it
  8. What we don't do
  9. Where it's stored and how it's protected
  10. Keeping and deleting it
  11. Your rights
  12. Rights by region
  13. Age
  14. Changes
  15. Contact

1. Who we are

Yolk is an iPhone app that builds a meal plan from the food you like and adjusts it as your day changes. It is owned and operated by Fatum LLC, a Wyoming limited liability company (“Fatum”, “we”, “us”), with a mailing address at 612 Paseo Del Rey, Chula Vista, CA 91910, USA. Fatum is the controller of the personal information described in this policy, which covers the Yolk app and this website.

Yolk gives general nutrition and meal-planning information. It is not a medical service. See our Terms of Use.

2. What we collect

Your account

You create an account with Sign in with Apple or Sign in with Google. We never see your Apple or Google password.

Your profile answers

During setup you tell us your goal, sex, birth year, height, current weight, goal weight, the pace you want, how often you train, an occasion or date you're working toward, your diet type, the foods you love, dislike or are allergic to, your reactions to sample dishes, how you like portions shown, how you cook, how many meals you eat and when, how often you eat out, how many people you cook for, the stores you shop at, your units, and, if you enter one, a creator code. You can also add a first name in the app. These answers are saved on your phone and, once you have an account, to your account on our servers so your plan follows you to a new phone.

Health answers (optional)

See section 3.

Your plan and meal log

Your weekly plan, the swaps you make and the meals you mark as eaten or skipped are stored only on your phone. They are not sent to our servers.

Photos

See section 4.

Subscriptions

Purchases are made through Apple's App Store. Apple handles payment and we never see your card or bank details. We use RevenueCat to manage subscriptions: it receives your Yolk account identifier, your purchases and subscription status (plan, trial, renewal and expiry dates, transaction identifiers) and, if you entered one, your creator code. We also keep your subscription status with your account settings.

Settings and limits

We store your app settings with your account, such as your units, reminder preferences and subscription status. To keep scanning fair, we count how many photo scans each account makes per day.

Technical information

When the app or this website talks to our servers, our providers process your IP address and basic request information (time, device type, app version) to deliver the service, keep it secure and prevent abuse.

Reminders

Meal and cooking reminders, the morning photo reminder and the reminder two days before a free trial ends are local notifications scheduled on your phone. No email is sent, nothing is pushed from our servers, and no third party is involved.

3. Health information

Setup asks a few optional questions because they change what a safe plan looks like:

You can skip any of them or answer “prefer not to say”. Your height, weight and goal weight, and the body-fat estimate Yolk calculates from them, can also count as health information in some places.

  • Used only to shape your plan. For example, Yolk applies no calorie reduction if you are pregnant or breastfeeding, and suggests checking your plan with your doctor if you report a condition.
  • Encrypted in transit and at rest.
  • Never used for advertising or marketing, never sold, and never shared with RevenueCat, Apple, Google or Anthropic.
  • Deleted with your account whenever you choose: You → Delete account.

Where the law requires your consent to process health information, you give it by answering these questions. You can withdraw it at any time by deleting your account or by emailing us to remove those answers.

4. Photos

Yolk only uses the camera or your photo library after you agree, and you can use Yolk without any photos.

Fridge, meal and table photos

When you scan your fridge, a meal or a table you're sharing with others, Yolk shows a notice before your first scan. To scan a table you can take one photo or hold to record: when you hold, the app picks up to four still frames on your phone and sends only those. No video is recorded or uploaded. Each photo or frame is reduced in size on your phone and sent over an encrypted connection to our server, which passes it to our AI provider, Anthropic, to recognize the ingredients or the food on the plate. Nothing else about you is sent with it. Our server does not save the photo to storage, to a database or to logs; it is discarded once the answer comes back. Anthropic processes the photo under its commercial terms, which do not allow it to use the photo to train its models, and may keep it for a limited time for safety and abuse monitoring.

The AI only recognizes food. Your calorie and protein targets are calculated by Yolk's own formula, and any calorie estimate from a photo is shown as a range you can check.

Progress photos

If you take your Day 0 photos (front and, optionally, side), they are saved on your phone and, once you have an account, uploaded to private storage linked to your account. That storage is set so that only your account can view, add or delete its photos; we use time-limited private links to show them in the app. They are not shared with anyone and are not analyzed by AI. The body-fat estimate Yolk shows is calculated from your height, weight, age and sex, not from your photos. Your progress photos are deleted when you delete your account, and you can ask us to delete them at any time.

5. Apple Health

Yolk does not access Apple Health today. If we add Apple Health in a future version, it will be optional and read-only (for example, your workouts and active energy, to adjust your plan), and we will update this policy before it is released. Information from Apple Health will never be sold, never used for advertising or marketing, never shared with third parties for those purposes, and never used for anything other than providing Yolk's health and fitness features to you, in line with Apple's HealthKit rules.

6. How we use information

Where the GDPR or similar laws apply, we rely on: performing our contract with you (running the app and your subscription); your consent (health answers and photos); our legitimate interests (security, preventing abuse, improving Yolk), which we balance against your rights; and our legal obligations.

7. Who processes your information

We use these service providers. Each processes information only on our instructions and only to provide its service.

ProviderWhat forInformation
SupabaseHosting, database, sign-in, private photo storage and server functionsAccount, profile and health answers, settings, progress photos, technical data
AnthropicRecognizing food in fridge, meal and table photosThe photo (or frames) you scan and your app language
RevenueCatManaging subscriptionsAccount identifier, purchases and subscription status, creator code
AppleSign in with Apple, App Store purchasesAccount identifier and email; Apple handles payment
GoogleSign in with GoogleAccount identifier, email, name, profile picture link
NetlifyHosting this websiteIP address and basic request information

We may also disclose information if the law requires it, to protect someone's safety or our rights, or to a buyer or successor if Fatum's business is sold or merged, in which case this policy continues to apply to your information.

8. What we don't do

9. Where it's stored and how it's protected

Our servers are in the United States (Supabase, US East region). If you use Yolk from another country, your information is transferred to and processed in the United States, using safeguards such as the European Commission's Standard Contractual Clauses where the law requires them.

Information travels over encrypted connections and is encrypted at rest. Database rules allow each account to read only its own records, and progress photos are kept in private storage that only the owning account can open. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

10. Keeping and deleting your information

We keep your information while you have an account. To delete it, open You → Delete account in the app. This permanently deletes your account, your profile and health answers, your settings, your creator code record, your scan counts and your progress photos from our servers, removes your profile, plan and photos from your phone, and signs you out. It can't be undone.

You can also ask us to delete your information by email (section 15).

11. Your rights

Wherever you live, you can ask us to tell you what information we hold about you, give you a copy, correct it or delete it, and you can withdraw consent you have given. Some of this you can do yourself: change your name, pace, units and language in the app's You screen, and delete everything with You → Delete account. For anything else, email us at support@getyolk.app. We may need to confirm your identity before acting, we respond within the time the law requires, and we will never treat you differently for exercising your rights.

12. Rights by region

European Economic Area, United Kingdom and Switzerland

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting earlier processing. You can complain to your local data protection authority.

California

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to limit the use of sensitive personal information; and not to be discriminated against for using these rights. In the past 12 months we collected the categories described in section 2: identifiers, customer records, commercial information (subscriptions), sensitive personal information (health answers and account login), photos, inferences used to build your plan (such as your calorie target and body-fat estimate) and internet activity limited to requests to our servers. We collected them from you and your device, for the purposes in section 6, and disclosed them only to the service providers in section 7. We do not sell or share personal information and have not done so in the past 12 months. We use sensitive personal information only to provide the service you request. You can use an authorized agent to make a request.

Washington, Nevada, Connecticut and other states with consumer health data laws

Your health answers, body measurements and body-fat estimate are consumer health data under some state laws. We collect them only with your consent and only to provide the plan you ask for, we share them only with Supabase as our processor, we never sell them, and you can see, delete or withdraw consent for them as described above. You can appeal a decision about your request by replying to our answer; if you remain unsatisfied, you can contact your state attorney general.

Mexico

Under the Federal Law on the Protection of Personal Data Held by Private Parties, you have the rights of access, rectification, cancellation and opposition (ARCO rights), and you can revoke your consent or limit the use or disclosure of your data. Your health answers are sensitive personal data, which we process only with your express consent, given when you answer them. Send requests to the contact email with your name, the email on your account and the right you want to exercise. We respond within 20 business days and, if the request is appropriate, act on it within the following 15 business days.

Colombia

Under Law 1581 of 2012 and its regulations, you have the right to know, update and correct your personal data; to request proof of your authorization; to be told how your data is used; to revoke your authorization and request deletion where we have no legal duty to keep it; to access your data free of charge; and to file complaints with the Superintendence of Industry and Commerce (SIC) after first contacting us. We answer inquiries within 10 business days and claims within 15 business days, as the law requires.

Other countries

If the law where you live gives you other rights, we will honor them. Contact us at the email below.

13. Age

Yolk is only for adults 18 and older. The app asks for your birth year and does not let anyone younger continue; their answers are discarded. We don't knowingly collect information from minors. If you believe a minor has given us information, email us and we will delete it.

14. Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app before it takes effect.

15. Contact

Fatum LLC
612 Paseo Del Rey, Chula Vista, CA 91910, USA
support@getyolk.app