Privacy Policy

Effective Date: [To be determined upon launch]
Last Updated: January 2025

Introduction

Welcome to Umato ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

This Privacy Policy explains how Umato, a personalized food recommendation application, collects, uses, discloses, and protects information that applies to our web application and mobile services (collectively, the "Service"). By using our Service, you agree to the terms of this Privacy Policy.

Important: We take your privacy seriously. Umato learns your unique taste preferences to provide personalized food recommendations. This requires collecting and analyzing your food ratings and preferences, which we handle with the utmost care and in compliance with applicable data protection laws.

1. Information We Collect

1.1 Information You Provide Directly

Account Information: When you create an account, we collect:

• Name (first and last name)
• Email address
• Password (encrypted)
• Profile information (optional profile picture, dietary restrictions, location)

Taste Profile Data: To provide personalized recommendations, we collect:

• Food item ratings (1-5 star scale)
• Category preferences (8 categories with 1-3 scale ratings)
• Restaurant preferences and visit history
• Food photos you upload
• Written reviews and comments
• Dietary restrictions and allergies

1.2 Information Collected Automatically

We automatically collect usage data, device information, and general location (city/state) from your IP address. We use cookies for authentication, analytics, and preferences.

2. How We Use Your Information

We use your information to:

• Personalized Recommendations: Analyze your taste preferences to recommend food items you'll love
• Taste Twin Matching: Find users with similar taste profiles to improve recommendations
• Service Delivery: Provide, maintain, and improve our Service
• Analytics: Understand usage patterns and enhance functionality

3. How We Share Your Information

We do NOT sell your personal information to third parties.

We may share data with:

• Service Providers: Supabase (database), Vercel (hosting), Typesense (search)
• Legal Requirements: If required by law or to protect rights
• With Your Consent: For other purposes with your explicit permission

4. Your Rights and Choices

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in machine-readable format
• Opt-Out: Unsubscribe from marketing emails

To exercise these rights, email privacy@umato.app

5. Data Security

We implement security measures including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Password hashing (bcrypt)
• Secure authentication (OAuth, JWT tokens)
• Access controls and role-based permissions

6. Children's Privacy

Umato is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children.

7. International Data Transfers

Umato is based in the United States. If you access our Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. For EEA/UK users, we rely on Standard Contractual Clauses approved by the European Commission.

8. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of personal information
• Opt-out of sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

9. EU/EEA Users (GDPR)

Under GDPR, you have rights to access, rectification, erasure, restriction of processing, data portability, and objection. You may lodge a complaint with your local Data Protection Authority.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification.

11. Contact Us

For privacy questions or concerns:

• Email: privacy@umato.app
• Support: support@umato.app