YouPick Privacy Policy

Effective September 19, 2026 (replaces the policy dated July 11, 2026). YouPick is operated by Builder of All Things LLC ("we", "us"). This policy explains what the YouPick iOS app collects, why, and what you can do about it. The same policy is shown inside the app under Settings → Privacy Policy.

Your account

You sign in with Apple or Google through our sign-in provider, Rork. We receive the basic profile your provider shares — a user ID, your email address, your name, and a profile picture URL — to identify your account. If you use Apple's private email relay, we receive the relay address. We never receive your Apple or Google password, and we do not collect a phone number. Sign-in tokens are stored in the device Keychain. You can also use Guest Mode without an account; see "Guest Mode" below.

What we store on our servers

Tied to your account, on our managed backend (Supabase): your taste signals (loved / good / not-for-me ratings, saves, picks, and the meal period they happened in) and the taste profile computed from them; your daily Picked for You picks and their status; your monthly usage counts for Ask requests and menu scans; your notification inbox; your profile photo, if you upload one; We Pick sessions you host or join (the session code, first names, and each person's session preferences, which can include allergies and eating styles); Food Challenges you send (the dish, clues, and options) and the results of challenges you play; usage events (which screens and features were used, with timestamps); and crash and hang reports from your device (see "Analytics, diagnostics, ads, and tracking").

Access is limited by row-level security: your rows are readable by your account; We Pick session data is readable by the members of that session; a profile photo you upload is stored at a link that anyone holding the link can open, and it is shown to the people in your We Pick sessions.

Dietary information

Ingredients you avoid, allergies, and eating styles are the heart of YouPick, and some of them can say something sensitive about you (an allergy, or a diet such as halal). We use them only to choose and filter meals for you and, in We Pick, for the people at your table. We do not use them for advertising and we do not sell them. They leave your device only as described in "Generating picks" and "What we store on our servers".

What stays on your device

Your household preferences (ingredients you avoid, dislikes, favorite cuisines, eating styles, meal size), saved recipes and places, grocery list, meal calendar, history, and custom recipes are stored only on your iPhone. They are not uploaded, except as described in "Generating picks" below and, for We Pick sessions, in "What we store on our servers" above.

Generating picks

To generate a pick, the app sends the request and the preferences relevant to it — your mood, budget, time, cuisines, eating styles, and the ingredients you avoid, never your name or email — to our server, which forwards them to the providers below. These per-request preferences are used to produce the answer and are not stored by us.

Location

With your permission, your current location is used while you're using the app to find nearby restaurants and estimate distances. Your coordinates go to Google Places through our server for nearby searches, and to the AI provider for Ask the Local and Order In requests so it can reason about what's nearby. This also applies in Guest Mode. If you grant only approximate location, that is what we receive. Your last position is kept on your device so recommendations still work offline; we do not keep a location history on our servers. You can withdraw location permission at any time in iOS Settings; the app keeps working without it, with fewer nearby results.

AI providers and other services

Picks, Ask requests, Menu Scan, We Pick group picks, and recipe photos are generated by AI models (models from OpenAI, Google, and Perplexity, and image-generation models) reached through our server. They receive your request text, the preferences described above, We Pick first names and session preferences, and — for Menu Scan — the menu photos or menu web pages you submit. We don't store these requests or photos, and we do not use them to train models. Recipe searches send your food filters to Spoonacular to find real recipes, and restaurant results come from Google Places. For restaurant Ask requests on Premium, and for requests where you set a restaurant preference (independent places, chains, or fast food), your request text and, for restaurant requests, your coordinates are also sent through our server to Foursquare (restaurant listings) and Brave Search (web sources) to find candidates and evidence; we do not store their results.

Guest Mode

Guest Mode has no account. It uses the on-device engine, Google Places for nearby restaurants (your coordinates go to Google through our server), and built-in recipes with bundled photos — no AI requests and no AI images. A random per-install token identifies the install for rate limiting only; it is not linked to your name or to any account.

Purchases

Subscriptions are processed by Apple; we never see or store payment details. We use RevenueCat to verify your subscription status, keyed to your account; RevenueCat receives your purchase records and a device identifier for that purpose.

Analytics, diagnostics, ads, and tracking

We record usage events tied to your account to understand how YouPick is used and to fix problems. With iOS's built-in crash reporting (MetricKit), the app also sends us crash and hang reports — the failing part of the app and timing data, not your content — so we can fix problems. There are no ads, no advertising SDKs, and no tracking across other companies' apps or websites. We do not sell or share your data for others' advertising.

Children

YouPick is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email us and we will delete it.

How long we keep data

Account data is kept while your account is active. We Pick sessions and challenges expire after they end and expired records are removed. Deleting your account removes your data as described below.

Your choices and rights

You can view and change your preferences in the app at any time, revoke location and camera permissions in iOS Settings, and delete your account and data in the app. Depending on where you live, you may also have the right to ask for access to, correction of, export of, or restriction of the personal information we hold about you, and to object to certain processing. Email us and we will respond; we will not treat you differently for exercising these rights.

Deleting your account

Settings → Delete Account & Data removes, in one step on our server, every row tied to your account (taste signals and profile, daily picks, usage counts, notifications, sessions and challenges you created, your entries in other people's sessions, and your profile photo), then removes your subscription record at RevenueCat. Deleting your account does not cancel an active subscription — manage that in your Apple ID settings. Once the server confirms, the app erases everything on this device and signs you out. If a step can't be finished, the app tells you exactly what is still pending and lets you retry. Your sign-in identity with our provider is removed as soon as they support it; you can also revoke YouPick in your Apple ID or Google account settings.

Changes to this policy

When we change this policy we update the effective date above; for material changes we also tell you in the app.

Contact

Questions about privacy? Email youpickfoodcompany@gmail.com.