Privacy policy

Yuta (yuta.food) is a private, invite-only recipe app for the Weinstock family. It stores the family's recipes and the stories behind them, helps plan meals for Shabbos and holidays, and includes an AI cooking assistant. It is run by Daniel Weinstock as a personal, non-commercial project. This policy explains what information Yuta collects, how it is used, and the choices you have.

Information we collect

• Account information. When you sign in with Google, we receive your name, email address and profile picture. When you sign in with an email code or link, we receive your email address.
• Content you add. Recipes, notes and stories, photos, videos, original documents and emails you upload or forward, cooking logs ("makes"), ratings, reviews, comments, favorites, meal plans and shopping lists.
• Information about other people. Family members may record other people, such as relatives or regular guests. This includes their name, whether they are an adult or a child, and which dishes they like, so meals can be planned for them.
• Preferences. For example, your measurement units and email subscriptions.
• Technical information. Sign-in cookies that keep you logged in, and standard server logs (such as IP address and browser type) kept by our hosting providers for security and troubleshooting.

How we use it

• To sign you in and show you the recipes and plans you have access to.
• To run Yuta's features: scaling recipes, converting units, planning meals, building shopping lists, and showing family history.
• To send emails you ask for or that relate to your account: invitations, sign-in codes, notifications about replies and changes, and the optional weekly digest. You can unsubscribe from the digest at any time.
• To power AI features: turning photos, documents and emails into recipe drafts, and answering your questions in the assistant. See "AI processing" below.

We do not sell your information, show ads, or use your information for advertising or profiling.

Google user data

Yuta requests only the basic Google sign-in scopes (openid, email, profile). We use your Google name, email address and profile picture only to create and identify your Yuta account and to show your name to family members. We do not access your Gmail, Drive, Contacts, Calendar or any other Google data. We do not share Google user data with anyone except the service providers listed below that run Yuta, and we do not use it to train AI models. Yuta's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who can see your information

• Recipes are visible according to the setting their contributor picks: the whole family ("Yitchen"), specific people, or only the contributor ("My Kitchen"). Makes, reviews and comments on a recipe follow the same setting.
• Share links. A contributor can create a read-only link to a recipe for someone outside the family. The link shows the recipe only, never family discussion, and can be revoked at any time.
• Your name and profile picture are visible to members of your family kitchen.

Service providers

We use these companies to run Yuta. They process information only to provide their service to us.

• Supabase: database and sign-in (United States).
• Amazon Web Services (S3): private storage for photos, videos and uploaded files (United States).
• Vercel: website hosting.
• Anthropic: AI processing (see below).
• Resend: sending email.
• Google: sign-in with Google.

Holiday dates come from Hebcal; no personal information is sent to them.

AI processing

When you ask Yuta to extract a recipe, or ask the assistant a question, the relevant content is sent to Anthropic's Claude API for processing. That content can include the text, photos or documents you provided and the recipes needed to answer. Under Anthropic's commercial API terms, this data is not used to train their models. AI-extracted recipes are always saved as drafts for a person to review before anyone else sees them.

Keeping information and deleting it

Yuta is a family archive, so recipes and their original sources are kept long-term. You can ask us at any time to delete your account, or to delete or anonymize content you added, by emailing privacy@yuta.food. We will do so within 30 days, except where the information must be kept for legal reasons. Backups are overwritten on a rolling basis.

Security

Information is encrypted in transit and at rest with our providers. Uploaded files are kept in private storage and are only served through short-lived links to people allowed to see them. Access rules are enforced in the database, not just in the app.

Children

Accounts are created only by invitation from a family admin, and are not intended for children under 13. Family members may record a child's name and food preferences for meal planning. A parent or guardian can ask us to update or remove that information.

Cookies

Yuta uses only the cookies needed to keep you signed in. It does not use analytics, advertising or tracking cookies.

Changes

If we change this policy, we will update the date above. For significant changes we will also notify members by email.

Contact

Questions or requests: privacy@yuta.food

Back to Yuta