Privacy Policy

Company: Yummy, MB
Registration code: 306425153
Address: Žaibo g. 1-78, LT-04126 Vilnius, Lithuania
Email: juras.sulcas@gmail.com

We collect and process the following personal data:

We process your personal data for the following purposes and legal bases (GDPR Article 6):

Your personal data may be shared with the following recipients:

• Cloud Infrastructure Providers – For data storage and processing. Data is stored on EU servers where possible.
• AI Processing Services – For generating AI advertising content based on your uploads.
• Payment Processors – For handling subscription payments securely.
• Analytics Services – For understanding service usage (anonymized where possible).
• Law Enforcement – When required by law.

Your primary data is stored on servers within the European Union. Some service providers may transfer data to the USA. In such cases, we apply appropriate safeguards under GDPR Article 46, including European Commission-approved Standard Contractual Clauses.

Under the GDPR, you have the following rights:

• Right of Access (Art. 15) – Obtain information about your processed data
• Right to Rectification (Art. 16) – Request correction of inaccurate data
• Right to Erasure (Art. 17) – Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Art. 18) – Request limitation of data processing
• Right to Data Portability (Art. 20) – Receive your data in a structured format
• Right to Object (Art. 21) – Object to processing based on legitimate interest
• Right to Withdraw Consent – Withdraw consent at any time (without affecting prior processing)

To exercise these rights, contact us at: juras.sulcas@gmail.com

If you believe your data is being processed in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

Lithuanian Supervisory Authority:
State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija)
Address: L. Sapiegos g. 17, 10312 Vilnius, Lithuania
Website: vdai.lrv.lt
Email: ada@ada.lt

Providing personal data is voluntary but necessary to use our services. Without providing the required data (email, password), you cannot create an account and use personalized features.

We do not use your personal data for automated decision-making or profiling that would have legal or similarly significant effects on you. Our AI services process your uploaded content to generate advertisements but do not make automated decisions about you as an individual.

We use cookies to operate our service. You can manage your preferences on our Cookie Settings page.

We implement appropriate technical and organizational measures to protect your data:

• Data encryption in transit (TLS/SSL)
• Password hashing
• Access control and authentication
• Regular security reviews
• Secure cloud infrastructure

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through our service. For questions, contact us at the email listed in Section 1.