Data Policy — Yumble

Last updated: 11 August 2026

This Data Policy is a plain-English companion to our Privacy Policy & GDPR notice. It explains, simply, what data Yumble collects, why, and the control you have over it. Where this summary and the full Privacy Policy differ, the Privacy Policy governs.

Who is responsible for your data

Yumble ("we", "us") is the data controller for the personal data you give us. Our registered address is 17 Hanover Square, London W1S 1BN. For any data question, email hello@yumble.app and we'll respond within 30 days.

What we collect

Account details — your name, email, date of birth (to confirm you're 18+), and login credentials.
Verification data — a selfie and photo ID, used only to confirm you're a real person over 18. See how we handle this below.
Profile & taste data — your photos, bio, cuisines, dietary and faith preferences, and taste-game answers, used to build your Foodie matches.
Activity data — matches, messages, bookings, venues you save, and how you use the app.
Device & technical data — approximate location (for nearby matches and venues), device type, and app diagnostics.

Why we collect it (our lawful bases)

To provide Yumble (performance of a contract) — matching, chat, bookings.
Safety & verification (legitimate interests and legal obligation) — keeping the community real, safe and 18+.
With your consent — marketing emails, and processing of sensitive data such as dietary/faith preferences you choose to share.
Legal compliance — where the law requires us to keep or disclose certain records.

Sensitive data

Some information — such as faith-based dietary needs, or the fact that you're using a social-dining app — can reveal special-category data under UK GDPR. We only process it to give you better matches and a safer experience, only with your consent, and you can remove it at any time in the app.

Your ID and selfie

Your verification selfie and ID are used solely to confirm your identity and age. They are stored securely, are never shown on your profile, and are not shared with other members. We retain them only as long as needed for safety and legal purposes, then delete them.

Who we share with

We do not sell your personal data. We share limited data only with: trusted infrastructure providers (e.g. Google Firebase, which hosts our app in the UK/EU), our verification and email providers, partner venues (only the booking details needed to hold your table — never your contact details), and authorities where legally required.

Where your data lives

Yumble runs on Google Cloud infrastructure in europe-west2 (London). Where any provider processes data outside the UK/EEA, we rely on approved safeguards such as Standard Contractual Clauses.

How long we keep it

We keep your data while your account is active. If you delete your account, we remove your profile and personal data promptly, retaining only what we're legally required to (and verification records for a limited safety window). You can delete your account any time from Settings or our account deletion page.

Your rights

Under UK GDPR you can access, correct, delete, restrict or port your data, object to certain processing, and withdraw consent at any time. To exercise any right, email hello@yumble.app. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

← Back to Yumble