Privacy Policy
This policy explains what YouEat collects, why, and the choices you have. It's written to be readable — each section opens with a plain-language summary, followed by the detail. It isn't legal advice, and the formal text below governs.
Data we collect
We collect information in three ways: what you give us, what's generated as you use YouEat, and what your device shares automatically.
How we use it
- Provide the service — generate plans, build shopping lists and sync your account across devices.
- Improve it — understand which features help so we build the right things next.
- Communicate — service notices always; product tips only if you opt in.
Our legal bases are performance of contract, our legitimate interest in improving the product, your explicit consent for the health data you enter during onboarding, and your consent for analytics and marketing cookies.
Cookies & analytics
We load third-party tags through Google Tag Manager and gate non-essential ones behind consent. Current providers:
If you accept, we also send Meta, from our server, the moments that matter for our ads: sign-up, completed registration, the start of a trial and a purchase. They go with your e-mail address and account ID in hashed form, a shortened IP address, browser details and Meta's cookie identifiers (_fbp, _fbc). Meta uses them to measure and improve our ads and, as our joint controller for this transfer, for its own ad delivery as well. If you decline, none of this is sent.
With the same consent we may show our ads on Facebook and Instagram to people who visited our website or engaged with our profiles there (Meta calls these custom audiences). We never send Meta your health data, dietary preferences or allergens, and we never build audiences from them.
Change or withdraw your consent any time under Cookie settings in the footer of the website or the app; withdrawing also removes Meta's cookies. You can also adjust the ads you see in Meta's ad preferences (facebook.com/adpreferences) and opt out of interest-based advertising in general at youronlinechoices.eu. Blocking non-essential cookies won't affect core planning features.
Subprocessors
Each acts under a data-processing agreement; with Meta it is the joint-controller arrangement described above. The list changes as we add or replace vendors; the version published here is always the current one. Ask at privacy@youeat.click for the agreements.
Your rights
Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection. You can delete your account yourself in Settings → Account; it takes effect immediately and cannot be undone. For anything else, write to privacy@youeat.click and we will act within 30 days. Deletion removes your data from our live systems, overwrites the personal details inside our event history rather than leaving them recoverable, and is passed on to our processors. Three things survive it, and you should know which: invoices and their amounts, because Czech accounting and tax law require them (5 years, 10 for VAT); advertising conversion events already delivered to Meta, which has no interface for withdrawing them; and database backups, for up to 48 hours until they roll over.
Who we are, and how to reach us
YouEat is a service of Host Hive s.r.o., which is the controller of the personal data described in this policy.
Questions about this policy or a data request? Email privacy@youeat.click. You also have the right to lodge a complaint with a supervisory authority — in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), or the authority where you live.