YouEatYouEat
Legal

Privacy Policy

Last updated24 Aug 2026

This policy explains what YouEat collects, why, and the choices you have. It's written to be readable — each section opens with a plain-language summary, followed by the detail. It isn't legal advice, and the formal text below governs.

01

Data we collect

In plain terms: your account details, the goals and allergens you set, and basic usage data so the app works and improves. No selling your data — ever.

We collect information in three ways: what you give us, what's generated as you use YouEat, and what your device shares automatically.

AccountEmail, display name and, for Premium, billing details handled by our payment processor — we never store card numbers.
PreferencesCalorie and macro targets, dietary preferences and the 14 allergens you flag — used only to generate your plans.
Health data you enter during onboardingWeight, height, age, gender and activity level, which we use to calculate your calorie and macro targets. Together with allergens and dietary choices this counts as health data — a special category under Article 9 of the GDPR — so we process it only with your explicit consent, and only to build your plans. Your plans cannot be calculated without it, so this consent is a condition of holding an account rather than an optional extra. You can withdraw it at any time by deleting your account in Settings → Account, which erases the data.
Usage & devicePages viewed, features used, browser type, and your IP address shortened to a network prefix (we drop the last part, so it tells us a region and not a household).
02

How we use it

In plain terms: to run the service, keep it secure, and make it better — plus emails you can turn off.
  • Provide the service — generate plans, build shopping lists and sync your account across devices.
  • Improve it — understand which features help so we build the right things next.
  • Communicate — service notices always; product tips only if you opt in.

Our legal bases are performance of contract, our legitimate interest in improving the product, your explicit consent for the health data you enter during onboarding, and your consent for analytics and marketing cookies.

03

Cookies & analytics

In plain terms: essential cookies keep you signed in; analytics and marketing cookies only run if you accept them in the consent banner. You can change your choice any time.

We load third-party tags through Google Tag Manager and gate non-essential ones behind consent. Current providers:

Provider
Purpose
Category
Google Tag Manager
Loads and manages the tags below
Functional
Google Analytics 4
Traffic and product usage analytics
Analytics
Meta Pixel
Ad measurement and retargeting
Marketing
PostHog
Product analytics and session insights
Analytics

Manage or withdraw consent via the cookie banner. Blocking non-essential cookies won't affect core planning features.

04

Subprocessors

In plain terms: a small set of vetted vendors help us run YouEat — hosting, payments, email and the analytics above — each under a data-processing agreement.
Hetzner Online (hosting)Servers in Germany running the app and its database.
Amazon Web Services (EU)Object storage for images and encrypted database backups, and Amazon SES for transactional e-mail. Frankfurt region.
CloudflareDNS and the encrypted tunnel that carries traffic to our servers.
StripePCI-DSS payment processing for Premium subscriptions. Stripe keeps its own billing records under its legal obligations.
PostHog (EU)Product analytics, only with your consent. Hosted in the EU.
Google (GA4 / Tag Manager)Website and app analytics, only with your consent.
MetaAdvertising measurement, only with your consent. Conversion signals already sent to Meta cannot be recalled beyond a deletion request.

Each acts under a data-processing agreement. Ask at privacy@youeat.click for the agreements or any change to this list.

05

Your rights

In plain terms: you can access, export, correct or delete your data, and object to certain processing. Ask us and we'll act within 30 days.

Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection. You can delete your account yourself in Settings → Account; it takes effect immediately and cannot be undone. For anything else, write to privacy@youeat.click and we will act within 30 days. Deletion removes your data from our live systems, overwrites the personal details inside our event history rather than leaving them recoverable, and is passed on to our processors. Three things survive it, and you should know which: invoices and their amounts, because Czech accounting and tax law require them (5 years, 10 for VAT); advertising conversion events already delivered to Meta, which has no interface for withdrawing them; and database backups, for up to 48 hours until they roll over.

06

Who we are, and how to reach us

In plain terms: YouEat is operated by Host Hive s.r.o. — questions or a data request go to privacy@youeat.click.

YouEat is a service of Host Hive s.r.o., which is the controller of the personal data described in this policy.

CompanyHost Hive s.r.o.
Company ID06294120
VAT IDCZ06294120
Registered officeVelenovského 3251/1, Záběhlice, 106 00 Prague 10, Czech Republic
Commercial registerMunicipal Court in Prague, Section C, Insert 279660
Privacy contactprivacy@youeat.click

Questions about this policy or a data request? Email privacy@youeat.click. You also have the right to lodge a complaint with a supervisory authority — in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), or the authority where you live.

Version 3.2 · Effective 24 Aug 2026← Back to YouEat