Privacy policy
Last updated: September 9, 2026
Data controller
Ludovic Dumay, self-employed entrepreneur, is the data controller for personal data collected on yinshi.app.
Email: contact@yinshi.app
Data collected
Navigation data: IP address (anonymized), pages visited, session duration, device type, browser. Collected via Google Analytics 4 with IP anonymization enabled.
User account: email address, password (hashed), language preferences, food search history. Stored via Supabase.
Subscription data: email address, payment history (via Google Play Billing). No banking data is stored on our servers.
Newsletter: email address, subscription date.
Purposes and legal basis
Service provision: account creation, feature access, food search. Legal basis: contract performance (Art. 6(1)(b) GDPR).
Audience measurement: traffic analysis to improve the site and application. Legal basis: consent (Art. 6(1)(a) GDPR), collected via Google Analytics consent mode.
Communication: newsletter sending. Legal basis: consent (Art. 6(1)(a) GDPR).
Security: fraud and abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Retention period
Navigation data (GA4): 14 months (GA4 default configuration).
User account: retained as long as the account is active, deleted 30 days after deletion request.
Subscription data: 3 years after the end of the last contractual relationship (accounting obligations).
Newsletter: until unsubscribed (unsubscribe link in each email).
Recipients
Ludovic Dumay (publisher): access to data necessary for the operation of the service.
Google Analytics 4 (Google LLC): processing of anonymized navigation data. Google acts as a data processor.
Supabase: hosting of user accounts. Supabase acts as a data processor.
No data is sold or transferred to third parties for commercial purposes.
Transfers outside the EU
Google Analytics and Supabase may process data in the United States. These transfers are governed by Standard Contractual Clauses (SCC) compliant with the GDPR.
Your rights
In accordance with the GDPR, you have the following rights:
Right of access: obtain a copy of your personal data.
Right to rectification: correct inaccurate data.
Right to erasure: request the deletion of your data.
Right to restriction: restrict the processing of your data.
Right to data portability: receive your data in a structured format.
Right to object: object to the processing of your data.
Right to withdraw your consent at any time.
To exercise these rights: contact@yinshi.app
You can also file a complaint with the CNIL (www.cnil.fr).
Cookies
The site uses Google Analytics 4 in consent mode. No tracking cookie is placed before your consent.
You can manage your preferences through your browser settings.
Security
Data is transmitted via HTTPS (TLS 1.3). Passwords are hashed. Access to data is restricted to authorized persons.