1. Who we are

Who is collecting this data? This project is led by a research team building a new grocery and nutrition intelligence platform. Data collected will help improve and test the early version of the product, which is being developed by Catena MBA SEZC, a Cayman Islands based technology company.

For any questions, you can contact us at: info@yoffi.app

2. What information we collect

We collect information such as:

• Basic demographics (age range, sex, household size)
• Dietary habits, food preferences, and nutritional goals
• Shopping habits and receipt data

No sensitive health data or financial information is collected at this stage.

3. How we use your information

We use your data for the following purposes:

• To provide and personalise the service we are building.
• To improve our algorithms, models, and features.
• To communicate with you about updates, service issues, and offers.

We may also use anonymised and aggregated data for research, analytics, and product development.

4. Legal basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract: processing necessary to provide the service you signed up for.
• Consent: where you upload receipts or opt into marketing communications.
• Legitimate interests: to improve our services, provided these interests are not overridden by your rights.
• Legal obligation: when required to comply with UK law.

5. Where and how data is stored

• Storage: We use Supabase (based in the EU) for secure database storage, and Vercel for hosting our frontend. Both providers comply with GDPR and maintain industry-standard security.
• Security: Data is encrypted in transit (TLS) and at rest. Access is restricted to authorised staff only.
• Receipts: Uploaded receipts are stored securely and only used for analysis linked to your account.

6. Sharing your information

We do not sell your personal data.

We may share limited data with:

• Service providers (e.g. Supabase, Vercel, analytics, email providers) under strict contractual obligations.
• Legal authorities where required by law.
• Business partners only in anonymised, aggregated form (never identifying you personally).

At present the data we are collecting is purely for AI training.

7. How long we keep your information

The current data collection process is being done to train our AI models. Participants not wishing to continue this exciting journey with us (and gain access to the app we are developing) can opt to delete all personally identifying data. Data used to train the AI will be completely anonymised and delinked to any profile you will have created. It will therefore only be used to help with model training and cannot in any way be attributed to you.

8. Your rights

Under UK GDPR you have the right to:

• Access your personal data.
• Correct inaccurate information.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability (export your data).
• Withdraw consent at any time (where processing is based on consent).

To exercise your rights, contact us at info@yoffi.app

9. Children's privacy

Our service is not intended for users under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in law or our services. We will notify you of material updates by email or in-app.

11. Contact us

If you have concerns about your data, you can contact us at info@yoffi.app