Privacy Policy

This project is led by a research team building a new grocery and nutrition intelligence platform. Data collected will help improve and test the early version of the product, which is being developed by Catena MBA SEZC, a Cayman Islands based technology company.

For any questions, you can contact us at: Support@yoffi.app

We collect information such as:

• Basic demographics (age range, sex, household size)
• Dietary habits, food preferences, and nutritional goals
• Shopping habits and receipt data

No sensitive health data or financial information is collected at this stage.

We use your data for the following purposes:

• To provide and personalise the service we are building.
• To improve our algorithms, models, and features.
• To communicate with you about updates, service issues, and offers.

We may also use anonymised and aggregated data for research, analytics, and product development.

Under UK GDPR, we rely on the following lawful bases:

• Contract: processing necessary to provide the service you signed up for.
• Consent: where you upload receipts or opt into marketing communications.
• Legitimate interests: to improve our services, provided these interests are not overridden by your rights.
• Legal obligation: when required to comply with UK law.

• Storage: We use Supabase (based in the EU) for secure database storage, and Vercel for hosting our frontend. Both providers comply with GDPR and maintain industry-standard security.
• Security: Data is encrypted in transit (TLS) and at rest. Access is restricted to authorised staff only.
• Receipts: Uploaded receipts are stored securely and only used for analysis linked to your account.

We do not sell your personal data.

We may share limited data with:

• Service providers (e.g. Supabase, Vercel, analytics, email providers) under strict contractual obligations.
• Legal authorities where required by law.
• Business partners only in anonymised, aggregated form (never identifying you personally).

At present the data we are collecting is purely for AI training.

The current data collection process is being done to train our AI models. Participants not wishing to continue this exciting journey with us (and gain access to the app we are developing) can opt to delete all personally identifying data. Data used to train the AI will be completely anonymised and delinked to any profile you will have created. It will therefore only be used to help with model training and cannot in any way be attributed to you.

Under UK GDPR you have the right to:

• Access your personal data.
• Correct inaccurate information.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability (export your data).
• Withdraw consent at any time (where processing is based on consent).

To exercise your rights, contact us at Support@yoffi.app

Our service is not intended for users under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy to reflect changes in law or our services. We will notify you of material updates by email or in-app.

If you have concerns about your data, you can contact us at Support@yoffi.app