YouCai Privacy Policy

Last updated: April 20, 2026 · Applies to YouCai for iOS (version 1.0.0 onward)

YouCai is a fridge vegetable tracker. We collect only what is needed to run the app. No ads, no profiling, no data resale.

1. What we collect

• Account: your email (for sign-in and sync). We do not collect phone numbers, real names, or government IDs
• Vegetable records: the vegetables you manually enter or recognize via camera, along with quantity, storage location, purchase date, and shelf life
• Consumption logs: the "cooked it / tossed it" events you log in-app
• Subscription status: whether you are a YouCai Pro subscriber (derived from anonymous receipt data via Apple and RevenueCat). We never store your payment credentials

2. What we do not collect

• No phone number
• No location data
• No contacts or microphone access
• No device identifiers (IMEI, IDFA, OAID)
• No advertising SDK, no behavioral tracking

3. AI fridge recognition (important)

When you use the "Snap a photo" feature:

• Your photo is compressed to 1024px and forwarded once through our server (recipe.tucao.art, self-operated) to the OpenRouter AI gateway for visual recognition
• We do not retain photos: our server holds image data only during the request and discards it immediately after the response. No disk write, no log, no database
• OpenRouter retains inputs briefly per its policy for safety auditing. See OpenRouter Privacy Policy for details
• The recognized result (vegetable names, quantity estimates) is only written to our database after you confirm it
• Free tier is limited to 5 AI recognitions per day; we only keep a call counter in our ai_quota table for rate limiting

4. Where your data lives

Your account and vegetable records are stored on our self-hosted Supabase instance (api.maaker.cn, located in a mainland China data center that we operate ourselves). We do not delegate hosting to any third-party cloud, and your data does not cross borders.

Row-level security (RLS) policies ensure each user can only read and write their own data.

5. Third-party services

• RevenueCat: manages subscriptions. It only sees anonymous subscriber identifiers and Apple's receipt — not your email or vegetable data. See RevenueCat Privacy Policy
• Apple App Store: processes all in-app purchases. We never touch your credit card or Apple ID password
• OpenRouter: passively invoked only during AI recognition (see section 3)

6. Notifications

Enabled only if you opt in:

• Expiry reminders: local notifications at T-3, T-1, and T-0 days before a vegetable expires
• Morning market reminder: optional daily 7:00 AM reminder

All notifications are local (scheduled by iOS). Nothing hits a push server, and we cannot tell when or whether you opened them.

7. Permissions

• Camera: to take photos of your fridge for AI recognition
• Photo Library: to pick existing photos for AI recognition
• Notifications: expiry and morning reminders (toggleable in Settings)

8. Data export and deletion

• Export: Profile > Export Data gives you a JSON file with every vegetable, consumption log, and stat under your account
• Account deletion: email support@maaker.cn with your deletion request. We fully purge your account, vegetables, consumption logs, and quota records within 7 days
• Subscription records on Apple / RevenueCat side expire on their own schedule; we keep only an anonymous "was a subscriber" counter locally

9. Children

YouCai is not directed at children under 13 and we do not knowingly collect information from them.

10. Changes to this policy

If a future version changes how we handle data, we will notify you in-app and update this page. Material changes will prompt re-consent on next launch.

11. Contact

For questions or to exercise your data rights (access / correction / deletion):

• Email: support@maaker.cn

12. Support

Found a bug? Have a feature request? Email support@maaker.cn — we read every message weekly.