YUMESign in

Privacy Policy

Last updated: June 17, 2026

This Privacy Policy explains how YUME (“YUME”, “we”, “us”, or “our”) — an independent service operated by an individual resident in Ukraine — collects, uses, and shares information when you use the YUME website at yume-me.com and its related features (the “Service”). It should be read together with our Terms of Service.

1. Information we collect

Information you provide

  • Account and contact details — your email address, which we use for passwordless “magic link” sign-in, and any email you submit to join the waitlist.
  • Profile information — optional details you add, such as a celebration or birthday date, a location, a short bio, and style preferences.
  • Photos you upload — face or body reference photos that you choose to upload so the Service can generate scenes picturing you with an item. These are images of you (or of a person whose consent you have obtained) and we treat them with particular care.
  • Wishlist content — the product links you save and the resulting item details (title, image, price, and similar), along with how you arrange them.
  • Reservations — if you reserve a gift on someone’s wishlist, the name and email you provide for that reservation.
  • Support messages — the content of messages you send us through the in-app support chat.

Information collected automatically

  • Usage and device data — such as your IP address, browser and device type, pages viewed, and actions taken, collected to operate, secure, and improve the Service.
  • Session analytics and replays — we use analytics tools that may record interactions (for example, clicks and scrolling) to help us understand and improve how the Service is used.
  • Cookies and similar technologies — including a cookie that keeps you signed in, and cookies or scripts used for bot protection and analytics. See Section 8.

We do not collect or store your full payment card details. Payments are handled by our payment provider (see below).

2. How we use your information

  • to provide the Service — create and maintain your wishlist, save items, and arrange your board;
  • to sign you in via magic link and keep your session secure;
  • to generate AI scenes from the photos and product images you select;
  • to process credit purchases and keep a record of your credits and transactions;
  • to enable reservations and the gift-coordination features;
  • to prevent abuse, enforce rate limits, and keep the Service secure;
  • to measure and improve the Service through analytics;
  • to respond to your support requests and send service-related messages; and
  • to comply with legal obligations.

3. AI processing of your photos

When you generate a scene, the photos you have selected, the product image, and a short text description are transmitted to third-party AI providers that create new images and extract product-related text on our behalf. We send only what is needed to produce your scene. Generated scenes and the images involved are stored so you can view them in your wishlist, and you can delete your uploaded photos and generated scenes from within the Service. We do not sell your photos, and we do not use them to advertise to you.

4. How we share information

We do not sell your personal information. We share it only with service providers that help us run YUME, and only as needed for the purposes described above. These providers include:

  • Supabase — database, authentication, and file storage (hosted in the EU).
  • Vercel — application hosting, serverless functions, and product analytics.
  • Resend — delivery of sign-in (magic link) and transactional emails.
  • Stripe — payment processing for credit purchases.
  • AI providers (including fal.ai, Wavespeed, and Anthropic) — generation of scene images and extraction of product-related text used to build prompts.
  • Microsoft Clarity — usage analytics and session replay.
  • Upstash — rate limiting to protect the Service from abuse.
  • Cloudflare — bot protection (Turnstile) and a fetch proxy used when retrieving product information.
  • Web-data providers (including Scrape.do, Bright Data, Jina, and Microlink) — used to retrieve publicly available product information from the links you save.
  • Telegram — routing and handling of in-app support conversations.

We may also disclose information if required by law or legal process, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information.

5. Reservations and the owner blind-spot

YUME is built so that the owner of a wishlist cannot see who reserved which item. Reservation details (the reserver’s name and email) are never returned to the wishlist owner. This is enforced on our servers so that gifts can stay a surprise.

6. Data location and international transfers

Our primary database and file storage are hosted in the European Union, and our application functions are configured to run in the EU. Some of the service providers listed above operate in other countries, including the United States, so your information may be transferred to and processed outside your country of residence. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

7. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. You can delete your uploaded photos, generated scenes, items, and account from within the Service. After deletion, we remove your information within a reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Routine backups may persist for a limited time before being overwritten.

8. Cookies and similar technologies

We use a small number of cookies and similar technologies that are necessary to operate the Service (for example, to keep you signed in and to protect against bots), as well as analytics technologies that help us understand usage. You can control cookies through your browser settings, though disabling necessary cookies may prevent parts of the Service from working.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You can exercise many of these directly in the Service (for example, editing your profile or deleting photos, scenes, items, or your account). For other requests, contact us using the details below. You also have the right to complain to your local data-protection authority.

10. Security

We use technical and organizational measures designed to protect your information, including access controls and encrypted connections. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11. Children

The Service is not directed to, and is not intended for, anyone under 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above and, where appropriate, provide additional notice.

13. Contact

For privacy questions or to exercise your rights, contact us through the in-app support chat, which connects you to our Telegram support.