Last updated: 7 September 2026

Your recipes are personal. So is your privacy.

This page describes data handling in the current Uma iOS app and supporting service. Opening Uma requires signing in with your Apple Account, and your recipe library is kept on your device.

Data we process

• Sign in with Apple: Using Uma requires signing in with your Apple Account. Hide My Email is supported. At sign-in the app sends Apple’s signed identity token to Uma’s service, which verifies it against Apple’s public keys and keeps only a one-way digest of Apple’s app-scoped user identifier — never the identifier itself, and never the token, which is discarded once verified. The name and email Apple shares with the app stay in your device’s Keychain. Signing out removes that identity from the device; your local recipes remain.
• Recipes you choose to share: When you share a recipe as a link, that recipe and your display name are stored by Uma’s service so the person you send the link to can open it. Only someone holding the link can read it; shared recipes are never listed, indexed, or published on the web. A shared recipe is removed when you revoke its link, when it expires 90 days after sharing, or when you delete your account. Recipes you do not share are never sent for sharing.
• Account profile: Your account holds a display name, which is shown to people you share a recipe with. You can change it in Uma, and “Delete Account” in Settings permanently removes the display name and everything else the service holds for your account. Deleting the account also clears the recipe library, cover images and import history saved on your device.
• Content on your device: Recipes, ingredients, steps, photos, favorites, and app settings remain in the app’s local storage. You can remove an individual local recipe from within the app.
• Optional recipe processing: When you choose extraction from text or a social link, the text, URL, and source details such as title or description are processed to create a recipe.
• Video and speech: Audio acquired from a supported public social link may be processed temporarily for speech-to-text. Uma does not upload videos from your device. Temporary media becomes unavailable 24 hours after it is acquired and is physically deleted by the next hourly cleanup, so deletion may take roughly up to 25 hours. It is removed sooner after a successful job.
• Job results and covers: Intermediate transcription job state and outputs are retained for no more than one day after success or failure. Generated recipe results and imported cover images become unavailable 24 hours after their last update/upload and are physically deleted by the next hourly cleanup. Deletion may take roughly up to 25 hours. The app downloads a needed cover to the device.
• Security and operations: A one-way digest of the Apple App Attest key, its public key and anti-replay counter, plus network data such as IP address, request identifiers, and error/security logs may be processed to secure and operate the service. App Attest registration state is not part of the automatic 24-hour cleanup.

AI operation allowance

Uma includes three free AI operations per Apple Account per UTC day, shared between text extraction and social/video processing, resetting at midnight UTC. The allowance is held as a counter tied to your Apple Account on the service; only the number of operations and the day are recorded. Cloud features remain subject to service availability and security or abuse protections. This release contains no advertising, ad tracking, purchase, or paid overage, and the allowance cannot be raised by buying anything.

Service providers

Depending on the feature you choose, data is processed through Cloudflare Workers, R2, Workers AI, Cloudflare Images, and Uma’s self-operated media conversion service. A request for social-source metadata or public audio may be sent to the relevant YouTube, TikTok, or Instagram service. Uma does not sell your personal data.

Your controls and deletion

You can delete local recipes in the app. Deleting the app removes its active local app data from the device; device backups remain subject to Apple’s settings and retention. Temporary server content is automatically cleaned up on the schedule above. For an App Attest registration or privacy request, email ikizesad99@gmail.com.

Changes

If the app’s data handling changes, this page and its “last updated” date will be revised. This notice is general information and does not limit rights available under applicable law.