Information
Privacy at YumYum
Who operates this service
Bob
Information used by the service
YumYum uses account and contact details, restaurant memberships and permissions, scheduling preferences, shifts, attendance, pay and tips, and work requests. These support sign-in, work planning and restaurant records. Access depends on the person’s role and restaurant.
The app requests foreground location only when you choose to attach it to a clock-in or clock-out. You can clock without location. Device credentials use the operating system’s secure storage; the website uses sign-in and security cookies. The service also records audit events and operational diagnostics.
Retention and deletion
Effective 21 October 2026. This initial service is offered to restaurants operating in Israel and their teams. Other markets are not part of this launch. Your restaurant decides how its employment records are used. Bob operates YumYum and handles accounts, security and support. Providing account details is voluntary, but an email address and name are needed to use an account. Phone and clock location are optional. Restaurant owners and authorised team members see information according to their permissions. Personal agents receive only the access you authorise; you can revoke their credentials. Account deletion immediately removes sign-in/profile identifiers, linked sign-in methods, device and agent credentials, and mutable availability preferences. A non-login identifier and necessary employment, pay, tip and audit history remain linked to the restaurant, including historical names and work-related explanations. The operator reviews these retained records with the restaurant quarterly. The default retention period is seven years after the relevant calendar year ends. Where an accounting record must be kept longer, the restaurant must provide the applicable deadline, including six years after filing the relevant tax return where that is later. A specific legal dispute or preservation duty can extend retention only for the necessary records, with a documented reason and review date. Expired business records are removed or anonymised through an operator-controlled maintenance process, not by account deletion. Do not put medical diagnoses, identity documents or unrelated private information in work notes. Precise clock coordinates and derived distance are removed after 90 days by bounded housekeeping; attendance times and warning history remain. Expired browser sessions and one-time proof records are removed after one day, and expired or revoked device credentials after 30 days. These removals run in batches, so completion can follow the threshold rather than occur at that exact instant. Account authentication stops at expiry or revocation. Google Cloud hosts the app and primary database in Tel Aviv. Google Workspace/Gmail handles account and support email. Google Cloud provides HTTPS and request protection; Cloudflare provides DNS only. Email, network processing and provider diagnostics can take place outside Israel. Ordinary application logs are retained for 30 days; Google-required administrative audit logs for 400 days. Database recovery uses seven daily backups and seven-day transaction history; deleted data ages out as those rotate, and exceptional failed backups or incident preservation can extend this. Support correspondence is reviewed and removed within two years after resolution unless needed for a documented dispute. YumYum does not sell personal information or use it for advertising. To request access, correction or deletion, contact yumyum@canonmail.com. We verify the requester and involve the restaurant where it controls the record. We aim to respond within 30 days and explain any required retention. Account deletion is also available from Account or /en/delete-account. Deletion is permanent; a sole owner must first transfer ownership or retire an eligible restaurant.
Account deletion does not necessarily erase all restaurant employment records. The deletion screen explains what will be removed and what will remain before you confirm.