← Yuzh

yuzh — privacy policy

last updated october 21, 2026

Yuzh is made by Deez Labz, LLC. The short version: your food diary lives on your phone, an account is optional, only friends you approve can see your stuff, and we don't run ads, sell data, or upload your contacts. The longer version follows.

What the app stores

Yuzh works without an account. Everything you log — restaurants, visits, dishes, your exact modifications, ratings, notes, and photos — is stored locally on your device.

If you create an account

Accounts use Sign in with Apple only. When you sign in, we store:

• an account identifier from Apple (we support Hide My Email; we never require your real email address),
• the handle, display name, optional profile photo, and optional city you choose,
• a copy of your food diary (the data above), so it can back up and sync between your devices and be shown to friends you approve.

This data is stored with our hosting provider, Supabase, on servers in the United States (Oregon). Access is enforced by database-level security rules: no other user can read your rows except crew members you have approved.

We can. Deez Labz is two people, and we have an internal console that can read accounts, collections, photos, bug reports and the diagnostics below. We use it to fix things and to handle reports of abuse, every read is logged, and it cannot change or delete your data. We are telling you this because "nobody else can see it" would be a nicer sentence and it would not be true.

Signing in with Apple also gives us whatever Apple sends with it — an account identifier, and the name and email address you chose to share (Hide My Email is supported and is what most people send). We keep the token that lets us disconnect your Apple sign-in when you delete your account.

Friends ("your crew")

Friending always requires a request and an acceptance — by exact handle, QR code, or a link you hand to someone. There is no search, no suggested friends, and no contacts upload. Crew members see your collection — restaurants, dishes, ratings, notes, and photos. If that's not what you want with a particular person, don't accept their request, remove them, or block them; all three are in the app.

Photo analysis

Yuzh does not send your photos to be analysed by anyone, including any AI service. You name each dish yourself, or tap one you have logged at that restaurant before. (Test builds released before October 21, 2026 could send a capture photo to Anthropic's Claude to suggest a dish name; that feature has been removed.)

If you have signed in, your photos back up to your own account as described under “If you create an account”. That backup is the only copy of a plate that leaves your phone. What we keep there is a square copy of the plate, framed the way you framed it and sized for the app to draw; the full-resolution photograph, and anything you cropped out of it, stays on your phone and is never uploaded.

Notifications

If you turn on notifications, we store a push token for your device so we can deliver them (friend requests, and moments like two friends logging the same dish). Every kind of notification has its own switch in Settings.

Reporting a problem

Shaking your phone anywhere in the app opens a report. If you send one, it carries what you typed, a screenshot of the screen you were on (you can turn that off before sending), a few minutes of the app's own technical log, and a page of diagnostics about your phone and the app's state — which the app shows you, in full, before you press send. Reports are kept so we can fix what they describe; if you later delete your account, the report stays and the link between it and you is cut.

How the app is doing

The app sends us a small amount of information about how it is working: which features get used, how long things take, and — most usefully — when something breaks, like a sync that stops or a photo that fails to upload.

It is deliberately narrow. It cannot carry your dishes, your notes, your restaurant names, your handle, your search terms or your photos: the app is built so those cannot be put into it, and the database refuses them if they ever are. It does not carry your IP address. Where it needs to describe a number it sends a range rather than a value — including roughly how close the app thought you were to a restaurant when it asked "you're at…?", as a band like "under 25 metres", never a position.

It is tied to a random identifier for your install, not to your name. Settings → Help improve Yuzh turns it off, and turning it off also deletes what was already sent. It is kept for 90 days.

Who else touches your data

• Apple — sign-in, push notifications, and crash reports from TestFlight.
• Supabase — our database and file storage (United States, Oregon).
• Cloudflare — hosts this site and our internal console.
• Sentry — receives a report when the app crashes, freezes, or is shut down by your phone for using too much memory, so we can find out why. It gets the failure itself and the things needed to read it: which line of our code broke, your device model, your iOS version and the app version. It does not get your food. No photos, no dish or restaurant names, no notes, no handle, no email — the app strips those out before anything is sent, and the app never records your screen. It is tied to a random identifier for your install, not to you. The same Settings → Help improve Yuzh switch turns it off, straight away.

What we don't do

• No ads, no ad tracking, and no selling or sharing of your data. Nothing goes to an advertising network or a data broker, and we do not use a third-party analytics company — see "How the app is doing" above for what we collect ourselves.
• No contacts upload, and no background tracking of where you are. Location is used on your phone to recognize the restaurant you're at and, if you enable arrival nudges, to notify you locally. What we do store is the restaurants themselves — a saved spot keeps the restaurant's own coordinates, and a visit keeps a date, so if you sync, your account holds a list of places you have eaten and when. That is your food diary, and it is the point of the app; we are naming it here because "no location history" was the wrong way to describe it.
• No public profiles and no discovery — nobody can browse or search for users beyond typing an exact handle.

Deleting your account

Settings → delete account removes your account and your synced data from our servers, revokes the Sign in with Apple connection, and leaves the local copy on your phone untouched (it's yours). Records needed for safety — blocks, reports filed about an account, and the fact that a handle was once held — are retained so that deleting an account can't be used to undo them or to hijack an old link. Bug reports you sent are kept, with the link to you removed. Anything the app had sent us about how it was working is deleted outright.

Children

Yuzh is not directed at children under 13, and we don't knowingly collect data from them.

Changes and contact

If this policy changes in a way that matters, the app will say so. For anything privacy-related: privacy@deezlabz.com.