Service providers

Last updated: October 2026

Yummbak uses a small number of third-party services to run. Each one receives only what it needs to do its job, may use it only to provide that service to us, and is bound by a data processing agreement requiring protections comparable to those New Zealand law requires.

This page is kept current. If we add a service that handles your information, it is listed here.

Supabase

Holds the database and the meal photo storage. Receives everything you log, your profile and your tracking plan.

Sydney, Australia

Google Cloud

Analyses meal photos and descriptions to estimate what was eaten, and hosts the form your dietitian uses to give us beta feedback. Receives the photo or description, and any feedback your dietitian gives us about your care. Google does not use it to train its models.

Singapore (meal photos), United States (beta feedback)

Railway

Runs the Yummbak application. Information passes through in order to be served to you, and nothing clinical is stored there.

Singapore

Resend

Delivers email, such as invitations, sign-in codes and reminders. Receives your email address and the content of the message.

United States

Sentry

Reports technical errors so we can fix them. Configured to collect no personal or health information: no identity, no cookies, no request contents, and no session recording.

European Union

WhatsApp (Meta)

Only if you choose to log through WhatsApp. Receives the messages you send that way. You can use the Yummbak app instead and leave WhatsApp out entirely.

Meta

We also use the New Zealand Food Composition Database (FOODfiles 2024) as the reference for nutrition values. It is reference data only, and no personal information is shared with it.

Questions about anything on this page: privacy@yummbak.com. See also our Privacy Policy.