Privacy policy

Mundaka Norte S.L. (tax ID (NIF) B09751579), with registered office at Av. del Puente del Pilar, 39, 50014 Zaragoza (España). Contact for any privacy matter: yechilalways@gmail.com.

We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD, the Spanish Organic Law on Personal Data Protection and the Guarantee of Digital Rights).

Account data: your email and your password, which we store encrypted with a one-way algorithm (nobody, not even us, can read it).

Growing data that you enter voluntarily: crops, growth stages, measurements, journal, notes, inventory, your own varieties and settings.

Photos that you upload. Before storing them we remove their metadata, including GPS location. They are kept in private storage that only you can access.

Conversations with the artificial intelligence assistant and the results of the analyses you request.

Subscription data (plan, status, period and dates) and the history of payment notifications that Creem sends us (type of notification, amount and date). Your card details are handled directly by Creem; Yechil neither receives nor stores them.

If you use the free trial, an irreversible fingerprint of your email (an HMAC code from which the email cannot be recovered), so that the trial cannot be repeated with the same email.

A security log of your account: sign-ins, failed attempts, password changes and other security changes, with their date and an irreversible fingerprint of the IP address (never the IP itself).

Essential technical data: the IP address for security and to limit access attempts (kept for a maximum of 24 hours) and the technical cookies described in the Cookie Policy.

We recommend that you do not include your real name or data that identifies you in your notes or photos.

Providing the service you have contracted (creating your account, calculating your growing plan, storing your journal and photos, managing your subscription): performance of the contract (Art. 6(1)(b) GDPR).

Sending your photos or messages to the artificial intelligence for analysis when you request it: performance of the contract and your express consent, which you can withdraw at any time from the settings.

Ensuring the security of your account and preventing fraud and abuse of the service, including the account security log and the email fingerprint that prevents repeating the free trial: legitimate interest (Art. 6(1)(f) GDPR).

Complying with legal obligations, such as accounting obligations (the history of payment notifications): legal obligation (Art. 6(1)(c) GDPR).

Sending you commercial communications: only if you give us your consent, which you can withdraw at any time.

We do not make decisions with legal effects based solely on automated processing. The recommendations of the calculation engine and of the artificial intelligence are indicative.

Yechil is intended exclusively for persons over 18. We do not knowingly process data of minors; if we detect an account belonging to a minor, we will delete it.

We do not sell your data or transfer it to third parties for their own purposes. It is shared, to the extent necessary, only with the providers that supply services to us as processors, under a contract and with safeguards in accordance with the GDPR:

Vercel Inc. (platform hosting and photo storage, with servers in Frankfurt, European Union).

Neon (database, with servers in Frankfurt, European Union).

Resend (sending account emails, such as verification or password recovery).

Anthropic, PBC, in the United States (artificial intelligence: it processes the messages and photos you send to it, only when you use those features and have given your consent).

Some of these providers are established in the United States. International transfers are carried out with the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

The subscription is sold and charged by Creem (creem.io) as an authorised reseller (merchant of record): it handles the payment, the taxes and the invoice. To do so, it processes your payment and billing data as an independent controller, under its own privacy policy. We only receive from Creem the status of your subscription and the payment notifications.

We may also disclose data to the authorities where there is a legal obligation to do so.

For as long as your account is active. If you delete your account, we delete your data and photos; backups are overwritten within a maximum of 30 days.

Invoices are issued and kept by Creem for the legal periods; Yechil does not keep a copy. We keep the history of Creem payment notifications (type, amount and date, with no card details) for 6 years because of our accounting obligations, even if you delete your account.

The email fingerprint of anyone who has already had the free trial is kept for 2 years, even if the account is deleted, so that the trial is not repeated.

Records of the limit on access attempts (with the IP turned into a fingerprint) are deleted within a maximum of 24 hours. The account security log is kept for 12 months and is deleted together with the account.

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, by writing to yechilalways@gmail.com. You can export your data and delete your account yourself from the settings.

If you believe we have not properly honoured your rights, you can lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency, www.aepd.es).

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), encrypted passwords, photos in private storage, removal of location data from photos, access control, a limit on login attempts and servers in the European Union.

We may update this policy to adapt it to legal or service changes. We will notify you of important changes by email or on the platform itself.