YieldVaultPrivacy Policy

Last updated: 6 September 2026

Privacy Policy

YieldVault Effective Date: July 27, 2026 Last Updated: September 6, 2026

1. Introduction

This Privacy Policy describes how Quantrolix LLC ("Quantrolix," "we," "us," or "our") collects, uses, and discloses information in connection with YieldVault, our commercial inventory yield management platform for restaurants, butcher shops, and food service operations, available as a web application, an iOS app, and a macOS app (collectively, the "Service").

This policy covers only YieldVault. It does not describe the data practices of any other Quantrolix product.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Service. See also our Terms of Service.

2. Information We Collect

We collect only what is needed to run your account and the Service. We do not run analytics, advertising, or tracking of any kind, and we do not collect performance/usage telemetry. The categories below describe the information used to provide YieldVault.

2.1 Account and identity data

When you register and use an account, we collect:

Name — the name you enter for your user profile.
Email address — used to log in, identify your account, and send account and billing communications.
User ID — an internal account identifier used to authenticate you and authorize access to your organization's data.

2.2 Purchase history

Purchase history — subscription and entitlement records (which plan you are on, subscription status, and renewal dates) needed to unlock the features your plan pays for and to support Apple's "Restore Purchases" flow. See Section 6 for how this differs between the App Store apps and the web app.

2.3 Other user content (the business data you enter)

Everything you type into YieldVault to run your business is stored so the Service can display it back to you. Depending on which parts of the product you use, this includes:

Organization and location information (business name, locations)
Product catalog entries (product names, SKUs, barcodes, categories, units, expected yields, costs)
Yield records (input/output quantities, actual vs. expected yield, variance, notes)
Waste logs (quantity, reason, cost, notes)
Vendors, purchase orders, and receiving records
Recipes and recipe ingredients
Industry-specific extensions used by some customers: butcher/cut tracking (butcher sessions and outputs, a cut library) and bar/wine inventory (bottle counts, wine cellar records)

We refer to all of the above, collectively, as "Other User Content." None of it is used for anything other than running the Service for you — we do not sell it, and we do not use it to build advertising profiles.

2.3.1 Optional AI assistance and selected photos

Chef’s Desk offers optional invoice/label capture and prioritization of recorded kitchen checks. Before either action, the app identifies OpenAI as the processor and asks you to enable AI assistance for that visit. Choosing a photo only prepares it on your device; choosing “Extract for review” sends the selected text and/or resized photo through Quantrolix to OpenAI. Choosing “Prioritize with AI” sends the displayed kitchen evidence, which can include product and supplier names, invoice references, weights, costs, dates, and recorded notes. Account passwords and payment credentials are not part of these requests.

Selected photos are used for the requested extraction; YieldVault does not add the original photo to your inventory records. Extracted suggestions remain on screen until you choose to apply them to a receiving draft and save the completed record. AI assistance alone does not change inventory. Do not include unrelated personal or confidential material. You can leave AI disabled and use manual receiving and recorded reports.

2.4 Crash diagnostics (not linked to you)

If the app crashes, we receive a crash report through Sentry, our crash-reporting provider, so we can find and fix the bug. This is configured to collect the minimum needed to debug a crash:

Default PII collection is turned off (sendDefaultPii: false) in both the web app and the macOS app, so Sentry does not automatically attach IP addresses, request bodies, or similar personal data to a crash report.
Performance tracing is turned off (tracesSampleRate: 0) — we do not collect performance data.
Session/release-health tracking is turned off (autoSessionTracking: false on macOS; the browser session integration is explicitly disabled on the web app) — we do not track app launches or usage sessions.
We do not attach your name, email, user ID, or any account identity to crash reports. Renderer crash reports retain error types and stack locations; form data, document content, request bodies, breadcrumbs, and error-message details are removed before transmission.

Because of this configuration, crash data is not linked to you, and it is declared to the App Store as such.

2.5 What we do NOT collect or do

To be explicit about the boundary: YieldVault does not perform, and this Service does not include:

Analytics or product-usage tracking of any kind
Advertising, ad targeting, or ad measurement
Cross-app or cross-site tracking of you or your device
Sale or "sharing" of your personal information for advertising purposes
Collection of precise location, health data, biometric data, or your device’s contact list. The optional document picker receives only the invoice or label photo you select; we do not browse your photo library.
Performance/telemetry data collection (tracing is disabled — see Section 2.4)

3. How We Use Your Information

We use the information above solely for App Functionality — operating the Service you signed up for:

Authenticate you and keep your account and organization data secure and isolated from other organizations
Store, process, and display the business data (Other User Content) you enter, and generate the reports and dashboards you request
Determine your subscription entitlement so the features of your plan are unlocked, and support restoring a purchase on a new device
Send you account, billing, and service-related communications (e.g., renewal notices, security notices)
Diagnose and fix crashes using the crash data described in Section 2.4
Respond to support requests you send to us

We do not use your information to train third-party AI models, to build advertising profiles, or for any purpose beyond operating YieldVault for you.

4. Third-Party Service Providers

We share the minimum information necessary with the following processors, each acting on our instructions to help operate the Service:

Provider	Purpose	What they receive
Apple	Processing In-App Purchase subscriptions in the iOS app and the macOS app	Your Apple ID's payment details are handled entirely by Apple; Quantrolix never receives or stores your card information. Apple shares back a purchase/transaction identifier so we can unlock your plan.
OpenAI	Optional invoice/label extraction and prioritization	Only the selected document content or recorded kitchen checks described in Section 2.3.1, when you enable assistance and choose an AI action. API content is not used to train OpenAI models by default. OpenAI may retain API inputs and outputs for abuse monitoring for up to 30 days, subject to its applicable policies. OpenAI API data controls.
Sentry	Crash diagnostics	Crash reports as described in Section 2.4 (PII, tracing, and session tracking disabled)
Stripe	Payment processing for the web application only	Billing/payment details for web checkout; see Section 6
Hosting provider	Running the application and database that store your account and Other User Content	The account and business data described in Section 2

We do not share your information with data brokers, advertisers, or analytics networks, and we do not sell your personal information.

5. Crash Diagnostics in Detail

See Section 2.4. In short: crash reporting exists purely to keep the app stable. It is scoped down (no default PII, no tracing, no session tracking, no identity attached) so that the data we receive when something breaks cannot be tied back to a specific person. This is why crash data is declared "not linked to you" rather than linked to your account.

6. Payments — App Store vs. Web

YieldVault sells subscriptions through two separate channels, and they are kept separate for privacy purposes:

iOS app and macOS app: Subscriptions are sold exclusively through Apple's In-App Purchase system. Your payment method is managed entirely by Apple as part of your Apple ID. YieldVault never sees, receives, or stores your card number or other payment credentials — Apple only passes back a purchase record so we can activate your plan.
Web application: The separate web app uses Stripe for checkout. If you subscribe through the web app, Stripe processes and stores your payment details under its own privacy policy (https://stripe.com/privacy); Quantrolix does not store your full card number.

If you delete your YieldVault account while an Apple In-App Purchase subscription is still active, deleting the account does not cancel the Apple subscription — Apple will continue billing your Apple ID until you cancel it yourself through your Apple ID subscription settings. See Section 7 for what we retain in that situation.

7. Data Retention and Deletion

How to delete your account: In the app, go to Settings → Security → Delete Account. This calls our DELETE /account endpoint.

What happens when you delete your account:

If you are the only member of your organization, deleting your account permanently deletes your entire organization's data: products, inventory, yields, waste logs, vendors, purchase orders and receiving records, catch-weight bags and audit events, recipes, and any butcher/bar-inventory records tied to that organization, along with your user record. This is a hard delete, not a deactivation.
If your organization has other members, deleting your account removes your personally authored records (for example, yield entries and waste logs you personally created) and your user record, while shared organization data (including the product catalog, locations, catch-weight bags and audit history) remains available to the remaining members.
If you have an active Apple In-App Purchase subscription at the time of deletion, we keep a small privacy-preserving record so that, if you sign up again with the same Apple ID, your paid entitlement can be reclaimed instead of being charged twice. That record does not contain your email address in plain text — it stores a one-way keyed hash (HMAC-SHA256) of your email, together with the Apple transaction/product identifiers needed to match a future signup. It does not contain any of your business data (products, yields, waste logs, etc.), which is deleted as described above regardless of subscription status.
Deleting your YieldVault account does not cancel an Apple In-App Purchase subscription. Cancel that separately through your Apple ID subscription settings, or Apple will continue to bill and renew it.

Backups: Routine database backups that already contain your data before deletion may persist for a limited time (see our Terms of Service, Section 6.5) before they are cycled out, consistent with normal backup rotation.

Crash data: Because crash reports are not linked to your identity (Section 2.4), there is nothing tied to your account to separately delete from Sentry when you delete your YieldVault account.

8. Your Choices and Rights

Access and export: You can view and export your business data (Other User Content) from within the app, subject to your plan's export format (CSV/JSON per the Terms of Service).
Correction: You can edit or correct your account and business data directly in the app.
Deletion: Use Settings → Security → Delete Account, or email support@quantrolix.ai.
GDPR/CCPA and similar regional rights: If applicable law gives you rights of access, correction, deletion, restriction, portability, or objection, contact us at support@quantrolix.ai and we will respond consistent with applicable law.

9. Children's Privacy

YieldVault is business software built for restaurants, butcher shops, and food service operations, and it is not directed at children. We do not knowingly collect personal information from children. If you believe a child's information has been provided to us, contact support@quantrolix.ai and we will delete it.

10. International Users

Quantrolix is based in the United States, and the Service's hosting infrastructure is US-based. If you use the Service from outside the United States, your information will be processed in the United States, which may have different data protection laws than your home jurisdiction. By using the Service, you consent to this transfer and processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect a change in what data a new feature collects. When we make a material change, we will update the "Last Updated" date above and, for significant changes, notify account holders by email or in-app notice. Continued use of the Service after a change takes effect means you accept the updated policy.

12. Contact Us

Questions about this Privacy Policy or our data practices:

Quantrolix Email: support@quantrolix.ai

For account deletion requests, use Settings → Security → Delete Account in the app, or email support@quantrolix.ai.

Effective Date: July 27, 2026 Last Updated: September 6, 2026