Privacy
Last updated October 31, 2026
PlatePal keeps a structured record of your food, training and health notes so your AI assistant can coach you with real history. This page says exactly what that record contains, who can see it, and how to take it with you or delete it.
What PlatePal stores
- Your account: the email address, name and account ID that Google shares when you sign in.
- What you log: meals and the foods in them, with nutrient estimates; your food library; workouts, sets and how they felt; symptoms such as pain or an energy crash; measurements such as body weight, and readings from a watch, ring, scale or glucose monitor that you share (heart rate, HRV, sleep, steps); day tags you choose to add (for example "sick", "travel" or a medication you take), which only change how your numbers are read; goals, nutrition targets and notes.
- Which app wrote each entry (for example "Claude" or "ChatGPT", from the app's sign-in) and when you last opened a briefing, so a new conversation can see what changed since. PlatePal doesn't keep your conversations or a log of tool calls.
- What PlatePal works out from it: daily totals, trends and "insights" (for example, a new best lift or a weekly review being due).
- Photos are not stored. When you send a meal photo, your assistant looks at it and sends PlatePal a description and estimates. PlatePal only records that a photo was used.
- Sign-in and security data: OAuth tokens for each app you connect (stored hashed), short-lived counters keyed by IP address to slow down password guessing (deleted after 15 minutes), and error logs that may include your account ID (kept by Cloudflare for a few days).
- Waitlist: if you try to sign up while signups are closed, your email and name, so we can invite you later.
How it's used
Only to run PlatePal for you: to answer your assistant's requests and to compute your totals, trends and insights. PlatePal doesn't sell your data, show ads, share it with data brokers or use it to train AI models.
Shared food catalog. When you save a packaged food from its nutrition label with a barcode, the printed label (product name, brand, serving size, nutrition facts and ingredients) is added to a catalog other PlatePal users can look up, so they don't have to photograph the same label. Nothing that identifies you is shared, and your aliases, notes, portions and meals stay private. You can turn this off by asking your assistant ("don't share my labels").
Barcode lookups. When a barcode isn't in PlatePal's catalog, PlatePal looks it up in Open Food Facts, a public food database. Only the barcode is sent.
Your assistant
You use PlatePal through an AI assistant such as Claude or ChatGPT. The assistant sends PlatePal requests and receives your data in reply, inside your conversation. What the assistant's provider does with your conversations is governed by its own privacy policy (Anthropic, OpenAI).
Who can see it
- Your record is linked to your account. It is pseudonymous, not anonymous: it doesn't carry your name in every row, but it is tied to your sign-in.
- Each request runs with database row-level security scoped to your account, so one user's requests can't read another user's rows.
- The operator of PlatePal can access the database to run and fix the service, and does so only for that purpose.
- Service providers that host it: Cloudflare (application hosting, sign-in storage) and PlanetScale (the database). Data is encrypted in transit and at rest.
Health information
PlatePal is a fitness and nutrition tracker, not a medical service, and it is not a HIPAA-covered entity. It doesn't diagnose anything. Don't use it as a medical record.
Export and delete
- Export: ask your assistant to "export my PlatePal data". You'll get a one-time download link to a JSON file with everything PlatePal holds for you.
- Delete: ask your assistant to "delete my PlatePal account", or email support@platepal.xyz. Deletion is immediate and permanent: your account and every record in it are removed, and connected apps are signed out. Database backups made before the deletion expire on the database provider's backup schedule, after which the data is gone.
Retention
Your record is kept until you delete it. Waitlist entries are deleted on request.
Age
PlatePal is for adults (18 and over).
Changes and contact
If this policy changes in a way that matters, the date above changes and the change is described here. Questions: support@platepal.xyz.
October 31, 2026: PlatePal now records which app wrote each entry and when you last opened a briefing (see "What PlatePal stores").