Supplemental Notice | Version 1.0 | Prepared October 9, 2026
PlateProfile Labs LLC | Venice, Florida, USA
This separate notice explains consumer health data practices when Washington’s My Health My Data Act or a similar applicable law applies. It supplements the PlateProfile general Privacy Notice, and it is intended to be linked separately from the website homepage where required. It becomes effective only when PlateProfile publishes it; merely preparing or circulating the document does not change previously effective policies.
Depending on what you provide and use, categories may include allergies, intolerances, health-related conditions or goals you elect to disclose, dietary restrictions, food preferences or exclusions that suggest health status, meal and ingredient choices, recommendations, swaps, saves, and restaurant-selection history. Categories can also include health-related inferences developed from your interactions, information that appears in a menu image or message you submit, and location or search history when linked to your health status. Unrelated medical records are not requested.
We collect and use these data to apply the allergy or dietary restrictions you choose, provide requested meals and restaurant suggestions, personalize future results from feedback, carry out selected saves and swaps, respond to support and privacy requests, secure the service, and meet limited legal duties. We do not sell consumer health data or use it for targeted advertising. Before collecting or using additional covered categories or purposes, we will provide the required updated disclosure and obtain affirmative consent if required by law.
From information you type or select in your profile and searches; from meal feedback, swaps, skips, saves, and other in-app actions; from images or content you choose to upload; and from inferences made by PlateProfile’s learning systems. Food databases and menu services may contribute food facts, which can become consumer health data when linked to your personal choices.
Health-related categories that may be shared when needed to deliver a feature include the dietary restrictions, relevant preferences, meal or ingredient details, and selected menu images or extracted text needed for an AIassisted request; limited profile, account, and operational information needed by contracted hosting, security, or support providers may also be processed. OpenAI may receive selected meal or menu request content when its feature is used. We seek to exclude unrelated identifiers and unrelated health information. A provider may not use these data for unrelated advertising or general model training as authorized by PlateProfile.
Depending on which functions are used, recipient categories may include hosting and authentication processors (including Google Firebase); AI-processing providers (including OpenAI for relevant AI-assisted requests); nutrition and menu-data services (including FatSecret where enabled); and contracted security, technical support, and service-operations providers. Restaurant and location services (including Google Places where enabled) may receive search and location information; the service is designed to avoid sending full health profiles when only a place lookup is needed. Subscription providers (including RevenueCat and the Apple or Google marketplace used) generally process purchase and entitlement identifiers, not detailed health profiles. As of this Notice’s effective date, PlateProfile has identified no specific corporate affiliate as a recipient of consumer health data. Any affiliate that receives covered health data in the future will be identified by name in this Notice before such sharing, with any required consent.
Washington law generally permits covered collection and sharing when supported by the consumer’s applicable consent or to the extent necessary to provide a product or service the consumer requested. When consent is required, we disclose the health-data categories, purposes, recipient categories, and withdrawal method before processing. Consent to share covered consumer health data is sought separately from consent to collect it when the statute requires consent for each activity. We also request separate permission before sending personal information to a third-party AI provider whenever required by Apple, applicable law, or other marketplace rules. You can withdraw consent for future processing by contacting support@plateprofile.com or using an available control. Declining consent may limit a dependent feature; it does not automatically cancel a paid subscription.
Where applicable, you may confirm whether PlateProfile collects, shares, or sells your consumer health data; access it and obtain required information about third-party or affiliate recipients, including an active contact mechanism; withdraw consent; and request deletion from active systems and backups under applicable rules. Send requests or appeals to support@plateprofile.com without submitting unrelated medical records. For covered Washington requests, we generally must respond within 45 days of receiving a request, subject to one permitted 45-day extension with timely explanation; archived or backup deletion may not be delayed beyond six months after request authentication. We provide a conspicuous appeal process and respond to covered appeals within 45 days. If denied, you may complain to the Washington Attorney General at https://www.atg.wa.gov/file-complaint.
We will update this separate Notice before collecting or using additional covered health-data categories or for additional purposes, and obtain affirmative consent where required. When Washington law applies, we will publish a conspicuous, separate link to this consumer health data privacy notice on our website homepage. Send questions, rights requests, and appeals to PlateProfile Labs LLC, Venice, Florida, USA, at support@plateprofile.com. This Notice takes effect when separately published by PlateProfile following any required notice or consent.
