Privacy Policy | Version 2.0 | Prepared October 9, 2026
PlateProfile Labs LLC | Venice, Florida, USA
Effective upon publication by PlateProfile, subject to the notice and consent provisions in Sections 23 and 25.
PlateProfile Labs LLC (PlateProfile, we, us, or our), based in Venice, Florida, USA, operates the PlateProfile mealrecommendation app and related website and services. This policy explains how we handle information relating to an identifiable person (personal information). It covers our account, recommendation, Eat at Home, Eat Out, subscription, support, and related features. References to optional features apply only where those features are actually offered and used.
Contact support@plateprofile.com with privacy questions or requests. The Terms of Service govern use of the Services; this policy governs our handling of personal information. It is a notice, not blanket consent to processing. Reading it or continuing to use the app does not replace a separate consent required by law or marketplace rules.
Information you provide, information generated through your use, and information received from authorized service providers may be personal information. Dietary or meal information and inferences can be sensitive information or consumer health data even if you do not provide a medical diagnosis. An account identifier or coded record can still be personal information.
Independent restaurants, stores, app marketplaces, and websites may have their own policies for your direct interactions. We remain responsible for our obligations when providers process information on our behalf. PlateProfile provides consumer meal-selection assistance, not healthcare. Consumer health data remains subject to applicable privacy protections regardless of whether HIPAA applies to a particular service.
We obtain information directly from you when you create an account, enter preferences, choose a feature, submit feedback, upload an image, or contact us. We also obtain information from your interactions with recommendations and the technical operation of the app; from your device when permissions allow; and from sign-in, subscription, and other providers needed to support your chosen service.
Restaurant and nutrition databases supply food or location information. When combined with your account or preferences, searches and results may become personal information about you. We may derive preference estimates from your interactions; these are not verified diagnoses.
Account and authentication information: name or display name where provided, email address, account identifier, authentication records, and information returned by a sign-in service. We use it to create, authenticate, secure, and support your account. The authentication method determines which credentials are handled by us or the signin provider.
Dietary profile and health-related information: allergies, intolerances, dietary restrictions, health-related conditions or goals you choose to disclose, likes, dislikes, and other profile fields you complete. We use this information to apply your selections and personalize requested meal and restaurant features. You do not need to submit unrelated medical records. Providing less information can reduce personalization; do not assume the app can apply a restriction you have not provided.
Recommendations and interactions: meal suggestions, accepted meals, swaps, skips, ratings, saves, meal history, restaurant selections, timestamps, and associated inferred preferences. We use these to provide history and requested personalization, evaluate errors, and operate the service. General model development is subject to Section 9.
Uploads: images you deliberately submit, text extracted from them, relevant image metadata that accompanies the file, and resulting analysis. Where menu scanning is offered, we process these to read the menu and return suggestions. Images or extracted text can contain personal or health-related information; the same protections apply.
Location and context: approximate location from an IP address, an area you enter, and precise device location with permission. These can support nearby restaurant searches, distance estimates, local relevance, and security. Device time zone and meal timing may support time-aware suggestions. Section 5 explains your choices.
Purchases: marketplace transaction or receipt identifiers, plan, purchase and renewal dates, trial and entitlement status, and limited billing records. We use these to activate subscriptions, restore purchases, answer billing questions, and meet accounting obligations. Marketplaces process card details; we do not need your full card number for an in-app subscription.
Technical, diagnostic, and security information: IP address, device and app version, operating system, language, identifiers used by enabled services, crash information, logs, and feature-use events. We use these to operate the app, troubleshoot, protect accounts, and understand performance, subject to applicable choices. We treat these records as personal information when they identify or can reasonably be linked to a person, even if they do not contain a name.
Communications: support messages, feedback, consent records, privacy requests, and your marketing choices. We use them to respond, administer choices, document compliance, and send permitted communications. Pantry, grocery, or other optional feature information is processed only when that feature is available and you use it.
We request precise location for relevant location-based features and explain the purpose at the point of permission. We use precise location for the location-based feature you request. Any additional background collection requires advance disclosure and the permissions and consent required by law and your device platform. You may refuse or withdraw device permission in settings; an affected feature may be limited. Where offered, you can enter an area manually. Turning off precise location does not remove previously stored information or prevent approximate location derived from an IP address; deletion rights remain available.
Where menu scanning is offered, you choose the photo to submit or use the camera for the scan. Camera or photo permission is not permission to browse unrelated images or upload your library. Crop out faces, payment details, and unrelated private information. Technical metadata may accompany a chosen image; avoid uploading information you do not want processed.
Notification permission controls push delivery. Essential notices may also be sent by email or within the app. A device permission is not a substitute for a separate health-data or third-party AI consent where one is required.
Allergies, intolerances, health-related dietary goals, meal choices, uploaded content, and inferences associated with you may qualify as consumer health data or sensitive personal information. We process such information to deliver your requested meal-selection and personalization features, subject to applicable law. Uses beyond your requested features are limited to the purposes and choices specifically described in this policy. Where law requires consent, we obtain a specific affirmative choice before the relevant collection or use. Where required, consent to sharing is separate from consent to collection. Any legally available exception for information necessary to a requested service is limited to that purpose and does not automatically extend to advertising or unrelated training. You may withdraw consent by contacting support@plateprofile.com or using an available inapp control. We will stop future consent-based processing as required; withdrawal does not automatically cancel your subscription.
We do not sell consumer health data or use it for targeted advertising. We do not use location-based geofencing to identify or track people seeking healthcare or target them with health-related messages or advertisements. Additional rights and disclosures appear in Section 19 and the separate applicable consumer health data notice.
We use the categories described above to deliver the features you request; personalize recommendations; maintain accounts and subscriptions; provide support; diagnose errors; protect against misuse; maintain reliable operation; and comply with legal duties. Optional marketing is subject to your choices and applicable law. Research, broad model training, or an unrelated new feature is not automatically necessary to provide the current service.
We limit processing to information relevant to these purposes. Before an incompatible new use, we provide updated notice and obtain consent or establish another lawful basis where required. We explain material new data collection before it begins and obtain any required permission.
Your stated preferences and feedback can influence future meal selection and ranking in Eat at Home and Eat Out. PlateProfile’s personalization may combine dietary filtering, preference-learning estimates, local scoring, and AIassisted features, depending on the feature and deployed version. Accepts, swaps, skips, ratings, and saved-meal activity may influence future results. Allergy and dietary restrictions are intended to be considered before preference ranking; no matching system guarantees an allergen-free or medically appropriate result. Some requested features may use an external generative-AI processor, as described in Section 9. Our estimates are not medical conclusions. You may edit available profile fields or request access, correction, or deletion as described below.
Food recommendations and explanatory labels are automated suggestions, not clinical judgments or guarantees. We do not use these features to make employment, lending, insurance, or other legal or similarly significant eligibility decisions about you. We do not claim that an allergy warning or automated ranking replaces direct verification with the food provider.
Processing a feature request through a third-party AI service is different from training that provider’s generalpurpose models. Depending on the feature enabled, PlateProfile may use OpenAI to produce meal or ingredient suggestions, explain content, create meal images, classify menu items, or read menu photographs. Request content sent to OpenAI may include meal preferences, allergy or dietary restrictions, selected meal details, or a menu image that you choose to submit, to the extent needed for that feature. Such details may reveal health information. We seek to omit unnecessary names, contact details, and unrelated identifiers; this does not make request content anonymous. PlateProfile-controlled filtering, scoring, and preference learning are distinct from third-party AI request processing.
Before personal information is disclosed to a third-party AI provider, including OpenAI, we will identify that recipient, explain the information and purpose of the transfer, and request explicit permission where required by Apple, other marketplace rules, or applicable law. A privacy-policy link or general acceptance of Terms alone is not a substitute for a required in-app choice. If you decline a required transfer, a feature that depends on it may be unavailable; we will not treat that refusal as authorization for unrelated sharing. Additional consumer-health-data consent requirements still apply.
PlateProfile does not authorize the use of identifiable personal information or consumer health data transmitted for our requested features to train third-party general-purpose AI models. An AI provider may process requests and retain limited information for the contracted service, safety, security, or legal compliance, subject to its applicable processing terms and settings. We do not promise zero retention by every processor. We review material provider uses and disclose any applicable feature-specific recipient or retention information before a transfer requiring advance notice or consent.
For broader analytics, evaluation, and model improvement, we use appropriately aggregated or de-identified information where practicable. If optional use of identifiable information for broader internal model development is proposed, we first describe the data, purpose, retention, and choices and obtain separate consent where required. Declining an optional use does not block unrelated core features. No content license overrides these restrictions.
Infrastructure, authentication, and storage providers may process account information, stored profiles and content, technical records, and relevant security information to host and protect the service. Depending on the active integration, these providers may include Google Firebase and other contracted hosting or authentication providers. Contracted support or development personnel may access the minimum relevant records needed to resolve a problem or maintain the service, under role-based access and confidentiality restrictions.
AI providers, including OpenAI when an AI-assisted feature is used, may receive the limited content described in Section 9. Mapping and restaurant-discovery providers, including Google Places when enabled, may receive a location/search area, permitted coordinates, query text, and technical information necessary to retrieve results. We seek to avoid including allergy or health profile details in location-only requests. Any disclosure of healthrelated information remains subject to Section 6 and required feature-specific notices and choices.
Nutrition and menu-data providers, including FatSecret when enabled, may process relevant food queries and technical request information. Subscription-service providers, including RevenueCat where used, and app marketplaces such as Apple and Google Play may process user or transaction identifiers, receipt and entitlement information, and limited device information to validate purchases and provide support. We do not send your dietary profile or health-related meal history solely to verify a subscription.
Diagnostic, analytics, and notification providers may process relevant device or app events, delivery tokens, identifiers, and message content needed for their assigned function. We do not authorize health-data advertising uses. We restrict provider access, require legally appropriate processing and security terms, and remain responsible for duties imposed on us by law.
We may disclose information at your specific direction; for a valid legal obligation; or, where law permits, to address fraud, security, or legal claims. Any legal or security disclosure of consumer health data is limited to an applicable legal permission or obligation. Business transactions are addressed in Section 22. We do not publish private profile information or menu uploads merely because you submit them.
Our Third-Party Service Providers & Subprocessors Policy supplements the categories above. The providers named here describe integrations included in PlateProfile’s product design or currently used for a particular feature; naming a provider does not mean every user’s information goes to it. We make further feature-specific recipient disclosures, including for AI-related processing, wherever required. You may ask support@plateprofile.com for information about recipients, including recipient identities required under applicable consumer health-data law. Independent services that you choose to open may collect information under their own notices. A link to their policies does not relieve us of duties relating to our disclosure to them. Changes to providers cannot silently expand the authorized purposes or circumvent your choices. The separate consumer health data notice identifies specific affiliates receiving covered health data, if any, as required by law.
The app or website may use software development kits, local storage, cookies, and similar technologies to authenticate users, store choices, measure feature performance, and diagnose failures. Information can include identifiers, device details, IP addresses, and usage events. Nonessential tracking is subject to legally required notice, permission, and choice.
We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising as those terms are defined by applicable state privacy laws. We do not authorize advertising pixels or SDKs to receive consumer health data for advertising. These commitments apply to technical identifiers and events as well as named records.
If practices change, we will update the notice and implement all required choices and consents before the new processing begins. We honor legally required opt-out preference signals for processing to which they apply. Browser cookie controls and device settings may offer additional choices; blocking storage can affect sign-in or preferences. Disabling storage may limit features that depend on it.
Apple, Google Play, or another disclosed authorized payment provider processes purchases under its own terms. PlateProfile receives the limited subscription records needed to provide access and support. We do not require health information for billing. Cancel marketplace subscriptions through the marketplace; deleting the app or account alone does not stop renewal.
We may send account, billing, security, support, and legal communications. Promotional emails include an unsubscribe method. You can also contact support to change marketing preferences. Essential service messages may continue, but permission for them is not permission for unrelated marketing.
We use administrative, technical, and organizational safeguards appropriate to the information and risks, including access restrictions and secure processing practices. Access is limited to authorized people and providers with a legitimate task. We evaluate safeguards as the service evolves. No electronic system is completely secure. Our safeguards are intended to reduce risk, not guarantee that unauthorized access can never occur.
If an incident affects personal information, we will investigate, take appropriate remedial steps, and provide notices to affected people, regulators, or others when required by applicable breach-notification laws, including the FTC Health Breach Notification Rule where it applies. Contact support@plateprofile.com to report a suspected issue. Do not send passwords or unnecessary sensitive information in a report.
We generally retain account and dietary-profile information while the account is active and the information is needed for your requested features. Meal history, saved content, and preference inferences are retained in accordance with their feature purpose and your deletion choices. We do not retain identifiable health-related data indefinitely solely because it could be helpful for future development. The precise period depends on the feature, your choices, technical backup cycles, and any narrowly applicable legal obligation; you can ask for available category-specific retention details. When menu scanning is enabled, selected menu photographs, extracted text, and associated analysis may be kept as needed to complete the scan, provide a save/history feature you select, investigate a specific support or security problem, or meet a narrow legal obligation. These are distinct records and deleting an uploaded image does not necessarily delete separately saved extracted text. Account deletion covers both when linked to the account, subject to lawfully permitted exceptions. You may request deletion of scan records at support@plateprofile.com.
Purchase and accounting records may be kept for applicable tax, accounting, fraud, and dispute requirements. Support and privacy-request records are retained as needed to resolve and document the request or satisfy a legal duty. Diagnostic and security records are retained for proportionate operational and security purposes; we limit retention of any precise location or health information in those records to a necessary, disclosed purpose.
Retention decisions consider purpose, sensitivity, legal requirements, and whether less identifiable information suffices. When the purpose ends, we delete the information or de-identify it where legally allowed. A legal hold is limited to necessary records for an actual or reasonably anticipated matter, subject to applicable law; it is not a universal exception to health-data deletion rights.
Request permanent account deletion through the in-app option or email support@plateprofile.com. You may request deletion without reinstalling the app by using email. We take reasonable steps to authenticate you without requiring a new account or unnecessary sensitive documents. Temporary deactivation is not permanent deletion.
We respond to and process deletion requests without undue delay and within applicable legal time limits. We take reasonable steps to verify identity promptly and do not treat verification as restarting a statutory response clock. Any exception, extension, or retained category is communicated where required. For covered Washington consumer-health-data requests, the 45-day response period and narrow statutory extension rules described in Section 19 apply; a shorter applicable legal deadline controls.
Copies in backup or archival systems are restricted from routine use and deleted or overwritten in accordance with applicable law and the actual backup-retention schedule. For consumer health data covered by Washington law, archived or backup deletion may not be delayed more than six months from authentication of the deletion request. If a backup is restored, previously completed deletion requests must be reapplied. We direct processors and other covered recipients to honor deletion requests where the law requires.
We may retain only the limited records allowed or required by applicable law for a specific purpose, such as required accounting records or permitted security evidence. We will explain an applicable refusal or retention exception. We do not retain an entire health profile simply to preserve a billing record. A general business purpose cannot override a statutory deletion requirement.
Properly de-identified information may be retained for lawful analytics or improvement only if it meets applicable legal standards. We take reasonable measures to prevent association with a person, commit not to reidentify it except for legally permitted testing, and require recipients to respect applicable restrictions. Merely removing a name or replacing it with a code is not de-identification. Where law requires deletion, creating a substitute deidentified record is not automatically sufficient.
You may update available profile fields, manage permissions and marketing, and ask to access, correct, obtain a portable copy of, or delete your information. Depending on your jurisdiction, you may also withdraw consent, limit certain sensitive-data use, object to certain processing, or appeal a decision. Rights vary with the applicable law and its coverage; we do not condition legally required rights on a paid subscription.
Email support@plateprofile.com with the account email, requested action, and relevant details. Do not include a password or unrelated medical records. We may verify identity using information reasonably necessary for the request. An authorized agent may submit a request with proof of authority where permitted; we may also verify the account holder as the law allows.
We respond within applicable legal deadlines and explain any lawful extension, refusal, or fee. Requests are ordinarily free. Where an appeal right applies, reply to the decision or email the same address with “Privacy appeal” and explain your concern; we will respond within the applicable deadline and identify further complaint options. You can also contact your state attorney general or data-protection authority. We do not unlawfully discriminate or retaliate for exercising rights. A feature may become unavailable if information necessary to provide it is deleted or permission is withdrawn.
If the California Consumer Privacy Act, as amended, applies to PlateProfile’s processing, California residents may exercise rights to know and access information, correct inaccuracies, request deletion, receive portable information, and exercise applicable sale, sharing, or sensitive-data choices. Sections 3-4 describe sources and categories; Sections 7-12 describe purposes and recipient categories; Sections 15-16 describe retention criteria. We do not sell or share personal information for cross-context behavioral advertising and do not knowingly sell or share information of people under 16.
Submit a request using Section 17. We will apply the verification, authorized-agent, response, and appeal requirements of the law that applies to the request. We do not use sensitive information to infer characteristics unrelated to providing the requested service. Before introducing a use requiring a California limitation right, we provide the required notice and control. Rights under other California laws remain available even if a particular CCPA threshold is not met.
Where Washington’s My Health My Data Act applies, protections cover Washington residents and people whose consumer health data is collected in Washington, subject to statutory scope and exceptions. You may confirm whether we collect, share, or sell your consumer health data; access it and the required list and contact information of recipients; withdraw collection or sharing consent; and request deletion. Submit requests through Section 17.
For covered Washington requests, we act without undue delay and within 45 days of receipt. Verification is prompt and does not restart that deadline. A single additional 45-day period is available only when the law permits and we give timely reasons. Backup deletion may not be delayed beyond six months after authentication. We notify recipients of deletion as required. You may appeal a refusal by replying or emailing “Privacy appeal”; we respond with reasons within 45 days. If denied, you may complain at https://www.atg.wa.gov/file-complaint.
The separately published Consumer Health Data Privacy Notice explains the covered categories, sources, purposes, health-data sharing categories, recipient classes, and any specific corporate affiliates. Where Washington law applies, this notice is linked separately and prominently on the website homepage. This general policy does not replace it. We honor other applicable consumer-health-data laws, including Nevada’s where relevant. Neither an older supplemental notice nor these Terms authorizes practices prohibited by this Privacy Notice or mandatory law.
PlateProfile is a general-audience service, not directed to children under 13. The app does not currently use an agescreening or age-verification step to establish every user’s age. We do not intentionally seek personal information from children under 13. If we obtain actual knowledge that we collected such information, we will restrict further processing while we delete the information or obtain verifiable parental consent where required and appropriate. A parent or guardian can contact us at support@plateprofile.com to request review or deletion. We ask parents and guardians to supervise younger users, especially where allergies, weight-related goals, or other sensitive dietary matters are involved. Users under the age of majority should involve a parent or guardian where appropriate or required by law. Where children’s privacy laws or state protections for teenagers apply, we will honor the additional rights and consent rules. An app-store age rating, supervision, or acceptance of Terms is not itself legally required parental consent.
PlateProfile is based in the United States. Providers may process information in the United States or other countries where they operate, whose laws may differ from yours. We use legally required safeguards for international transfers; using the app alone is not deemed consent sufficient for a restricted transfer.
Where applicable local law provides additional rights, you may ask to access, correct, erase, or receive your information, restrict or object to processing, withdraw consent, or complain to your data-protection authority. We apply the legal bases and transfer safeguards required for the processing concerned. Contact support@plateprofile.com for information about the safeguards applicable to your records. Withdrawal does not affect processing lawfully completed before withdrawal.
For a lawful financing, merger, acquisition, or business transfer, we may disclose limited information subject to appropriate confidentiality, minimization, and legal restrictions. Wherever feasible, evaluation uses aggregate or de-identified information. A potential investor does not automatically receive identifiable health profiles.
Any successor must respect applicable privacy commitments and obtain required notice or consent before a materially different use. We evaluate government and legal requests and disclose only information legally required or permitted in the circumstances. Privacy rights and restrictions on consumer health data continue to apply.
When adopting an update, we publish its effective date and version and provide appropriate notice of material changes. We obtain fresh consent where required before a new collection, use, or disclosure. Continued use alone does not authorize a processing activity requiring affirmative consent. We do not retroactively apply a less protective purpose to previously collected information without a lawful basis and required choices.
PlateProfile Labs LLC, Venice, Florida, USA. Privacy requests, consumer health data requests, appeals, security reports, and general support: support@plateprofile.com. If a disability prevents use of an available request method, contact us for assistance or an accessible alternative. Formal legal process remains subject to applicable service requirements.
Version 2.0 was prepared on October 9, 2026. It becomes effective when PlateProfile publishes it for use, subject to any later date stated in an applicable notice and any required consent. Preparing or privately circulating this document does not change existing privacy commitments. Once effective, it supersedes prior general Privacy Policy versions for prospective processing, without eliminating protections applicable to previously collected information.
Mandatory law and legally required health-data protections control. No Terms of Service provision or older supplemental policy authorizes processing prohibited by this policy. If a provision is invalid, the remaining provisions operate to the extent lawful.
