Privacy Policy

Platable ("we", "us") provides the Platable web app at platable.io and the Platable apps for iPhone and Android. We are the data controller for the information described here. Contact us at support@platable.io.

Account information. Your email address, and your name if you give one or if it comes from Sign in with Apple or Google. If you sign up with an email and password, the password is stored as a hash by Firebase Authentication and is never visible to us. Sign in with Apple may give us a private relay address rather than your real one; that works fine.

Health and fitness information you enter. This is the heart of the app, and it is sensitive, so we are specific about it:

• Meals you log, including what you ate, when, and its calories and macros
• Body-weight readings and the dates you recorded them
• Your calorie and macro targets, goal weight, and the sex, age, height and activity level used to work them out
• Dietary preferences and restrictions, such as vegetarian or gluten-free
• Workouts you log — exercises, sets, reps, weights, duration, distance and pace — and the training programs and race blocks behind them
• Your weekly check-in: how you felt, your energy and your soreness

Things you create. Saved recipes, meal plans, workout plans, your shopping list, your calendar, and recipe photos generated for you.

Subscription information. Whether you are on the free plan or Pro, which plan, when it renews or ends, and identifiers from Stripe, RevenueCat and the app stores. We never receive or store your card number, CVV or bank details — those go directly to Stripe or to Apple or Google.

Usage counters. How many AI credits you have spent this month, so we can apply the free allowance.

Reminder settings. If you turn on reminders in the app, we store a notification token for that device, which reminders you want, and your time zone so they arrive at the right local hour.

What we do not collect. No location data, no contacts, no photos from your library, no advertising identifiers, no analytics or usage tracking, and no crash or diagnostic reporting. The apps do not ask for location or camera permission.

We use your information to run the app for you: to save what you create, calculate your targets, generate recipes and training, show your progress, send the reminders you asked for, and apply your subscription. Where UK or EU data protection law applies, our legal bases are:

• Performance of a contract — providing the app you signed up for, including billing.
• Your explicit consent — for the health and fitness information you choose to enter, and for push reminders. You can withdraw it at any time by deleting that data, turning reminders off, or deleting your account.
• Our legitimate interests — keeping the service secure and stopping abuse of the AI features, and keeping records of content reported to us.
• Legal obligation — keeping the payment records tax law requires.

We do not use your information to make automated decisions with legal or similarly significant effects, and we do not use it for advertising or profiling.

Recipes, meal plans, workout plans, recipe photos and the "describe it" nutrition estimates are generated by sending your request to OpenAI, which runs the model and sends the result back.

What is sent is the text of that request. That can include:

• The recipe idea or ingredients you typed, and your dietary preferences
• The web address of a recipe you asked us to import, and the text of that page
• The description of a meal you typed to get a nutrition estimate, and the ingredient list of a recipe you asked us to recalculate
• Training details you entered: your goal, how many days a week, session length, experience, equipment and any notes you wrote

No identifier goes with it. We do not send your user ID, your email address or your name to OpenAI, and we do not send your logged meals, weight history or workout history. Please avoid typing anything into a prompt that you would not want processed by a third party.

AI output can be wrong. Nutrition figures are estimates, recipes may miss an allergen, and training suggestions are generic. Treat all of it as a suggestion — see the Terms. If something an AI feature produced is wrong, unsafe or offensive, use the Report button on it and we will review it.

We use a small number of service providers, who process data on our instructions and for no purpose of their own. We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising.

• Google (Firebase) — sign-in, the database your data is stored in, file storage for generated photos, push delivery and hosting.
• OpenAI — generates recipes, plans, photos and nutrition estimates, as described above.
• Stripe — subscriptions bought on the web. Stripe collects your payment details directly on its own checkout page.
• RevenueCat — subscriptions bought in the iPhone and Android apps. It receives your Platable user ID and the store receipt.
• Apple and Google — billing for in-app purchases, under their own privacy policies.
• Upstash — a short-lived counter keyed on your user ID that limits how fast the AI features can be called.

We may also disclose information if the law requires it, or to establish or defend legal claims.

Our providers are based in the United States and process data there and in other countries. Where information is transferred out of the UK or the European Economic Area, that transfer relies on the Standard Contractual Clauses or an equivalent safeguard in that provider's terms.

Everything in your account stays until you delete it or delete your account. Beyond that:

• Rate-limit counters last minutes.
• Prompts sent to OpenAI are held by OpenAI under its own API retention policy for abuse monitoring, which is outside our control.
• Stripe, RevenueCat, Apple and Google keep payment records under their own retention rules and the tax rules that apply to them.
• Content reports are moderation records and are kept after the reporting account is deleted.

Go to Settings → Delete account in the app, or read how to delete your account. Deletion is immediate and cannot be undone. It removes your account record and everything under it — every meal, weight reading, workout, recipe, plan, calendar entry, setting and generated photo — cancels any subscription billed through our website, and deletes your sign-in record.

Two things are not removed: a subscription bought through the App Store or Google Play, which you must cancel in that store, and moderation records of content you reported.

Depending on where you live you have the right to access a copy of your information, correct it, delete it, restrict or object to how we use it, take it elsewhere in a portable form, and withdraw consent. Most of these you can exercise yourself inside the app — everything you enter is editable, and deletion is one button. For anything else, email support@platable.io and we will respond within one month.

If you are in the UK or EEA and think we have got this wrong, you can complain to your data protection authority — in the UK, the Information Commissioner's Office. If you are in California, we do not sell or share your personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.

Connections to Platable and to every service listed above are encrypted in transit with HTTPS. Data is encrypted at rest by our providers. Access rules mean one account cannot read another's data, and sensitive writes happen on our servers rather than in your browser. No system is perfectly secure, so please use a strong, unique password.

Platable is for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18; if you believe a child has created an account, email support@platable.io and we will delete it.

If we change this policy we will update the date at the top, and for anything significant we will tell you in the app or by email before it takes effect.