Privacy Policy

Effective: May 28, 2026  |  Last Updated: June 22, 2026

1. The short version

• Synced to your private cloud backup: your food log, body measurements, manual glucose entries, GLP-1 / medication tracking, workouts you log, goals, hydration, mood and symptom notes, custom recipes, profile photo, and progress photos. Everything is encrypted in transit (HTTPS) and at rest, and only accessible by you with your authenticated account.
• Stored on your device only, never uploaded to our servers: data read from Apple Health (iOS) or Google Health Connect (Android), including steps, heart rate, sleep, blood glucose from your CGM, etc.; biometric login credentials (Face ID / Touch ID on iOS, fingerprint or face unlock on Android); your My Labs vault (lab report PDFs and photos you upload, the parsed results, and the PIN you set to unlock the vault); and the cached working copy of your data.
• We never sell your data. We never use your Apple Health, Google Health Connect, or My Labs data for advertising. We never share your information with third parties for advertising, and we do not run ads of any kind.
• You’re in control: you can edit or delete entries any time, save photos to your camera roll, reset your lab vault, and permanently delete your account and all your data from within the app.

2. Information we store

When you create an account and use Plate of Wellness, the following information is stored on your device and synced to our cloud backup (powered by Cloudflare, a U.S.-based infrastructure provider) so you can switch devices without losing your data:

• Account information – your name, email address, and an encrypted authentication token used to sign you in.
• Food and nutrition log – meals you record, portions, and the nutrition details attached to them.
• Body metrics – weight entries, body measurements, and other body data you add over time.
• Workouts – exercise sessions you log manually within the app.
• GLP-1 and medication tracking – medication type, dose history, and related notes you enter.
• Manual glucose entries – readings you type into the app directly. (Readings imported from Apple Health or Google Health Connect are described in Section 4. Lab values you enter or upload to My Labs are described in Section 5.)
• Journal, mood, energy, and symptom notes – anything you write or tag.
• Hydration log – water and beverage entries.
• Progress photos and profile photo – see Section 7.
• Custom recipes – recipes you build in the Recipe Builder.
• App preferences and goals – calorie targets, macro targets, dietary preferences, notification settings.
• Subscription and entitlement status – whether you have an active membership, so the app can unlock features you’ve paid for.
• Dietitian questions and answers – if you use the “Ask the RDs” feature, the questions you submit and the responses provided are stored so you and our dietitians can refer back to them. The Ask the RDs feature provides general nutrition and wellness guidance only; it is not personalized medical care and does not create a healthcare provider relationship between you and Plate of Wellness.

3. Cross-device sync

When you sign in to Plate of Wellness on a new device (for example, after upgrading your phone, switching between iOS and Android, or reinstalling the app), the app will retrieve your latest data from our cloud backup so your food history, photos, measurements, and other entries are restored automatically.

Syncing happens in the background. The app saves changes to our servers periodically (approximately once per hour while you’re actively using the app, and immediately when you close or background the app), so the gap between making a change and having it backed up is short.

You do not need to do anything to enable sync. Your account credentials are all that’s needed to access your data on a new device.

4. Apple Health (HealthKit) and Google Health Connect data

If you grant permission, Plate of Wellness reads the following data types from your device’s health platform — Apple Health on iOS or Google Health Connect on Android — to power your dashboards and insights: steps, active energy, distance, weight, heart rate, resting heart rate, heart rate variability, sleep, workouts, and blood glucose.

This data is read on demand to display your trends and is never uploaded to our servers. We follow Apple’s HealthKit requirements and Google’s Health Connect data handling requirements strictly:

• We do not upload Apple Health or Google Health Connect data to our servers.
• We do not use this data for advertising or marketing.
• We do not sell this data, and we do not share it with third parties.
• On iOS, you can turn off any data type, or revoke access entirely, at any time in iOS Settings > Health, or within the Plate of Wellness app’s settings.
• On Android, you can turn off any data type, or revoke access entirely, at any time in Android Settings > Apps > Health Connect, or within the Plate of Wellness app’s settings.

When you switch phones, your health data is restored by your operating system (typically through your iCloud Backup on iOS, or your Google account / device backup on Android) on the new device, and Plate of Wellness simply reads it again with your permission. We do not need to back this up because your operating system already does.

5. My Labs (Lab Vault)

My Labs is an optional feature that lets you upload PDFs or photos of your lab reports, or enter values manually, and get a plain-language read of your results. Because lab reports often contain sensitive medical information, we designed this feature with a stricter privacy model than the rest of the app:

• On-device only. Your lab files (PDFs and photos), the parsed results (markers, values, reference ranges, and the AI-generated reads), and the PIN you set to unlock the vault are stored only on the device where you uploaded them. They are NOT uploaded to our cloud backup. They do NOT sync to other devices. If you switch phones, reinstall the app, or delete the app, the lab data is gone. We made this trade-off intentionally so that no copy of your lab data ever sits on our servers.
• PIN protection. Before you can use My Labs, you set a 4-to-6-digit PIN. The PIN is hashed (SHA-256) and stored on your device only. We never see your PIN. After 2 minutes of inactivity, or when you leave the My Labs tab and return after 2 minutes, or when you background the app, the vault locks automatically and the PIN is required to re-enter. If you forget your PIN, the only way back in is to reset the vault, which permanently deletes all stored labs on that device.

When you tap Analyze on an uploaded file (or save manual entries), the following happens:

1. The file or values are sent through our Cloudflare Worker over an encrypted (HTTPS) connection to our AI processing provider, Anthropic, which runs the Claude language model.
2. Anthropic reads the file or values, returns the structured marker data, smart read, educational facts about each marker, and food ideas where applicable.
3. The file is immediately discarded by our Worker after the response is returned. We do not store the file on our servers.
4. Anthropic does not retain the content for training or any other purpose per our zero-data-retention agreement.
5. The structured results are returned to your device and saved locally to your vault.

Per-upload consent. Each time you upload a lab file or save manual entries, the app shows you a consent screen explaining what is about to happen, and you must accept before the analysis runs.

Reset and delete. You can delete any individual lab from the All Labs tab. You can reset the entire vault from the Lock screen, which permanently deletes every lab, every parsed result, and your PIN from the device. Deleting your account or uninstalling the app also removes the lab data.

6. Data retention and automatic clean-up

To keep the app fast and protect your device’s storage, Plate of Wellness automatically manages older data on your device. Server-side, your data is retained while your account is active and removed when you delete your account.

The on-device clean-up is designed to keep your phone running fast without losing your history. Older entries that age off your local device are still available on our servers (except My Labs data, which is device-only by design), so they restore automatically when you sign in on a new device.

7. Photos

Plate of Wellness offers optional photo features:

• Progress photos are captured by the camera or chosen from your library, automatically resized for storage efficiency, and saved to your device. They are then encrypted in transit and uploaded to your private cloud backup so they can be restored on a new device. Only you can access your photos through your authenticated session.
• Profile photo is stored with your account information in the same encrypted cloud backup.
• Meal photos and form-check photos used by AI features are processed to generate a result and are not permanently stored by the app or on our servers (see Section 8).
• Lab report photos uploaded to My Labs are stored on your device only and are not uploaded to our cloud backup. The file is sent only to our AI provider for analysis and then discarded as described in Section 5.

8. AI-powered features

Some features send the content you provide to a trusted AI processing provider (Anthropic) to generate a response. This processing is used solely to return your result. These features include:

• AI meal logging from a photo
• Voice-to-log
• AI meal and workout suggestions
• AI form-check
• My Labs analysis (PDFs, photos, and manual entries — see Section 5 for the full data flow)

The app does not permanently store the photos, recordings, or files used for these features. Our AI provider does not retain them for training or other purposes per our agreement. This content is not used to build an advertising profile of you.

9. Subscriptions and payments

Plate of Wellness offers an auto-renewing membership (USD $19.99 per month, where applicable). On iOS, all payments are processed by Apple through the App Store and are governed by Apple’s terms. On Android, all payments are processed by Google through Google Play Billing and are governed by Google’s terms. We do not receive or store your credit card or payment details. We use a subscription management provider (RevenueCat) to verify your entitlement status so the app can unlock paid features. You can manage or cancel your subscription at any time in your Apple ID settings (iOS) or your Google Play account settings (Android).

10. Third-party data sources and providers

To provide core functionality, Plate of Wellness relies on the following sources and providers:

• Cloudflare – for our application infrastructure, encrypted data storage (Workers KV), encrypted photo storage (R2 Object Storage), and our AI analysis Worker which routes My Labs requests to Anthropic and discards files immediately after the response. Cloudflare processes data only at our direction and does not access the contents of your data.
• Nutrition databases – food and nutrition data is powered by the FatSecret Platform API, USDA FoodData Central, and Open Food Facts.
• Apple – App Store distribution, App Store payments, and HealthKit (iOS only).
• Google – Google Play Store distribution, Google Play Billing for payments, and Google Health Connect for health data integration (Android only).
• Anthropic – AI processing for the features described in Section 8, including My Labs analysis. Anthropic operates under a zero-data-retention agreement: content sent for processing is not retained or used for model training.
• RevenueCat – subscription management to verify your membership status across both iOS and Android.
• Resend – transactional and marketing email delivery (welcome emails, account communication, product updates, and occasional promotional offers).

These providers process only the limited information needed for their specific function, and we have data processing agreements in place where required.

11. Security

We use industry-standard technical and organizational measures to protect your information:

• Encryption in transit: all communication between the app and our servers uses HTTPS / TLS.
• Encryption at rest: data stored in Cloudflare KV and R2 is encrypted by the provider using AES-256.
• Authenticated access: each user can only access their own data through a per-user session token. Photos and structured data are scoped to your account.
• Biometric protection: on supported devices, your saved password can be protected by Face ID or Touch ID on iOS, or fingerprint / face unlock on Android, with credentials stored in the device’s secure hardware enclave or Trusted Execution Environment.
• Account passwords: stored hashed, not in plain text.
• My Labs vault: protected by a 4-to-6-digit PIN that is hashed (SHA-256) and stored only on the device. The vault auto-locks after 2 minutes of inactivity, when you leave the My Labs tab for 2 minutes, or when the app is backgrounded. Lab data lives on the device only and is never transmitted to our servers as a stored copy.

No method of transmission or storage is 100% secure, but we work to safeguard your information using current best practices.

12. Your choices and rights

• Edit or delete entries at any time within the app. Deletions sync to our servers as well (except My Labs data, which only exists on your device — deleting a lab there removes it from the device immediately and permanently).
• Control Apple Health (iOS) or Google Health Connect (Android) access per data type in your device’s system settings or within the Plate of Wellness app.
• Reset your My Labs vault from the Lock screen, which permanently deletes every stored lab, parsed result, and your PIN on that device.
• Export your data using the in-app export feature, which delivers a readable copy of your data to your email or your device.
• Save photos to your camera roll any time.
• Share original lab files from the My Labs > Files tab using your phone’s native share sheet (AirDrop, email, Messages, etc.).
• Unsubscribe from marketing emails at any time by clicking the “unsubscribe” link at the bottom of any marketing email. You will continue to receive transactional emails (password resets, receipts, important account notices) because those are required to operate your account. To opt out of all email entirely, contact us at info@plateofwellness.com.
• Delete your account and data: you can permanently delete your account from within the app. This removes your account information, food log, photos, measurements, and all other personal data from both your device and our servers. The deletion is irreversible.

Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, CCPA, or other state and country-specific privacy laws, including the right to access, correct, delete, or port your personal information, and to object to certain processing. To make a request, contact us at info@plateofwellness.com.

13. State-specific privacy rights

For California residents (CCPA/CPRA and CMIA)

California residents have the right to know what personal information we collect, the right to access and obtain a copy of their personal information, the right to request deletion of personal information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell your personal information and we do not share it for cross-context behavioral advertising.

Under the California Confidentiality of Medical Information Act (CMIA), medical information you enter or upload through My Labs is considered confidential. We do not disclose this information to any third party except Anthropic, our AI processing subprocessor, which receives the content only to generate the read and then discards it. Lab data otherwise lives only on your device.

To exercise your rights, contact us at info@plateofwellness.com.

For Washington residents (My Health My Data Act)

Under Washington’s My Health My Data Act, “consumer health data” includes the body measurements, nutrition logs, hydration, medication tracking, mood and symptom notes, manual glucose entries, lab data uploaded or entered through My Labs, and other health-related information described in Sections 2 and 5 above. We collect this data solely to provide you with the Plate of Wellness Service and the features you have requested. We do not sell consumer health data. We do not share consumer health data with third parties for advertising or any purpose unrelated to operating the Service. The subprocessors listed in Section 10 process consumer health data only as needed to perform their specific function, under written agreements with us.

My Labs data is stored on your device only and is not retained on our servers. Anthropic receives lab content during analysis and discards it immediately afterward under a zero-data-retention agreement.

You have the right to access the consumer health data we have collected about you, the right to withdraw consent for the collection and processing of your consumer health data, the right to delete your consumer health data, and the right to appeal a denial of any of these requests. To exercise these rights, contact us at info@plateofwellness.com. We will respond within 45 days, with the possibility of a 45-day extension where reasonably necessary.

For Texas residents (Texas Data Privacy and Security Act)

Texas residents have rights under the Texas Data Privacy and Security Act (TDPSA), including the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the sale of personal data or targeted advertising. We do not sell personal data and we do not engage in targeted advertising. To exercise these rights, contact us at info@plateofwellness.com.

For Colorado residents (Colorado Privacy Act)

Colorado residents have rights under the Colorado Privacy Act, including specific protections for sensitive data such as health data. Lab information uploaded or entered through My Labs is treated as sensitive personal data. We process sensitive data only with your consent and only to provide the feature you requested. You have the right to access, correct, delete, port, and opt out of certain processing. To exercise these rights, contact us at info@plateofwellness.com.

For residents of other U.S. states

Residents of other U.S. states with applicable privacy laws (including Connecticut, Virginia, Oregon, Montana, and others) may have similar rights to access, correct, delete, and obtain a portable copy of their personal data. To exercise these rights, contact us at info@plateofwellness.com.

For users in the EU, UK, and other GDPR jurisdictions

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, as well as the right to lodge a complaint with your local data protection authority. We process your data based on your consent (which you can withdraw at any time) and to perform our contractual obligations to you. Lab data uploaded through My Labs constitutes special category data (health data) under Article 9 of the GDPR and is processed only with your explicit consent. To exercise these rights, contact us at info@plateofwellness.com.

14. Children’s privacy

Plate of Wellness is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

15. International users

Plate of Wellness is operated from the United States. Cloudflare’s global infrastructure routes traffic to nearby data centers, but data may ultimately be processed in the U.S. If you access the Service from outside the U.S., you consent to that processing.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.

© 2026 Plate of Wellness Group LLC. All rights reserved. · Patent Pending No. 64/068,334