Privacy policy
On this page
1. Who we are
PlatePilot (“PlatePilot”, “we”, “us”) is an iPhone app operated by Mungapen Consulting, Inc. You can reach us at support@platepilot.xyz.
2. What this policy covers
This policy covers the PlatePilot iPhone app, the photo-analysis service the app talks to, and this website at platepilot.xyz. It does not cover Apple’s services (the App Store, TestFlight, iCloud backup or the Health app), which are governed by Apple’s own privacy policy.
3. Data that stays on your device
Almost everything PlatePilot knows about you is stored only in the app’s database on your iPhone, and we have no copy of it:
- Meals and food items you log, with quantities, timestamps and notes.
- Favourites and recently used foods.
- Fasting sessions, eating-window settings, water and drink logs.
- Your goal setup, schedule and calorie/macro targets.
- Weight and body-metric entries you record, if you record them.
- GLP-1 medication doses and symptoms, if you turn that optional mode on.
There is no account and no sign-in, so this data isn’t associated with an identity we hold. If your iPhone is included in an encrypted iCloud or computer backup, that backup will contain the app’s database; that backup is Apple’s system, under your control, not ours.
4. Meal photos and photo analysis
Photo analysis is the one feature that sends data off your device, and only when you choose it.
- What is sent: the meal image you captured or selected, over an encrypted (HTTPS) connection, to PlatePilot’s analysis service.
- Why: to identify likely foods and portions and return an editable calorie and macro estimate to your phone.
- Who processes it: our analysis service passes the image to a third-party AI vision provider that performs the recognition, and returns the result. The provider processes the image to deliver that result.
- Retention, as the app works today: the analysis service keeps no copy of your photo once the estimate has been produced, and does not store the resulting estimate on our servers — it is returned to your phone and saved there if you log it. This describes current behaviour on the date above; it is not a permanent commitment, and the next section explains what would have to happen before it changed.
- No identity attached: the request carries no account, name or email, because none exists.
Ordinary server logs may record that a request happened — a timestamp, response status and coarse technical information — for reliability and abuse prevention. Those logs do not contain your photo or your food log.
A photo can capture more than food. Please avoid including faces, documents, addresses or other sensitive detail in a picture you send for analysis.
This is an area we expect to change. We are building a version of PlatePilot that can keep meal photos and their results in order to improve the accuracy of the analysis. That is not how the app works today, and we are not asking you to agree to it here. If and when it ships it will be something you are asked about and can decline, described on this page in specific terms — what is kept, for what purpose, for how long, and how you delete it — and disclosed in the app before the first photo is ever kept. We would rather tell you it is coming than let a quiet edit to this page be the announcement.
5. Apple Health
Apple Health integration is optional and off until you turn it on and grant permission through iOS.
- Read (with permission): sleep and body-weight data, used to give your day-rhythm view context.
- Write (with permission): your logged nutrition totals, so they appear in the Health app.
Health data read by PlatePilot is used only to provide features inside the app. We do not use it for advertising or marketing, we do not sell it, and we do not disclose it to data brokers. Health data is not sent to our servers or to the photo-analysis provider. You can change or revoke these permissions at any time in the Health app or in iOS Settings; PlatePilot keeps working without them.
6. If you email support
When you email us, we receive your email address, your message and anything you attach — which may include health-related detail if you choose to describe a problem that way. We use it only to answer you, and we keep the correspondence while it is useful for support history. Ask us and we’ll delete it.
Mail sent to @platepilot.xyz is routed by Cloudflare Email Routing to
a mailbox we read; Cloudflare and our mail provider process the message in
transit as part of delivering it.
7. This website
platepilot.xyz is a set of static pages served by Cloudflare Pages. It sets no cookies, embeds no third-party scripts, fonts or trackers, and asks you for no information. Cloudflare processes standard request data (such as IP address and user agent) to serve and protect the site; see Cloudflare’s own privacy documentation for how that works.
8. What we don’t collect
- No account, password or “sign in with Apple” identifier — there is no login.
- No advertising identifiers, ad SDKs or ad networks.
- No third-party analytics or behavioural tracking in the app.
- No contacts, location or microphone access.
- No payment or card details — there is nothing to buy today, and Apple would handle any future purchase.
- No server-side copy of your food log, weight, fasting history or Health data.
9. Sharing and disclosure
We do not sell personal information and we do not share it for advertising. We disclose data only:
- To the AI vision provider that performs photo analysis, limited to the image you submitted, for the purpose of returning the estimate.
- To infrastructure providers that host the analysis service and this website, and route our email, to the extent inherent in running those services.
- Where the law requires it, to comply with a lawful request, or to protect the rights and safety of users or the public.
- In a business transfer, if PlatePilot is acquired or merged, subject to applicable law and this policy.
10. Retention
| Data | Where it lives | How long |
|---|---|---|
| Food log, goals, fasting, weight, GLP-1 entries | Your iPhone only | Until you delete the item or the app |
| Meal photo submitted for analysis | In transit / in memory during processing | Not retained after the estimate is returned |
| Photo estimate result | Returned to your phone | Not stored on our servers |
| Service request logs | Analysis service | Short operational retention for reliability and abuse prevention |
| Support email | Our mailbox | While useful for support history, or until you ask us to delete it |
11. Security
Traffic between the app and our service is encrypted in transit. The analysis service is access-controlled and holds no vendor keys in the app itself. Data on your iPhone is protected by iOS device encryption and your passcode. No system is perfectly secure, and we can’t guarantee absolute security — but the best protection here is structural: we mostly don’t hold your data at all.
12. Your choices and controls
- Camera and Photos: grant or revoke in iOS Settings. Denying them disables photo logging only.
- Apple Health: manage per-type permissions in the Health app or Settings.
- Photo analysis: simply don’t use it — no photo leaves your phone if you don’t.
- Deletion: delete entries in the app, or delete the app to remove its local database. There is no server-side account to close.
- Support correspondence: email us to have it deleted.
Depending on where you live you may have rights to access, correct, delete or port personal data, or to object to certain processing. Because we hold so little — essentially support email, plus transient processing of photos you submit — most requests are satisfied on your own device. For anything else, write to us and we will respond as the applicable law requires.
13. Children
PlatePilot is intended for adults. It is not directed to children, we do not knowingly collect personal information from children, and calorie tracking is not an appropriate tool for them. If you believe a child has provided us information, contact us and we will delete it.
14. International use
Our service providers operate infrastructure in multiple countries, so a photo you submit for analysis may be processed outside the country you live in. Data that stays on your device does not travel at all.
15. Changes to this policy
If this policy changes we will update the page and the effective date above. If a change is significant — for example, if the app ever begins retaining photos or adds accounts — we will say so in the app before it takes effect.
16. Contact
Questions, requests or corrections: support@platepilot.xyz.