Information We Collect

We collect information you provide directly to us, including:

• Account information (email address for authentication)
• Health goals and dietary preferences
• Body metrics (height, weight, age, gender) for nutritional calculations
• Food allergies, medical conditions, and medications for safety recommendations
• Cultural and religious dietary restrictions
• Recipe interactions and preferences (likes, dislikes, swipe history)
• Food photos and barcode scans when you use the meal scanning feature
• Progress photos you choose to take
• Weight tracking entries

Apple HealthKit Data

Only if you choose to connect Apple Health, FreshPlate reads (and never writes) the following:

• Steps and active energy (calories burned)
• Resting heart rate
• Sleep analysis
• Body weight

We use it only to show your activity, sleep and weigh-ins next to what you eat, and to shape your own advice in the app. Your daily totals (steps, active calories, resting heart rate and a sleep summary) and weigh-ins are saved with your FreshPlate account, so your progress is still there on a new phone or after a reinstall. They are stored in your private account with our database provider (Supabase, see below), protected so that only you can access them.

Apple Health data is never used for advertising or marketing, never sold, never used in our emails, and never sent to the recipe, email-writing or food-recognition services listed below. You can disconnect Apple Health at any time in the Health app (Sharing → Apps → FreshPlate), and deleting your FreshPlate account deletes everything saved from it.

Camera and Photo Usage

We request camera access to scan food for nutritional analysis, to take progress photos, to read the name on a medicine box, and to read the nutrition table and ingredients on a food pack. A medicine box and a food pack are read on your phone and the photo is never uploaded or kept; the medicine names come from the NHS Business Services Authority's Dictionary of Medicines and Devices (Open Government Licence v3.0). Before a food photo is sent for analysis, your phone checks on the device that it shows food, so a photo of something else is not sent unless you choose to send it. Food photos are sent to our food recognition service for analysis and are not stored after processing. Progress photos are stored locally on your device and, if you are signed in, securely in your private cloud storage. We never access your photo library without explicit action from you.

How We Use Your Information

We use the information we collect to:

• Provide personalised recipe recommendations tailored to your dietary needs
• Filter recipes based on allergies, medical conditions, and dietary restrictions
• Calculate personalised nutritional targets and portion sizes
• Analyse food photos to estimate nutritional content
• Track your nutrition, weight, and health progress
• Ensure food safety for users with allergies or medical conditions
• Improve our recommendation algorithms based on your preferences

Third-Party Services

To provide our services, we share limited data with the following third-party providers:

• Supabase - Secure cloud database for storing your account data, recipes, and tracking history
• Edamam and Open Food Facts - Food recognition and nutritional databases for analysing food photos and barcodes
• Together AI - Generates your recipes and their images from your dietary profile (sent without your name or email)
• Anthropic - Writes the personalised parts of the emails we send you, from your health goal, conditions, medications and allergens
• Mistral AI - Fallback for describing a meal in words when photo recognition fails
• Resend - Email delivery for login codes and the emails you have opted into
• RevenueCat - Subscription management for premium features
• Apple Sign In / Google Sign In - Authentication (we only receive your email)
• Sentry - Crash reporting, so we can fix errors; reports contain technical details, never your health data

These providers process data only as necessary to deliver their services. We do not sell your personal information to any third party.

Ask FreshPlate (questions on our website)

When you ask a question in the Ask FreshPlate box on freshplate.health, we keep your question, the page you asked it on, the answer we gave, whether you found it helpful, and a scrambled (hashed) form of your network address that only lets us limit how many questions one connection can send. We use the questions to see what people need and to write better guides.

Answers are written by Anthropic's Claude from our own published guides and the NHS's words; your question is sent to Anthropic for that, never with your name or email. If you give your email to have an answer sent to you, we add it to our email list (the same as joining the waitlist) and may write to you once when we publish a guide that answers your question. You can unsubscribe from any email. The conversation itself is kept only in your browser tab and is gone when you close it. To have your questions deleted, email hello@freshplate.health.

Cookies and Analytics

The short version: FreshPlate sets no cookies of its own, and the app on your phone uses none at all.

On our website (freshplate.health) two things measure how the site is used:

• Vercel Analytics - Counts page views and web vitals. It is cookieless and does not identify you.
• Microsoft Clarity - Optional. Records anonymised sessions and heatmaps so we can see where the site confuses people. It sets its own cookies, so it only runs after you choose “That's fine” on the cookie banner. Choose “No thanks” and nothing is set.
• Meta Pixel - Optional. Tells Meta (Facebook and Instagram) that your browser visited a page here, so that if you have read a guide we may show you FreshPlate there later, and so we can tell whether such an advert led to a sign-up. It sets Meta's cookies and sends Meta your page address and browser details, so it only runs after you choose “That's fine” on the cookie banner. Choose “No thanks” and nothing is sent to Meta. Meta's own notice: facebook.com/privacy/policy.

Your choice is remembered in your browser, not on our servers. To change it, open the banner again:

Data Storage and Security

Your data is stored in two locations:

• On your device - Onboarding preferences, cached recipes, and tracking data are stored locally for offline access
• Cloud storage - When signed in, your data is synced to secure cloud servers run by Supabase on Amazon Web Services in the United Kingdom (London), protected by row-level security policies ensuring only you can access your data. Supabase is a US company acting as our processor; any access to UK personal data from outside the UK is covered by its data processing agreement and standard contractual clauses

We implement industry-standard security measures including encrypted connections (TLS), access controls, and regular security audits to protect your information.

Data Retention

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from the Settings page. When you delete your account, all your data is permanently removed from our servers within 30 days. Locally stored data is cleared immediately.

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and all associated data
• Restrict processing of your information
• Data portability
• Withdraw consent for HealthKit or camera access at any time via iOS Settings

Children's Privacy

FreshPlate is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Medical Disclaimer

This app provides general nutritional information and recipe suggestions. It is not intended to replace professional medical advice, diagnosis, or treatment. Always consult with qualified healthcare professionals regarding medical conditions, especially food allergies, dietary restrictions, or health-related dietary changes.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: