Privacy policy

The short version

• You sign in with Google. We receive your name, email address and profile photo.
• To set your targets you give us health and body information: gender, age, height, weight, goals, diet, allergies and health conditions.
• Your food diary, weigh-ins and photos are stored on our servers so they sync and stay with you.
• Meal photos, label photos, meal descriptions and a summary of your diet profile are sent to a third-party AI provider to analyse them. Your name and email are not sent.
• We record device details, your IP address and an approximate location (country and city) to run and secure the service. Detailed request logs are deleted automatically after 90 days.
• Purchases are handled by Google Play and the App Store. We never see your card details.
• We do not sell your data, show ads or use advertising or analytics SDKs.
• You can delete your account in the app at any time.

Who we are

Plately is operated by Plately (“we”, “us”). This policy covers the Plately mobile apps for Android and iOS, the Plately servers they connect to, and this website at calories.earnbhavy.in. For any privacy question, email support@caloriesburn.com.

What we collect

Your Google account

Plately uses Google Sign-In. When you sign in, Google confirms your identity and shares your name, email address, Google account ID and profile photo link with us. We never receive your Google password. We also record when you signed in and how many times.

Your profile and health information

During onboarding, and whenever you edit your profile, you can give us:

• gender, year of birth (used to calculate your age), height, current, starting and target weight;
• your goal (lose, maintain or gain weight), weekly pace, target date, focus areas and activity level;
• whether you do strength training and how many meals you eat a day;
• your country, region and the cuisines you usually eat;
• your diet type (for example vegetarian, halal, Jain or keto), food restrictions and allergies;
• health conditions you choose to tell us about, such as diabetes, high blood pressure, PCOS, thyroid or kidney conditions, pregnancy or breastfeeding.

From these we calculate your daily calorie, protein, carbohydrate, fat, fiber, water and step targets, your BMI and a projected goal date. We also store your app preferences: units, language and reminder settings.

Health conditions, allergies and weight are sensitive information. You choose whether to enter them, and you can change or remove them at any time in Profile.

Your food diary and tracking

• meals you log: food names, brands, portions, servings, calories and nutrients, health scores, allergens, additives, notes, and how you logged them (photo, text, barcode, label, search, recipe or meal plan);
• water, steps, exercise, fasting sessions, and weight entries with optional body fat and notes;
• custom foods, favourite foods, saved, generated and imported recipes, meal plans and shopping lists;
• AI diet analyses and the nutrition statistics they are based on.

Photos

When you scan a meal or a nutrition label, or add a progress photo to a weigh-in, the image is uploaded to our server and stored so it can be shown in your diary or progress history. Images are stored under long, random file names. Meal and label photos are also sent to our AI provider for analysis (see AI processing). Progress photos are not sent to AI.

Device information, IP address and approximate location

Every time the app talks to our servers it sends technical information, which we store:

• a random device identifier created by the app, your platform (Android or iOS), device model, operating system version, app version, time zone and language/region setting;
• your IP address and the browser-style user agent string of the request;
• an approximate location: the country, and sometimes the city, worked out from your IP address. This is looked up in an offline database on our own server (or read from a country header added by our network provider). We do not use your phone’s GPS.

We keep a list of the devices you use (with the last IP address, country, city and time each was seen), plus the device, IP address and location from when you signed up and when you were last active.

Request logs

For each request your app makes while signed in, we log the time, the action (for example “Logged food” or “AI food photo scan”), the address requested, the result code, how long it took, any error message, your IP address, country, device identifier, platform and app version. We use these logs to fix problems, prevent abuse and support you. Request logs are deleted automatically 90 days after they are created.

AI usage records

For each AI request we record the feature used, the AI provider and model, the number of tokens, the cost, how long it took, whether it succeeded, a short summary of what you asked (for example the text you typed, or “Photo scan”), the link to the photo, a copy of the result we showed you, and your country and platform. We use these to enforce daily AI limits, monitor costs and quality, and help you if something goes wrong.

Purchases

If you subscribe to Premium, the purchase is made through Google Play or the App Store. We receive and store the plan, product ID, store, transaction or order ID, purchase token, status, start and expiry dates, auto-renew status, price and currency, and we check them with Google or Apple to confirm the subscription. We never receive your card or bank details.

Messages to support

If you email us, we keep your email address and the content of your messages to answer you.

Stored on your phone

The app keeps your sign-in tokens in your phone’s secure storage, plus the random device identifier and settings such as your theme. The app asks for camera access to scan meals, barcodes and labels, and photo library access if you choose a photo from your gallery. It does not access your contacts, location, microphone or health apps.

How we use your information

• To provide the app: create your account, calculate your targets, analyse meals and labels, show your diary, progress and insights, generate recipes and meal plans, and sync your data across devices.
• To personalise it: use your country, region, cuisines, diet, allergies and conditions to recognise local dishes, suggest foods, filter recipes and warn you about conflicts.
• To keep accounts and the service secure: manage sign-in sessions, detect and block abuse, and enforce daily AI limits.
• To run and improve the service: fix errors, measure performance, monitor AI costs and understand overall usage, for example how many people use the app in each country or on each platform.
• To handle subscriptions: verify purchases and restores with Google and Apple and apply your Premium limits.
• To support you and to meet legal obligations.

We do not use your information for advertising, we do not build advertising profiles, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Authorised members of our team can view account information, logs and AI records through a restricted admin panel when needed for support, security, cost monitoring or to act on a request from you.

AI processing

Plately’s AI features run on large language models provided by third parties. When you use an AI feature, our server sends the provider only what that feature needs:

• Meal photo scan and label scan: the photo, plus any note you add.
• Describe a meal: the text you type.
• AI recipes: the ingredients, meal type, cuisine, time and calorie limit you choose and any notes.
• Recipe import: the link you paste and the text of that public page, or the caption text you paste.
• Meal plans: the number of days, meals per day and any notes you add.
• Diet analysis: summaries of the nutrition you logged over the chosen period.
• With every AI request: a short profile so the result fits you: country and region, the cuisines you eat, diet type, restrictions, allergies, health conditions, gender, age, height, weight, goal and daily targets.

We do not send your name, email address or Google account ID to AI providers.

The provider we use is configurable and can change without an app update. Providers we use or may use include Alibaba Cloud (Qwen models via Model Studio / DashScope), OpenAI, Google (Gemini), and other providers such as Anthropic, DeepSeek or Mistral. We use them through their business APIs, and their handling of the data we send is governed by their API terms and privacy policies. These providers may process data in countries other than yours.

AI results are estimates and can be wrong. Please check portions, nutrition values and allergen warnings, and read our health disclaimer.

Who we share it with

We do not sell your personal information, and we do not share it with advertisers or data brokers. We share it only as follows:

• AI providers, as described above, to analyse your requests.
• Hosting and infrastructure providers that run our servers, database and file storage on our behalf.
• Google, to verify your sign-in and Google Play purchases. The app also downloads its font from Google Fonts, which means Google receives your IP address when that happens.
• Apple, to verify App Store purchases.
• Open Food Facts, a public food database. When a barcode is not in our own database, our server looks up the barcode number there. No personal information is sent.
• Websites you import recipes from. Our server fetches the public page you link to. That website sees a request from our server, not from your phone.
• Authorities or others when we are legally required to, or when needed to protect the rights, safety or property of our users, the public or us.
• A buyer or successor if Plately is involved in a merger, acquisition or sale of assets, under this policy or one at least as protective.

How long we keep it

Security

We use reasonable technical and organisational measures to protect your information, including:

• encrypted connections (HTTPS) between the app and our servers;
• short-lived access tokens and rotating refresh tokens; if an old token is reused, all sessions for that account are signed out;
• sign-in tokens stored in your phone’s secure storage;
• API keys for AI providers encrypted at rest;
• an admin panel restricted to authorised team members with role-based access.

Uploaded images are served from long, random addresses so they cannot be guessed, but anyone who has the exact link to an image can open it. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as required by law.

Your choices and rights

• Access and correct: see and edit your profile, targets, preferences and logs in the app at any time.
• Delete: delete individual entries in the app, or delete your whole account from Profile. You can also ask us by email.
• Get a copy: email us to receive a copy of your data in a common, machine-readable format.
• Withdraw consent: remove health information from your profile, stop using AI features, or delete your account. This does not affect processing that already took place.
• Object or restrict: ask us to stop or limit certain processing.
• Complain: you can contact your local data protection authority. We would appreciate the chance to help first.

These rights apply in many places, including the EEA and UK (GDPR), California (CCPA/CPRA) and India (Digital Personal Data Protection Act). To use them, email support@caloriesburn.com from the email address of your account. We may ask you to confirm your identity and will reply within 30 days. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for using your rights.

Legal bases (EEA and UK)

• Contract: to provide the app and your account, including AI features you request and Premium.
• Explicit consent: for health information (such as weight, health conditions, allergies and diet) that you choose to enter. You can withdraw it by removing the information or deleting your account.
• Legitimate interests: to secure the service, prevent abuse, keep request logs, monitor costs and improve the app, balanced against your rights.
• Legal obligation: to keep purchase records and respond to lawful requests.

International transfers

Plately is used worldwide. Your information may be processed in countries other than your own, including where our servers and our AI and hosting providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses for these transfers.

Children

Plately is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. Calorie tracking is not suitable for children without guidance from a parent and a health professional. If you believe a child has given us personal information, email support@caloriesburn.com and we will delete it.

This website

This website is a set of static pages. It does not use cookies, analytics, advertising or tracking scripts. If you switch between light and dark mode, your choice is saved in your browser’s local storage and never sent to us. Like any web server, ours may keep standard access logs (IP address, time, page requested and browser type) for security and troubleshooting.

Changes to this policy

We may update this policy as the app changes. We will change the “Last updated” date at the top, and for significant changes we will let you know in the app or by email before they take effect.

Contact us

Plately
Email: support@caloriesburn.com
Website: calories.earnbhavy.in