Privacy Policy

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Email address: Used for authentication (magic links) and communication.
• Name: Optional, for personalization.
• Family preferences: Dietary restrictions, taste preferences, and family size.

1.2 Usage Information

We automatically collect:

• Meal plan data: Generated meal plans, votes, and regenerations.
• Support information: Messages, account and technical context, and screenshots you choose to attach. Attachments are uploaded to public Vercel Blob storage; anyone who has the attachment URL may be able to view it. The URL is included in the support email. Do not include sensitive information that is not needed to explain the issue.
• Device and connection information: Device type, operating system, app version, IP address, browser type, and access times where available.
• Mobile reminders: If you enable push reminders, the app processes a device push token, installation identifier, notification preferences, and time zone.
• Usage analytics: If you accept analytics in Cookie settings, Google Analytics 4 collects page views and selected feature interactions on the website and web app.
• Country estimate: The web app first uses Vercel's country header. If that lookup fails, it requests a country estimate from ipapi.co, which receives your IP address.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: To provide the Service, generate meal plans, and manage your account.
• Consent: For optional analytics, push reminders, public sharing, and other optional features where consent is requested.
• Legitimate Interests: To improve our Service, ensure security, and analyze usage trends, provided these interests do not override your fundamental rights.
• Legal Obligation: To comply with applicable laws and regulations.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service.
• Generate personalized meal plans and shopping lists.
• Process payments and manage subscriptions.
• Communicate with you regarding updates, support, and security alerts.
• Generate requested meal plans and recommendations using the preferences and meal context you provide.

3.1 Optional Public Sharing, Community Insights, and Research

FamilyPlate offers an optional public-sharing setting in your Preferences. It is off by default. If you explicitly enable it, anonymized meal and feedback data may contribute to public recipe features, aggregated community insights, aggregated statistics, and FamilyPlate research or citation materials.

We do not publish your name, email address, family name, or individual profile through these features. Published statistics are aggregated, and additional privacy and minimum-sample safeguards apply before research results are released.

You can withdraw this consent at any time in Preferences. Turning the setting off prevents your data from contributing to new public, community, or research outputs after the change. Previously published anonymized recipe content may be retained separately from your account data.

4. Sub-Processors and Data Sharing

We do not sell your personal information. We share your data with trusted third-party service providers (sub-processors) strictly to operate our Service. Our current sub-processors include:

• Vercel: Website and web-app hosting, server functions, and file storage, including optional support attachments.
• Neon: Database hosting for account, preference, meal-planning, and service records.
• OpenAI: Processing of meal-planning inputs and related context to generate requested plans and recommendations, and administrator-requested recipe images. OpenAI states that API data is not used for model training by default; abuse-monitoring logs may be retained for up to 30 days unless an exception applies. FamilyPlate's project-specific retention setting was not verified in this review.
• NVIDIA: Administrator-requested recipe-image generation based on recipe content. AI-generated support reply drafts are temporarily disabled while provider data protections are reviewed.
• Mailjet: Delivery of authentication, support, and service emails; delivery events and, where enabled, open and click events are recorded. Mailjet says customer data is stored in EU data centers in Frankfurt (Germany) and Saint-Ghislain (Belgium), with daily encrypted backups in geographically separated EU environments; it does not state a backup-expiry period on that information page.
• Stripe: Payment and recurring-subscription processing. FamilyPlate receives subscription status and processor identifiers through Stripe.
• Expo, Apple, and Google: When you enable push reminders and opt in, the Expo service (which lists US subprocessors) stores the Expo push token and routes notification content to Apple and Google for delivery. Expo says it keeps notification content only while sending it and clears push receipts after 24 hours.
• Google Analytics 4: Website and web-app page views and selected interaction events, only after you accept analytics in Cookie settings. You can change or withdraw this choice there.
• ipapi.co: A fallback country lookup that receives your IP address only if the app's Vercel country lookup fails.

5. International Data Transfers

The production web application and Blob storage are configured in Vercel region iad1 (US East); optional support screenshots use public Blob URLs. Neon hosts the production database in Frankfurt, Germany. Mailjet says its customer data is stored in Frankfurt and Saint-Ghislain, Belgium. Expo's published subprocessor list includes US providers, and its push service passes notifications to Apple and Google. Stripe states that customer data may be transferred to Stripe, LLC in the United States and to its affiliates and subprocessors in other countries. Vercel also states that it may process data in the United States and wherever its subprocessors operate. OpenAI and NVIDIA may process request content in the United States or other service locations; the FamilyPlate-specific regional settings for these accounts have not been verified. International disclosures are made subject to the transfer conditions and safeguards required by applicable data-protection law; the precise mechanism depends on the destination and provider.

6. Data Retention

We retain account and service data while needed to provide the Service and meet legal obligations; we do not apply one blanket 30-day deletion period to all active service data. Neon production point-in-time history is retained for up to seven days, and scheduled daily Neon snapshots for up to 30 days. If you delete account data, an older restricted backup copy may retain it until that copy expires; backups are not rewritten for each request. A copy predating a completed deletion must remain isolated until the deletion can be reapplied and verified. Other provider log, backup, support-attachment, and deletion schedules have not all been confirmed. Support screenshots are not automatically deleted by the application and may remain accessible through their public URLs until removed from Blob storage.

Delete your FamilyPlate account

You can request deletion of your account and associated personal data without signing in or reinstalling the app. Read the deletion steps, data scope and retention information. Parents and legal guardians can also request removal of a child's information; we verify their authority and protect other family members' accounts.

7. Your Data Subject Rights

Depending on your location, including Switzerland and the EU, you may have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure (Right to be Forgotten): Request deletion of your data.
• Restriction: Request a limit on how we process your data.
• Data Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests or direct marketing.

To exercise these rights, please contact us at privacy@familyplate.ai. EU residents also have the right to lodge a complaint with their local Data Protection Authority.

8. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), secure authentication (magic links), and restricted access controls. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Contact Us