Last updated 31 October 2026
Plateful is operated by Neurit Software Szolgaltato Kft., the controller of the data described here. Contact: balint245@gmail.com. Your profile, meal plans, favourites and shopping lists are stored in the app on your device.
When you create a week, replace a meal or refresh a shopping list, the app sends your food preferences (diet, allergies, dislikes, cooking time, appliances and meal types), household size, weekly budget, currency, chosen shop and app language, with an anonymous subscription identifier, to our Cloudflare Worker. The Worker sends them to OpenAI to create recipes, a shopping list and food photos. Your name is not sent. OpenAI requests use store:false; provider abuse-prevention retention may still apply. Food photos are stored under a random recipe identifier so they can be shown again.
To allow each week to be created only once and to control costs, the Worker records which weeks a subscription created and the size of each AI request (token counts and the number of photos and web searches), under a one-way hash of the anonymous subscription identifier. It does not store your preferences, recipes or lists.
Country store discovery sends a country code. Shop price lists are researched on retailers' public websites and shared by everyone who uses the same shop. Product research sends the selected store and search terms. Barcode lookup sends the barcode to Open Food Facts. When a store logo is not bundled, the app may request its public website favicon from Google; that request includes the retailer domain and ordinary network metadata.
Unless you switch it off under You, the app sends anonymous usage events to our Worker: a random install identifier created by the app, the screens and onboarding steps you reach, actions such as choosing a plan or creating a week, and short onboarding answers (for example how you heard about Plateful, your goal, age range, country, shop, household size, number of meals, diet and meal preferences). It never sends your name, the allergens or dislikes you entered, or the content of your plans. These events are used only to understand and improve the app; they are not linked to your Apple Account and are not used for advertising or cross-app tracking.
Apple processes payments. RevenueCat processes anonymous app identifiers, purchase receipts, subscription status, and SDK/device metadata to deliver and restore entitlements. We do not receive payment card details. Ordinary network metadata is processed by our service providers.
Usage events and AI usage records are deleted after 13 months. Records of which weeks a subscription created are deleted after 90 days. Daily fair-use counters are deleted after 30 days. Shop price lists are deleted 5 weeks after they were researched. Food photos contain no personal data and are kept so saved plans can show them. Data in the app stays on your device until you erase it or delete the app.
You can switch off anonymous usage data under You, erase local data in the app, and manage subscriptions in Apple Account subscription settings. Deleting the app does not cancel a subscription. Device backups are controlled by iOS. For access, deletion, objection or any other privacy request, email balint245@gmail.com. Because server records use random or one-way hashed identifiers, we may need details from you to find them. You can also complain to your data protection authority; in Hungary this is the NAIH (naih.hu).
Providers: OpenAI, RevenueCat, Cloudflare.