Consumer Health Data Notice
Last updated October 18, 2026
Some of what you log in PlateSet counts as "consumer health data" under laws like Washington's My Health My Data Act and similar laws in Nevada and Connecticut. This notice explains exactly what that data is, why we collect it, who can see it, and the choices you have. It adds to our Privacy Policy. PlateSet is run by Ironleaf Health LLC.
What health data we collect
| Data | Where it comes from | Why |
|---|---|---|
| Food and drink you log, with calories and nutrients | You | To show your day, your totals and your trends |
| Water and sleep | You | Same |
| Body weight and body measurements | You | To show your progress over time |
| Goals, daily targets, rest days and check-in answers | You, or your coach if you have one | To set your targets and track how you're doing |
| Daily notes | You | Your own journal; private unless you share them |
| Progress photos | You | Kept only on your phone. A photo leaves your phone only if you share it with your coach |
| Health intake (optional): medical conditions, medications or supplements, injuries, food allergies, pregnancy or breastfeeding, eating-disorder history, exercise limits | You | Shared only with your current coach so they can coach you safely |
| Age, height, sex and activity level in the calorie estimator | You | Used once on your phone to suggest a calorie range; not saved |
We collect it only with your consent
When you create an account, you agree to two separate things: that you're 18 or older and accept the Terms, and that PlateSet may store the health information you log to run the app for you. We use it only to provide the app to you (and to your coach, if you choose one). We don't use it for advertising and we never sell it.
Who we share it with
- Your coach, only if you join one. Joining asks for a separate yes. Your coach sees your food, water, sleep, weight, measurements, goals, check-ins and health intake. You choose whether that includes what you logged before joining (change it any time in Me → Share my older logs). Notes and photos are shared only when you choose: one at a time, or all notes with "Share all my notes". Leaving the coach stops it right away and removes photos you shared.
- Service providers that run the app for us, under contract and only to provide the service: Google Firebase and Google Cloud (accounts, database, file storage, servers and crash reports). They can't use your data for their own purposes.
- Nobody else. No advertisers, data brokers or other apps. We'd only disclose data if the law required it.
Food searches send the words you type (like "greek yogurt") to the USDA FoodData Central and Open Food Facts databases, without your name or account. Your log itself isn't sent to them.
Your rights
- See your data: everything you've logged is in the app.
- Delete it: Me → Account → Delete my account removes your account and data. You can also ask us to delete it.
- Withdraw consent: leave your coach to stop sharing with them, or delete your account to stop all collection.
- Ask about it: email support@getplateset.com to ask what we hold, who it was shared with, or to make any of these requests. We answer within 45 days. If we say no, you can appeal by replying to that email, and if we still say no, you can contact your state attorney general.
Keeping it safe
Your data is stored with Google Firebase, encrypted in transit and at rest. Database rules let only you, and your coach while you're connected, read it. Purchases are checked on our server, and nobody at PlateSet browses personal logs.