PlateSet ("the app", "we") helps people log food, workouts, water, sleep and body measurements, and lets them work with a coach. This policy explains what we collect, why, who can see it, and how to delete it. The app is run by Ironleaf Health LLC.
Some of what you log is health data. Our Consumer Health Data Notice covers it in detail.
The short version
- Your log is private to you, and to your coach only if you connect with one.
- Progress photos stay on your phone unless you share one with your coach. A profile photo is optional; if you add one, your coach and your clients can see it.
- Daily notes are private unless you share them.
- We don't sell your data, show ads, or use advertising trackers.
- You can delete your account and data from inside the app at any time.
What we collect
| Data | Why |
|---|---|
| Email address and display name | To create and sign in to your account, and so a coach can recognize you. |
| Food, water, sleep, weigh-ins, body measurements, workouts your coach gives you and what you log for them (sets, weights, times and notes), goals, targets and check-ins | This is the log the app exists to keep, and what your coach sees if you have one. |
| Daily notes | Kept for you. Shared with your coach only if you share a note, or turn on "Share all my notes". |
| Progress photos | Stored only on your phone. If you share one with your coach, a compressed copy is uploaded so they can see it. Unsharing deletes that copy. |
| Profile photo (optional) | Shown next to your name so your coach, or your clients if you coach, can recognize you. A small square copy is uploaded when you add one. Removing it, or deleting your account, deletes it. We store the image only: we don't use face recognition or extract face measurements from any photo. |
| App settings (units, meals, humor, reminders) | To make the app work the way you set it up. Reminder times stay on your phone. |
| Restaurant items and barcode label numbers you add, and reports you make about items | Added items and label numbers are shared with everyone who uses the app, with no name attached. Reports help us fix wrong information. |
| Early access requests on getplateset.com: your name, email, whether you coach, and an optional note | Only to contact you about getting PlateSet. Kept until you ask us to delete it, or until we no longer need it to set you up. |
| Food search words and scanned barcodes | To find foods. Searches usually go through our server. Barcode scans, and searches when our server can't be reached, go from your phone straight to Open Food Facts, which sees your device's internet address but not your account. |
| Health intake (optional): medical conditions, medications or supplements, injuries, food allergies, pregnancy or breastfeeding, eating-disorder history, exercise limits | Shared only with your current coach so they can coach you safely. You fill it in only if you choose to. |
| Crash and error reports (device model, Android version, what the app was doing) | To find and fix bugs. These don't include your log, notes or photos. |
| Feedback you send from Help and feedback: what you write, a screenshot if you add one, your account name and email, the app version and your phone model | To understand and fix the problem, and to reply to you. Only we see it. |
| Purchase status (the one-time unlock, and coach subscriptions) and when your free week started | To unlock logging after the free week, and coaching features. Payment is handled entirely by Google Play; we never see your card. |
Who can see your data
- You.
- Your coach, if you join one with their invite code: your log, measurements, goals, check-ins, your health intake if you fill it in, the workouts they gave you and what you logged for them, and any notes and photos you choose to share, and your profile photo if you added one. When you join, you choose whether they also see what you logged before that day, including workouts you did with an earlier coach (so your records carry over); you can change it later in Me. If you leave a coach, or switch to a new one, the new coach can't see notes or photos you shared before.
- Your clients, if you coach: your name and your profile photo if you added one.
- When you leave a coach, or a client leaves you, the other person can no longer load your profile photo. A copy already on their screen can stay there until they close the app, and no app can prevent screenshots.
- Everyone, for restaurant items and barcode label numbers you add, without your name.
- Service providers who run parts of the app for us:
- Google Firebase and Google Cloud (account sign-in, database, file storage, servers, notifications and crash reports). Under Google's data processing terms for these services, Google processes the data only on our instructions, to provide, secure and run them, and not for its own purposes, except where the law requires.
- Google Play handles purchases and subscriptions as its own business, under Google's privacy policy, not as our service provider. It knows which Google account bought what, but gets no log or health data from us.
- On this website, pages load their fonts from Google Fonts, and the coach dashboard loads Firebase's code from Google, so your browser's address reaches Google when they load. The website has no advertising or analytics trackers.
- Demo links from your coach (the "How to" button on an exercise) open the page or video they added, such as YouTube, in your browser or that app. That site gets the visit under its own privacy policy; we send it nothing about you.
- Public food databases (USDA FoodData Central and Open Food Facts): they receive the search words and barcodes you send, but not your account. For barcode scans, and searches when our server can't be reached, Open Food Facts also sees your device's internet address. They aren't our contractors and follow their own privacy policies.
- Authorities, only if the law requires it.
We don't sell or rent personal data, don't share it for advertising, and don't use it to train AI models, including large language models.
Health information
The app stores health-related information you choose to enter. It's used only to show you your log and trends, power reminders and safety prompts, and share with your coach as described above. The app is not a medical device and doesn't give medical advice. See our Terms.
Where it's stored and how it's protected
Data is stored with Google Firebase in the United States, encrypted in transit and at rest. Access rules on our database and file storage let only you, and the people described above, read your records. No system is perfectly secure: if a breach affects your personal or health data, we'll notify you, and the regulators who must be told (such as the Federal Trade Commission under its Health Breach Notification Rule), as the law requires.
How long we keep it
We keep your data while you have an account. When you delete your account, your log (including your workouts), goals, check-ins, health intake, notes, photos you shared, profile photo, settings, reports, feedback you sent and barcode label numbers you added are deleted. If you coach, your invite code, your private notes and session records about clients, and your programs, templates and training maxes are deleted too; workouts you already gave clients stay in their logs. Restaurant items you added to the shared list stay available to others, with no name attached. Search words are kept in an anonymous cache, with no account attached, for up to 7 days to speed up searches. Crash reports are kept for up to 90 days. We keep backups of our database to recover from failures. Deleting doesn't edit existing backups: copies of deleted data in them are erased automatically as those backups expire on their regular schedule, within 14 weeks, and until then they're used only for recovery. Your coaches' private notes, session records and the training maxes they set for you are deleted from PlateSet with your account, and we tell each coach so they delete any copies they kept, under the Coach Terms. Their programs stay theirs.
Your choices and rights
- Delete your account in the app: Me → Account → Delete my account. Or follow these steps.
- Download your log as a CSV file: your coach can export your last 90 days from the PlateSet app, or contact us and we'll send all of it.
- Stop sharing any note or photo at any time, remove your profile photo (tap it in Me), or leave your coach.
- State privacy rights. Depending on where you live (for example Connecticut, California and other states with privacy laws), you can ask us to confirm what personal data we hold about you, get a copy of it in a portable format, correct it, or delete it. Email support@getplateset.com; it's free, and we answer within 45 days (or tell you within that time why we need up to 45 more). We don't sell personal data, use it for targeted advertising, or use it for automated decisions with legal or similarly significant effects, so there's nothing to opt out of. If we turn down a request, you can appeal as described in the Consumer Health Data Notice, and then contact your state attorney general.
Children
The app isn't for children. You must be at least 18 to use it. If we learn someone under 18 has an account, we'll delete it.
Changes
If we change this policy, we'll update the date above and, for important changes, tell you in the app.