Privacy Policy

Last updated: 14 August 2026

1. Who we are

PlateDate ("PlateDate", "we", "us") is a meal‑planning and recipe app operated by an individual sole trader based in the United Kingdom. For the purposes of UK data protection law, we are the "data controller" for the personal data described here. You can reach us at hello@platedate.date.

2. What data we collect

We collect only what we need to run the app:

• Account details — your email address (used for passwordless sign‑in), your display name and your chosen profile emoji.
• Preferences — allergen and dietary filters, serving sizes and similar planning settings.
• Usage & content — recipes you swipe on (like/reject), meal plans, saved recipes, shopping lists, and any recipes you submit — including photos you upload or recipes you send in by email.
• Partner connections — if you connect a cooking partner via a PIN, we link your accounts so you can plan together and see each other's meal decisions.
• Payment references — if you subscribe to PlateDate Plus, our payment provider (Stripe) handles your card details. We only store references such as your Stripe customer and subscription IDs and your subscription status — we never see or store your full card number.

3. How and why we use it

We use your data to provide and operate the app (create your account, build and save meal plans, generate shopping lists, process submitted recipes, enable partner mode), to send you service emails, to take payment for PlateDate Plus, and to keep the app secure and improve it. Our lawful bases are:

• Performance of a contract — to give you the service you sign up for, including subscriptions.
• Legitimate interests — to keep the app secure, prevent abuse, and understand aggregate usage.
• Consent — where required, e.g. for optional emails; you can withdraw consent at any time.

4. Service providers who process your data

We share data with a small number of trusted providers who process it on our behalf:

• Supabase — database, authentication, file storage and hosting of your app data.
• Stripe — subscription payments and billing.
• OpenAI — automated processing of recipe text and uploaded recipe images (e.g. reading a recipe from a photo, tidying shopping lists). Recipe content you submit may be sent to OpenAI for this purpose.
• Postmark — sending service emails: sign‑in codes, welcome and account emails, partner invites, plan reminders, recipe status updates and meal‑plan PDFs.
• Cloudflare — hosting and cookieless, privacy‑friendly analytics.
• jsDelivr / cdnjs — content delivery networks that serve some app code (e.g. the database client and PDF export libraries).

We do not sell your personal data, and we don't use it for third‑party advertising.

5. International transfers

Some of our providers (such as Stripe, OpenAI and Postmark) are based outside the UK, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards recognised under UK data protection law (such as the UK International Data Transfer Agreement or equivalent standard contractual clauses).

6. How long we keep it

We keep your personal data for as long as your account is active. If you delete your account, we erase your data as described below. We may keep limited records where we're legally required to (for example, payment records for tax purposes).

7. Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to: access your data; correct inaccurate data; erase your data; restrict or object to processing; data portability; and withdraw consent. To exercise any of these, email hello@platedate.date. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.

8. Deleting your account

You can delete your account at any time from within the app (Profile → Settings). This permanently erases your profile, history, saved recipes, plans and partner connections across our systems, and cancels any active Stripe subscription, in line with your right to erasure.

9. Cookies & local storage

We don't use tracking or advertising cookies. To make the app work, we store an authentication session and a few functional preferences in your browser's local storage. Our analytics (Cloudflare Web Analytics) are cookieless.

10. Children

PlateDate is not directed at children under 16, and we don't knowingly collect their data. If you believe a child has provided us with personal data, please contact us and we'll remove it.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "last updated" date above and, where appropriate, notify you in the app.

12. Contact

For any privacy question or request, email hello@platedate.date.