PlateGlance Privacy Policy
Effective date: October 21, 2026
PlateGlance is a product of VoidInWorks LLC ("we", "us"). Privacy contact: support@plateglance.com.
PlateGlance is an iPhone app that estimates the calories and nutrients in meals from photos, typed descriptions, restaurant menus and barcodes. This policy explains what we collect, where it goes, how long it is kept, and your choices. It covers the PlateGlance app and our server at api.plateglance.com. The app is offered in the United States to adults 18 and over.
The short version
- No account. Your food log, goals and body details (age, sex, height, weight, activity, goal) stay on your phone. We do not receive them.
- When you scan a meal, scan a menu or type a meal, and only after you allow it, the photo or text goes through our server to our AI provider, currently Anthropic, to get an estimate. We do not store the photo, the text or the result. Anthropic may keep it for up to 30 days, described below.
- We do not sell your data, show ads, or track you across other apps or sites. There is no analytics software in the app.
- The app does not collect your email address. If we add email features, we will update this policy and ask for your permission in the app first.
- You must be 18 or older.
What we collect and why
Kept on your phone only
- Your food log, saved meals, goals, profile (age, sex, height, weight, activity, goal), learned portions and exercise entries.
- Your answer to "Where did you hear about us?", if you gave one. It is also sent to RevenueCat (see below).
- Meal photos you log. They are kept on your phone for 30 days, then deleted automatically the next time you open the app. The meal entry itself stays until you delete it. Deleting a meal deletes its photo.
- A random app ID, created on your phone and also saved in the iOS Keychain. The Keychain usually keeps it even if you delete and reinstall the app. It is used to count free scans, apply daily limits and connect your subscription. It is not your name or Apple ID, and we cannot tell who you are from it.
Sent to our server, and on to Anthropic, when you ask for an estimate
- Meal scan: your photo, resized before upload (the full-size original is not sent), plus up to 500 characters if you type a description or correction, plus the names of up to 40 foods you have logged before, so the AI can reuse your usual names.
- Typed meal: your description and the same list of food names.
- Menu Mode: a photo of a menu, how many calories and how much protein you have left today, and anything you type in the optional "anything to avoid" box (up to 200 characters).
- Our server forwards this to Anthropic and returns the result to your phone. We do not save the photo, the text or the result.
- Photos can contain things you did not mean to include (people, documents, locations). Please frame only your food or menu.
Kept on our server (hosted on Cloudflare)
- Scan counters tied to your random app ID. The free-scan counter has no end date, so reinstalling cannot reset your free scans. Daily counters expire after about 2 days. For free users, a daily counter is also kept against your IP address, to limit abuse, and it also expires after about 2 days.
- If you are a subscriber, a 5 minute record that you are one, so your scans do not wait on a lookup. We also keep a record of recent subscription events for about 7 days, so we handle each event once.
- If your free trial ends without a purchase, a one-time marker for a 48 hour offer. It has no end date.
- Short-term rate-limit counters, and technical logs from Cloudflare (such as time, route and result), kept for a short period set by Cloudflare. We also log the number of AI tokens and the estimated cost of each scan. These logs do not contain your photos, meals or app ID.
Subscriptions
- Apple handles payment. We never see your card or Apple ID.
- RevenueCat, our subscription provider, receives your random app ID, your purchase and trial status, and, if you answered it, where you heard about us. Its software in the app also receives standard device and network information under RevenueCat's own policy. Our server asks RevenueCat whether your app ID has an active subscription, and RevenueCat tells our server when a free trial ends.
Barcodes
- When you scan a barcode, your phone asks Open Food Facts (a free, open food database) for that product directly. Open Food Facts receives the barcode number, your IP address and the app name. This request does not go through our server and we do not see it.
Permissions
- Camera and photo library, only to take or choose meal, menu and barcode photos.
- Notifications, only if you allow them, to remind you the day before a free trial ends. The reminder is created on your phone.
Who receives data
| Service provider | What they get | Why |
|---|---|---|
| Anthropic | Photos, typed meal text, food names, menu details you send for an estimate | AI estimates |
| Cloudflare | Requests to our server (including your IP address), counters, logs | Hosting |
| RevenueCat | App ID, purchase status, where you heard about us, device and network information | Subscriptions |
| Apple | Purchase and payment data | Payments, app distribution |
| Open Food Facts | Barcode, IP address, app name | Product data |
Anthropic's published terms say it deletes inputs and outputs from its systems within 30 days of receipt, except where the law requires longer, where we agree otherwise, or to enforce its usage policies, and that it does not use inputs or outputs from its commercial products, including the API, to train its models. These are Anthropic's terms, we last checked them in October 2026, and they can change. See privacy.claude.com.
Each provider handles data under its own terms. We may also disclose information if the law requires it, or in a sale or reorganization of our business.
Barcode data in PlateGlance comes from Open Food Facts (openfoodfacts.org) and is available under the Open Database License.
What we do not do
- No advertising IDs, no ad tracking, no cross-app tracking, and no selling your data or sharing it for advertising.
- We do not use your health, fitness or nutrition data for advertising or data mining.
- We do not build profiles from your food log. It stays on your phone.
Consumer health data
This section is our Consumer Health Data Privacy Policy (Washington and similar laws). Some of what you give the app is health-related: body details, goals, meal contents and photos. Here is how it is handled.
- Collected and why: meal photos, typed meals and menu photos, only when you ask for an estimate, and only with your permission. Body details, goals and your log are collected by the app on your phone only. We do not receive them.
- Source: you.
- Shared with: Anthropic (our AI provider), only the photo or text you submit for an estimate, to produce your estimate. We do not sell consumer health data.
- Your rights: see below. You can withdraw permission any time in Settings > AI estimates, and ask us to delete what we hold.
How long we keep data
- On your phone: until you delete it (Settings > Delete everything) or delete the app. Meal photos: 30 days.
- Anthropic: up to 30 days, per its terms above.
- Our server: as listed above. Items marked "no end date" stay until you ask us to delete them.
- RevenueCat and Apple: under their own policies. Purchase records may be kept for tax and legal reasons.
Your choices and rights
- Delete from your phone: Settings > Delete everything. This erases your log, photos, saved meals, learned foods, profile and your "where did you hear about us" answer from this phone, and turns AI estimates back off. It keeps your app ID and subscription state so your free-scan count and subscription are not reset.
- Export: Settings > Export my data.
- Delete what we hold on our server, or see it: email support@plateglance.com with the support code shown in Settings > Your data. We will delete the server-side records tied to that app ID (scan counters, the win-back marker and any cached subscription records) and ask RevenueCat to delete its record. If we delete your scan counters, your free scans may reset. We answer within 45 days (we may extend once by another 45 days, and we will tell you).
- Withdraw permission for AI processing: turn off Settings > AI estimates. AI scans then stop working, but barcode, saved meals and manual entry still do.
- Depending on where you live (for example Washington, California or Minnesota), you may have the right to access, correct and delete your personal information, to withdraw consent, and to not be treated differently for using these rights. We offer these rights to everyone. If we refuse a request, you can appeal by replying to our answer, and we will respond within 45 days.
- Cancel your subscription in your Apple account settings (iPhone Settings > your name > Subscriptions). Deleting the app does not cancel it.
Security
Data between the app and our server is sent over HTTPS. Access to our server settings is limited and protected with secrets kept out of the app. No system is perfectly secure, and we cannot guarantee absolute security.
Where data is processed
We are in the United States. Our providers may process data in the United States and other countries.
Children
PlateGlance is for adults 18 and over. The app asks your age and does not let anyone under 18 continue. We do not knowingly collect data from anyone under 18. If you think a child has used the app, email us and we will delete what we can.
Not medical advice
PlateGlance gives estimates for everyday tracking. See our Terms of Use.
Changes
If we change this policy, we will update the effective date above. For changes that matter, we will tell you in the app before they apply.
Contact
VoidInWorks LLC
support@plateglance.com