Privacy Policy

Who we are

Calmplate is a meal-planning app that helps you decide what to eat with the food you already have. This policy explains what we store, why we store it, and how you can get rid of it. Questions? Use Settings → Contact support in the app.

Who is responsible for your data

Calmplate is currently developed and operated by its founders, who are jointly responsible for the personal data described in this policy. Calmplate is not operated by a company or other legal entity at this time.

For privacy questions or data-subject requests, write to calmplatesupport@gmail.com or use Settings → Contact support in the app.

Account information

Accounts are created and signed in through our authentication provider (Lovable Cloud/Supabase Auth) with either an email address and password, or a Google sign-in. We store your email address and the account identifier that the provider gives us, together with the profile you fill in: username, display name, optional bio, optional avatar image, and your profile-privacy setting. We do not ask for payment card details, precise location, contacts or health records.

Your profile record deliberately holds nothing about diets, allergies, dislikes, budget or cooking ability. Those preferences live only in your own personal data, which no other account can read. Profile details are also only reachable by signed-in accounts, and only within the limits of your profile-privacy setting.

Fridge, freezer and pantry

The food you add — item names, categories, quantities, storage location, brands, package sizes, barcodes, expiry dates, notes and item photos where a scan produced one — is stored on your account so the app can show your inventory, warn you about food about to expire, and build plans and grocery lists around what you already have. If you are in a household, these items belong to the household and are visible to its members.

Meal planning and preferences

We store your weekly plan, saved and custom meals, grocery lists, cooking history, streaks, taste feedback, and the preferences you set (servings, dietary goals, disliked foods, cuisines, cooking skill, budget, language, units). These are used to generate and personalise plans, estimate costs and keep everything in sync between your devices.

Photos and camera

When you scan your fridge, a receipt, an expiry date, a barcode label or a meal, the photo is sent to our AI provider for recognition and the result is returned to the app. Calmplate does not save those photos to our database or storage: they are held in memory for the duration of the request and discarded afterwards. Profile pictures are different — they are stored in a private storage bucket, served through short-lived signed links, checked by automated image moderation, and deleted with your account. Screenshots you choose to attach to a support message are sent with that email. Food photos are analysed only to recognise food, groceries, meals, packaging dates and receipts; we do not use them to infer medical conditions, health status or other sensitive characteristics.

Voice and microphone

Voice commands use the speech recognition built into your browser or device (the Web Speech API). Calmplate itself does not capture, receive or store raw microphone audio — only the text transcript reaches the app. Depending on your browser and device, that speech recognition may be performed by your device's operating system or by your browser vendor's own service under their privacy terms; that step is outside our control.

Transcripts are used to work out what you asked for. Simple commands are matched on your device; when a command needs AI parsing, the transcript text is sent to our AI provider. Your recent voice history is kept only in your browser's local storage on that device — it is excluded from cloud synchronisation and is not stored in our database — and you can wipe it any time with Clear voice history in Settings. Parsed item names are not written to our server logs.

What we send to the AI provider

Meal generation, photo and receipt recognition, expiry reading, price estimates, translations, voice-command parsing and content moderation run through the Lovable AI Gateway, which routes requests to Google Gemini models. Depending on the feature, the request includes the photo or text you submitted, the meal, ingredient or grocery lines involved, and the relevant preferences (servings, diet, dislikes, budget, language). We do not send your email address, username or account identifier. We do not have documented retention terms for the AI provider to publish here, so we do not claim that AI requests are never retained; the gateway and model provider process the data under their own terms.

AI cache

To save time and cost, results from a small set of generic endpoints — recipe details for a named dish, translations of text you gave us, and supermarket price estimates for a generic grocery line — are stored in a shared cache keyed by a hash of the request. The cache contains no user id and no personalised content, and entries expire after 30 days, after which they are purged automatically. Personalised endpoints (your weekly plan, day generation, panic meals, pantry ideas, taste cards, meal-photo recognition, receipt and expiry scans) bypass the shared cache entirely, so nothing derived from your profile, inventory or free text is ever reused for another user.

Why we store it

To run the features you use: generating plans, keeping your inventory in sync across your devices, sharing with friends and households, moderating content, preventing abuse of the referral programme, and answering support requests. We do not sell your data and we do not use it for third-party advertising.

Who processes data for us

• Lovable Cloud (Supabase) — authentication, database, file storage and application infrastructure. Platform and security logs are handled according to the provider's own documentation; we don't set or publish a retention period for them.
• Cloudflare — the edge network our server code and API routes run on, which also handles request routing and basic protection. Infrastructure and security logs are processed according to Cloudflare's applicable documentation and policies.
• Lovable AI Gateway (Google Gemini models) — meal generation, photo and receipt recognition, expiry reading, price estimates, translations, voice-command parsing and moderation, as described above.
• Resend — delivery of support emails you choose to send. What is sent: the category, subject and message you wrote, your reply-to email address if you gave one, the app version, the app language, the time you sent it, the number of screenshots and the screenshots you attached, and a short salted one-way support reference derived from your account id. Your internal user id, username, browser user-agent, operating system details, device fingerprint, authentication tokens and session data are not sent. Resend processes the email as our service provider; retention is governed by Resend's applicable terms and privacy documentation rather than by a period we set.
• Open Food Facts — product lookups when you scan a barcode. Only the barcode number is sent; no account information goes with it.

This list reflects the providers actually used in production. It does not claim that any particular data-processing agreement is currently in force between us and these providers.

IP address and rate limits

Requests to our API include your IP address, as with any internet service. It is used transiently to authenticate the request and to apply rate limits (for example, on support messages), and is not written to our database as part of your account data. Our infrastructure providers may process it in their own logs as described above.

Households and friend sharing

Nothing is shared automatically. Your profile-privacy setting controls who can see your profile details: everyone, only friends, or nobody. Meals, ratings and reviews are visible only to the people you deliberately share them with. When you join or create a household, its members can see the shared fridge, freezer, pantry, grocery list, weekly plan and household activity, including which member added, checked off or used an item. Only put information in shared spaces that you are comfortable those people seeing. Leaving a household removes your access to it; the household's shared content stays with the household, and if you were the owner, ownership passes to the longest-standing remaining member (or the household is deleted if you were the only member).

Health information and free-text fields

Calmplate is a meal-planning, grocery and food-inventory app — not a healthcare service. We do not ask for, and have no fields for, medical conditions, diagnoses, medications, medical history, treatment plans, doctor details or health records.

You can freely tell Calmplate about normal food and dietary preferences — vegetarian, vegan, gluten-free, dairy-free, low sugar, high protein, dislikes and allergies — and those are used for meal planning and food safety.

Calmplate has several free-text fields, and they are not all handled the same way. Your bio, your custom meals and your reviews are saved in your account as you write them (custom meals are kept on your device and mirrored to your account). Your "Tell Calmplate" planning notes stay on your device and are sent to the AI provider only while a plan is being generated — they are not stored in your account. Voice transcripts are kept only in your browser's local storage and are never synced to us; the spoken text is sent for interpretation when you use the feature and is not stored on our side afterwards. Support messages are emailed to us through our email provider rather than saved in the app database. Text that goes through automated moderation is not retained in raw form when it is approved — we keep only the decision, the type of content and its length.

Content is sent to our AI provider only when the feature you used requires it. Because these fields are open, please avoid entering medical or other highly sensitive personal details — Calmplate cannot technically prevent you from typing them, and we cannot guarantee that no health-related text ever reaches us or our providers.

Requests that are clearly medical — asking for a diagnosis, a treatment or medication recommendation, or whether a food cures a disease — are not supported. Where we detect them, Calmplate answers with a short note that it is not a medical service, and the medical part of the request is removed before the rest is sent to the AI provider. This detection is best-effort, not a guarantee.

Moderation records

Usernames, display names, bios and avatars pass through automated moderation, and we keep a record of the decision so we can review enforcement and handle reports. For content that was allowed, we no longer store the text itself — only the decision, the subject type and the length of the text in characters. For content that was rejected, a short excerpt of at most 200 characters may be kept so the decision can be reviewed or appealed. Older records that stored more than this were cleaned up. Moderation records are deleted after 180 days unless they are attached to a report that is still open.

Storage on your device

Calmplate keeps a copy of your plan, inventory, preferences and recent voice history in your browser's local storage so the app works quickly, and mirrors everything except voice history to your account so it follows you between devices. Signing out clears that local copy.

Retention and deletion

We retain different categories of data for as long as reasonably necessary to provide the service, meet the purposes described in this policy, maintain security, prevent abuse and comply with legal obligations. Where a specific retention period applies, we describe it below. You can delete your account at any time in Settings → Delete account. When you do, we delete your authentication account, profile and avatar, your synced app data (inventory, plans, grocery lists, saved and custom meals, preferences, taste and streak data), your friendships and friend requests, meals you shared, your ratings and reviews, your household memberships, and your referral records. If you own a household with other members, ownership passes to the longest-standing member; if you are its only member, the household is deleted with it.

Some things do not disappear from everywhere the instant you press delete, and we would rather say so than promise otherwise: content you shared into a household stays with the household, copies may remain in our hosting provider's backups until those roll off on their own schedule, infrastructure and security logs at our providers expire on their schedules, and moderation or abuse records may be kept for their retention period where we need them to enforce our terms or to meet a legal obligation.

Other data expires on its own: shared, non-personal AI cache entries after 30 days, and moderation records after 180 days. Voice history lives only on your device and disappears when you clear it or sign out. Account deletion is also available from within the app without contacting us, which is how you can request erasure at any time.

Your choices

• Edit or clear your profile, inventory and plan at any time in the app.
• Change who can see your profile in profile privacy settings.
• Turn notification categories on or off in notification settings.
• Clear your local voice history in Settings.
• Delete your whole account from Settings.

Children

Calmplate is not intended for children below the minimum age required by the law where they live, and at a minimum not for children under 13. We do not knowingly create accounts for them. If you believe a child has an account, contact support.

Changes

If we change this policy we update the version number and date above. For meaningful changes we also tell you in the app and summarise what changed.