Plated Privacy Policy

Last updated October 23, 2026

Plated is a food, training and activity tracker. Your logs live on your iPhone and in your own iCloud account. Plated has no accounts, shows no ads and does not sell or share your data for advertising. This page lists every place data goes.

On your devices and in your iCloud

• Your logs (food, workouts, weigh-ins, climbing, your split, settings) are stored on your iPhone and synced through your private iCloud database. Plated's developer cannot see them.
• Apple Health: if you allow it, Plated reads your workouts (with their heart rate, distance and energy, and the route of outdoor ones, which it uses only to work out elevation) and your body weight, and saves weigh-ins, food energy and protein, and workouts. What Plated reads from Apple Health stays on that iPhone: it is never stored in iCloud, so each of your devices reads Apple Health for itself. Weigh-ins you type into Plated are your own logs and sync through iCloud like the rest. Health data is never used for advertising or sent to anyone else except as described under AI below, when you ask the AI about your food, weight or training.
• Apple Watch: Plated on your Watch records runs, rides, pool swims and lifts, reading heart rate, distance and energy while you work out, and saves them to Apple Health. If you allow location, it uses GPS during outdoor runs and rides to track elevation and save the route with the workout in Apple Health. Your location isn't sent anywhere else.
• Backups: once setup is finished, Plated saves a backup copy of your logs, settings, notes and split about once a week, and one more just before you restore a backup. They go to iCloud Drive → Plated → Backups (On My iPhone → Plated → Backups if iCloud Drive is off), and the last 5 of each kind are kept. It's on unless you turn it off in Settings → Backup and restore. Copies in iCloud Drive stay if you only delete the app; copies on the iPhone are removed with it. Weigh-ins read from Apple Health, API keys and sign-ins are left out. Backups you export are files you control.
• API keys you add for an AI provider or the USDA database are kept in your iPhone's Keychain and sent only to that provider.

AI features

AI features are optional. What you type or photograph for an AI feature, plus the parts of your logs the feature needs (for example your recent workouts when you ask about your training), is sent to the AI you chose:

• Your own provider: you can connect your own Anthropic (Claude, with an API key), OpenAI (ChatGPT, with your ChatGPT sign-in) or Google (Gemini, with an API key) account. Before anything is sent, Plated asks you, naming the company and listing what it will receive. It asks once for each provider, again if what is sent changes, and again on a new device. Requests then go straight from your iPhone to that company under your agreement with them. Plated's developer never sees them. When an AI food estimate looks a food up, the food's name is also searched at USDA FoodData Central (with your own USDA key if you chose to use one, otherwise Plated's shared key). Google's free Gemini tier lets Google use and review requests to improve its products, so with a Gemini key Plated leaves weigh-ins and workouts read from Apple Health out of Ask AI and its lookups unless you turn on “My key has billing” (you tell Plated; it can't check). Everything else the feature needs, such as your typed logs, notes and photos, is still sent. With billing, Google's paid terms apply and it doesn't use requests that way. Anthropic's and Google's API terms are for people 18 or older.
• Plated's built-in AI (during setup, and the free daily allowance if you leave it on in setup or turn it on in Settings → AI, used only when you haven't connected an AI of your own): only after you agree, requests go through Plated's server to Anthropic, which provides Claude. The app sends only what the feature needs (during setup: your goal, body details such as age, height and weight, and your answers, the notes you write about yourself, which may mention injuries or health, the activities and foods you pick, a training program you paste in, photos of meals you choose to take, and your current split; afterwards: the foods you describe, and your Ask AI questions with a summary of your recent data, including weigh-ins and workouts read from Apple Health, your About you notes and your targets, your settings, the earlier messages in that chat, and any days it looks up). The instructions given to the AI are written by Plated's server, not by the app. The server does not store what you send; it keeps only an anonymous ID for your install and counts of how many requests and how much AI cost it has used, so it can enforce the free limits. Google's cloud logs record standard technical details of each request, such as the IP address and time, for up to 30 days, but never what you send. Firebase Hosting likewise receives your IP address when the app downloads the exercise library or you load this site. Anthropic processes these requests for Plated under its commercial terms: it doesn't train its models on them, normally deletes them within 30 days, and can keep a request flagged for breaking its usage policy for up to 2 years, and the safety classification scores for such requests for up to 7 years.
• Apple DeviceCheck (built-in AI only): the app sends a one-time token from Apple with built-in AI requests, and the server checks it with Apple once per install, so it can tell requests come from a real iPhone. If you use up the setup allowance, Plated's server asks Apple to keep one yes-or-no mark for your iPhone, meaning "this phone has used its setup allowance", so reinstalling doesn't give a new one. The free daily AI reads the mark but is never blocked by it. The token doesn't identify you, and Apple doesn't tell Plated who you are or which iPhone it is.
• Apple's on-device model, where available, runs on your iPhone and sends nothing.

Services Plated uses

• Firebase (Google): Remote Config, to tell the app about updates and switch features on or off; Crashlytics, which sends crash reports and session details with device and app details (no logs or health data); Authentication, which gives your install an anonymous ID; App Check, which attaches an Apple App Attest token to requests to Plated's server so they can be verified as coming from the real app; Cloud Functions and Firestore, which run the built-in AI and its usage counters; Hosting, from which the app downloads its exercise library. Firebase also gives the app an installation ID, which crash reports and Remote Config use. Erase everything asks Firebase to delete it (a new one is made the next time the app needs it). Google processes this data for Plated as a data processor. Plated shares your data only with the services listed on this page; Anthropic (for the built-in AI) and Google (Firebase) handle it only to provide Plated's features, under terms that give it at least the protection described here, and Plated doesn't sell it or use it for advertising or tracking.
• USDA FoodData Central receives the food names you search for.
• Open Food Facts receives the barcodes you scan and the food names you search for.

These services, and the AI providers above, may process data in the United States and other countries where they operate, under their own privacy terms.

How long data is kept, and deleting it

• On your devices and in iCloud: your logs stay until you delete them. Settings → Advanced → Erase everything deletes them from this iPhone and, when iCloud is on, from your other devices, along with your settings, your split, saved API keys and the ChatGPT sign-in, and the backup copies Plated saved on this iPhone and in iCloud Drive (if iCloud Drive is off when you erase, its copies stay; delete them in the Files app). You can also delete what Plated saved to Apple Health. When it's done, Plated says if anything couldn't be deleted.
• On Plated's server: Erase everything also deletes your install's anonymous ID and its usage counters from Plated's server (these exist only if you used the built-in AI). Plated tells you when that's done. If it can't be done straight away, Plated tries again each time it opens and tells you when it finishes; having no connection never stops it trying. If the server turns the request down five times (counted at least an hour apart; a busy server or a failed App Check doesn't count), or it still hasn't worked a week after the first failure, Plated stops trying and tells you, showing the anonymous ID so you can email us to delete it. Either way, including if you delete the app first, the server deletes any anonymous ID that hasn't been used for 90 days, with its counters, and usage counters are deleted about 90 days after they last changed. The anonymous ID is a random ID with no name or contact details.
• Held by others: requests you sent to an AI provider, USDA or Open Food Facts are kept by them under their own terms. Erase everything can't delete those; ask the company.
• Kept after deleting: a daily total of what the built-in AI cost across everyone, which isn't linked to you or your install (deleted after 90 days), Apple's yes-or-no DeviceCheck mark for your iPhone if you used up the setup allowance, described above, which Apple keeps so that reinstalling doesn't give a new one, Firebase App Check's record that your install passed Apple's check (an App Attest key ID, with no name or contact details), and crash reports already sent (kept 90 days).
• Crash reports are kept by Firebase Crashlytics for 90 days.
• Deleting the app removes its data from your iPhone, except API keys and sign-ins in the Keychain, which iOS can keep after the app is deleted; use Erase everything, or remove them in Settings → AI, before deleting the app. Data in your iCloud can be removed in iOS Settings → your name → iCloud → Manage Storage.

Your choices

• You can use Plated without any AI. You can turn the built-in AI off or remove your own keys in Settings → AI.
• You can revoke Apple Health access in the Health app, and stop iCloud sync in iOS Settings.
• You can turn off crash reports in Settings → Advanced → Share crash reports. That stops Crashlytics; Remote Config and sign-in still receive standard device details (iOS version, language, country, time zone) and the installation ID when the app uses them.
• To withdraw your consent for an AI provider, remove its key or sign out in Settings → AI; Plated asks again if you reconnect. Location for the Watch can be turned off in iOS Settings → Privacy & Security → Location Services.
• Plated is not intended for children under 13.

Health information

Plated is a tracking tool, not medical advice. The calorie, protein and weight targets it suggests, and everything the AI says, are general estimates that can be wrong. Check with a doctor before big changes to diet or training, especially if you have a health condition, are pregnant or are under 18. Plated warns about, but doesn't stop, calorie targets under 1,200 a day (1,500 for men) and weight loss faster than about 1% of body weight a week.

Changes and questions

If this policy changes, the date at the top changes too. For questions, email support@platedtracker.com or visit https://platedtracker.com/support.

Noah Wilder, who publishes Plated from Canada, is responsible for how it handles your personal information. Contact him at support@platedtracker.com for any privacy question, access, correction or deletion request, or complaint; you'll get a reply within 30 days. Your data lives on your devices, so you can see it, export it (Settings → Backup and restore) and delete it yourself in Settings. Plated's server can't tie its anonymous ID to a person, so to delete that, use Erase everything. For anything else, email us.