Consumer Health Data Privacy Policy
We do not sell consumer health data, and we do not share it with third parties. Only our processors (service providers that act on our instructions) receive it. Two of them receive your meal photos and descriptions for AI estimates, only with your separate consent: Google's Gemini API, and, only when Google's service fails or is unavailable, the OpenAI API (Section 3). We have no affiliates that receive it, and we do not use geofencing around healthcare locations.
1. Consumer health data we collect
| Category | What it is | Why we collect and use it |
|---|---|---|
| GLP-1 medication status | Using now, starting soon, or finished or tapering | To keep suggestions suitable for your stage (for example, gentler, smaller options) |
| Medication name (optional) | Free text you type, if any | Shown back to you, and printed on a visit summary only if you create one. We never use it to calculate or suggest doses. |
| Medication day (optional) | Day of the week you take it | Shown back to you as a reminder of your own routine, and printed on a visit summary only if you create one |
| Symptom check-ins | Nausea, Constipation, Full fast, or Feeling OK, one per day | To adjust which no-cook foods we suggest that day, and to include in your export |
| Body measurements and goals | Weight (with the date of each entry), unit, and protein goal (calculated from weight or set by you) | To show your daily protein goal and minimum line, and your weight trend |
| Food and nutrition logs | Meals you save, estimated nutrients, times; daily water you log; foods you would rather skip; foods you save as safe foods (up to 3) | To track progress toward your goal, avoid foods you skip, and offer your own saved foods |
| Visit summary (on your phone) | A PDF built on your phone from your logs, including any medication name and medication day you entered; shared only when you choose | To help you talk with your healthcare provider. We do not receive it. |
| Meal photos and descriptions (Premium) | Photos or text you submit for an AI estimate, with camera metadata removed | To estimate the food and nutrition. Photos are not stored by us. |
Subscription records. To confirm Premium, we also keep your subscription plan, status, expiration date, and store transaction IDs or purchase token, which we receive from Apple or Google Play. This is not information about your health, but because PetitePlate is an app for people using GLP-1 medicines, we protect it the same way: it is used only to provide Premium, stored with your account in the United States, never sold or shared, and deleted when you delete your account. Details are in the Privacy Policy.
We do not collect diagnoses, prescriptions, doses, lab results, reproductive or sexual health data, precise location, biometric data, or genetic data, and we do not connect to Apple Health or Android Health Connect.
2. Sources
All consumer health data comes directly from you, through what you enter in the app. Nutrition estimates come from an AI service (Google's Gemini API, or the OpenAI API as a backup), which identifies foods from the photo or text you submit, and from public food databases built into the app (USDA FoodData Central and Health Canada's Canadian Nutrient File 2015). Those databases are matched on your device; nothing about you is sent to USDA or Health Canada. We do not buy health data or receive it from other companies.
3. Who receives consumer health data
Processors (act only on our instructions)
- Google LLC: Cloud Firestore (database storage, United States multi-region), Firebase Authentication, and Cloud Functions (our server code in the United States, which passes meal photos and descriptions to OpenAI when the backup is used, without saving or logging them).
- Google LLC, Gemini API through Firebase AI Logic (paid tier): receives the meal photos and descriptions you submit for AI estimates, and nothing else (not your medication information, check-ins, weight, name, or email), and only if you give the separate consent in Section 4. We pay for this service. Under Google's terms for paid services, Google does not use this content or the responses to improve its products, processes it under its data processing terms, and keeps it for up to 55 days only to detect and prevent misuse and for disclosures required by law. During that time, authorized Google staff may review content that Google's systems flag as possible misuse. See the Gemini API Additional Terms of Service and the Gemini API abuse monitoring policy.
- OpenAI OpCo, LLC, OpenAI API (backup): used only when Google's service fails or is unavailable. A request that Google's safety filters block is not sent to OpenAI. It receives the same meal photo or description, and nothing else, and only with the same separate consent in Section 4. We pay for this service. Under OpenAI's terms for business use, OpenAI processes this content for us under its data processing addendum, does not use it or the responses to train or improve its models, and keeps it for up to 30 days only to detect and prevent misuse (longer only if the law requires it or it is needed to prevent harm). During that time, authorized OpenAI staff may review content that its systems flag as possible misuse. See the OpenAI API data controls and the OpenAI Data Processing Addendum.
Third parties
None. We do not share consumer health data with any third party for its own purposes.
Affiliates: none. If you ask, we will give you a list of the processors and third parties that received your data and how to contact them.
4. Your consent
Before PetitePlate collects any consumer health data, the app shows a separate consent screen, apart from our Terms of Use and Privacy Policy, that explains what we collect and links to this policy. A separate, optional consent covers sending meal photos and descriptions to our AI providers (Google, or OpenAI as a backup) for AI estimates. We record the date, time, and version of each consent. Neither box is pre-checked.
All health fields except your GLP-1 status are optional. If you do not consent to sending content to our AI providers, you can still log meals by hand. If we change the wording of a consent, we may ask you to confirm it again. We will ask for your consent again before collecting or sharing consumer health data for any purpose not described here, and we will never sell it without a signed authorization that meets the requirements of the law.
You can withdraw consent at any time by deleting your account in the app (Settings → Delete account) or by emailing us. After you withdraw, we stop collecting or sharing the data covered by that consent. Content already sent for AI estimates is kept by Google for up to 55 days, and by OpenAI (if it was used) for up to 30 days, for misuse monitoring and then deleted; we cannot delete it earlier.
5. Your rights
You have the right to:
- Confirm whether we collect, share, or sell your consumer health data (we do not sell it);
- Access your consumer health data, including a list of the processors and third parties that received it and how to contact them;
- Withdraw consent to collection and sharing;
- Delete your consumer health data. When you delete, we delete it from our database and from your device, tell our processors about your deletion request, and do not keep it in backups (we do not keep database backups). Google (up to 55 days) and OpenAI (up to 30 days) keep content already sent for AI estimates for misuse monitoring and then delete it; and
- Not be discriminated against for exercising these rights.
6. How to exercise your rights
- In the app: Settings → Export my data (CSV) for your meals and check-ins, or Settings → Delete account to delete everything.
- By email: support@macro-logic.com. Tell us which right you want to use, your sign-in method (Apple or Google), and the email on that account.
We will verify your request by matching it to your account, and respond within 45 days. If we need more time, we will tell you why, and we may extend once by up to 45 more days. Requests are free, up to twice a year.
7. Appeals
If we decline to act on your request, we will tell you why. You can appeal by replying with "Appeal" in the subject line within a reasonable time. We will respond in writing within 45 days with our decision and the reasons for it. If your appeal is denied, you may contact your state attorney general, for example the Washington State Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.
8. Security and access
Consumer health data is encrypted in transit and at rest and stored in the United States. Database rules let only your signed-in account read or write it. Within Macro Logic, access is limited to the people who need it to operate and support PetitePlate; our team accesses it from Japan.
9. Changes
We will post changes here. If we want to collect, use, or share consumer health data in a way that is not described in this policy, we will ask for your consent first.
10. Contact
Macro Logic G.K. (Macro Logic LLC; Macro Logic合同会社)
Wind Ebisu Bldg. 8F, 2-4-8 Ebisu-Nishi, Shibuya-ku, Tokyo 150-0021, Japan
Email: support@macro-logic.com