Privacy Policy
Some of the information you enter, such as your GLP-1 medication status, medication name, and symptom check-ins, is health-related. Our Consumer Health Data Privacy Policy explains how we handle it and your rights under laws such as Washington's My Health My Data Act and Nevada's consumer health data law. It is part of this Privacy Policy.
1. Who we are
PetitePlate is provided by Macro Logic G.K. (Macro Logic LLC; in Japanese, Macro Logic合同会社), a company organized in Japan ("Macro Logic," "we," "us"), Wind Ebisu Bldg. 8F, 2-4-8 Ebisu-Nishi, Shibuya-ku, Tokyo 150-0021, Japan. This policy covers the PetitePlate app for iOS and Android and this website. PetitePlate is offered only in the United States and is intended for adults 18 and older.
PetitePlate is a wellness and food-logging tool. We are not a healthcare provider or a health plan, and PetitePlate is not a medical device. Information you enter in PetitePlate is generally not protected health information under HIPAA, which is why we describe our own commitments here.
2. Information we collect
Information you give us
- Sign-in. You sign in with Apple (on iPhone) or Google. Our sign-in service, Google Firebase Authentication, receives a unique account ID and the email address (and name, if you allow it) that Apple or Google provides, and keeps them as part of your sign-in record. We do not copy your email or name into the app's database. With Sign in with Apple you may choose "Hide My Email," in which case only an Apple relay address is shared.
- Profile. Your GLP-1 medication status (using now, starting soon, or finished or tapering); an optional medication name you type; an optional day of the week you take it; foods you would rather skip; your weight and preferred unit; and an optional protein goal you set. PetitePlate never asks for, stores, or calculates medication doses.
- Logs. Meals you save (food names, estimated amounts, protein, calories, fat, carbohydrates, fiber, and salt, and the time you logged them); daily check-ins you choose to record (Nausea, Constipation, Full fast, or Feeling OK); the weight entries you record, with their dates, so you can see your trend; the water you log each day; and the foods you save as "safe foods" (up to 3, each with a name, protein amount, and where it came from).
- Meal photos and descriptions you submit for an AI estimate (Premium). See Section 5.
- Messages to us. If you email us, we keep the email and our reply.
Information created when you use the app
- Consent records. The date, time, and version of your consent to the collection of health information, and the dates and times you accepted our Terms of Use and this Privacy Policy.
- Subscription records. Apple (App Store, on iPhone) or Google (Google Play, on Android) processes all payments. We never receive your card or billing details. To confirm your Premium access, our servers receive information about your subscription directly from Apple (App Store Server API and App Store Server Notifications) or Google Play (Google Play Developer API and real-time developer notifications), and we save it with your account: the plan (monthly or yearly), whether it is active, in a free trial, canceled, refunded, or expired, the expiration date, whether it is a test (sandbox) or real purchase, and the store's transaction IDs (Apple) or purchase token (Google Play) that identify the subscription. When you buy, the app also gives Apple or Google Play a random-looking account code made from your PetitePlate account ID (not your name or email), so the store's records can be matched to your account. We use this only to turn Premium on or off, to restore it on a new device, and to prevent fraud. The app also checks your purchase on your device with Apple or Google Play.
- Technical information. To keep the service working and protect it from abuse, our providers process an app-instance identifier, an app-integrity token from Apple (App Attest) on iPhone or from Google (Play Integrity) on Android, your IP address, device and operating-system type, and app version. We use these to deliver app settings, verify that requests come from the genuine app, and keep sign-in secure.
Information stored only on your device
The app keeps a copy of your profile and today's check-in on your phone so it works smoothly. If you export your data, the CSV file is created on your device and is shared only if you copy or send it yourself. These copies are removed from the device when you delete your account in the app.
Gentle reminders (optional). If you turn on Gentle reminders, the times you choose are saved on your phone, and your phone shows the reminders as local notifications. They are off by default. We ask for your phone's notification permission only when you turn a reminder on. The reminder text comes from a fixed list built into the app. Reminders are created and shown on your device. We do not send them from our servers, and we do not receive your reminder times. You can turn reminders off in Settings → Gentle reminders or in your phone's notification settings. Reminders are removed from your phone when you sign out or delete your account.
Visit summary (PDF). If you create a visit summary, the PDF is built on your phone from the data already in your account, including any medication name and medication day you chose to enter. We do not receive it. It is shared only if you choose to share it, using your phone's share sheet, and you pick where it goes (for example, your provider). Once you share it, the other person or app handles it under its own rules. The temporary copy the app makes for sharing is deleted from your phone shortly after you share it.
3. What we do not collect
- No advertising, no ad identifiers, and no tracking across other companies' apps or websites.
- No analytics or crash-reporting SDKs.
- No precise location, contacts, or microphone recordings. Location and other camera metadata are removed from photos on your device before they are sent for an AI estimate. (You can dictate text with your phone's keyboard; that is handled by your keyboard provider, such as Apple or Google, and we only receive the text.)
- No data from Apple Health or Health Connect. PetitePlate does not connect to Apple Health or Android Health Connect.
- No medication doses, prescriptions, or medical records.
- No payment card information.
4. How we use information
- To provide the app: show your protein goal and daily "minimum line," save your meals and check-ins and show them back to you in your history, suggest no-cook foods that avoid the foods you skip, and let you export your data.
- To show your weight trend and, if you ask for it, build a visit summary on your phone.
- To show Gentle reminders on your phone, if you turn them on (this happens on your device only).
- To offer the foods you saved as safe foods back to you.
- To estimate nutrition from a photo or description you submit (Premium).
- To confirm whether you have an active Premium subscription, using the subscription records described in Section 2.
- To manage your account.
- To keep the service secure, prevent fraud and abuse, and fix problems.
- To respond to you when you contact us.
- To comply with law and enforce our Terms of Use.
We do not use your information for advertising, and we do not use your health-related information to make decisions that produce legal or similarly significant effects about you.
5. AI meal estimates and our AI providers
Please read this before using AI estimates. When you ask for an AI estimate, the meal photo or text description you submit is sent to Google LLC and processed by the Gemini API through Google Firebase AI Logic. Only if Google's service fails or is unavailable, the same photo or description is sent instead, through our server, to OpenAI OpCo, LLC and processed by the OpenAI API, so you still get an estimate. A request that Google's safety filters block is not sent to OpenAI. We pay for both services. Under their terms for paid business use, Google and OpenAI process this content for us under their data processing terms and do not use your submissions or the responses to improve or train their products. They keep it only for a limited time, to detect and prevent misuse of their services and for disclosures required by law: Google for up to 55 days, and OpenAI for up to 30 days (longer only if the law requires it or it is needed to prevent harm). During that time, authorized staff of the provider may review content that its systems flag as possible misuse. See the Gemini API Additional Terms of Service ("Paid Services"), Google's Gemini API abuse monitoring policy, the OpenAI API data controls, and the OpenAI Data Processing Addendum.
- We send only the photo or text you submit, with our instructions to the AI. Your name, email, medication information, weight, and check-ins are not included. Photos are resized, and location and other camera metadata are removed, on your device first.
- When OpenAI is used, the request goes from the app to our server code on Google Cloud in the United States (Iowa region), which passes it to OpenAI and returns the result to the app. Our server does not save or log the photo, the description, or the AI's answer.
- Google and OpenAI act as our service providers for AI estimates. Even so, because meal photos and descriptions can reveal health information, we send them only with your separate consent (see the Consumer Health Data Privacy Policy). If you do not consent, you can still log meals by hand.
- Please do not include people, faces, documents, prescription or medication labels, or any other personal information in photos or descriptions. The AI only needs the food.
- We do not save the photo. Only the food items and estimates you choose to save become part of your log.
- Deleting your PetitePlate account deletes your data from our systems. We cannot delete Google's or OpenAI's short-term misuse-monitoring copy early; they delete it on their own schedules (up to 55 days for Google and 30 days for OpenAI).
- Built-in food databases. When a food the AI identifies matches an entry in the public food databases built into the app (USDA FoodData Central and Health Canada's Canadian Nutrient File 2015), protein and calories are taken from that database. The databases are stored in the app and the matching happens on your device; nothing about you is sent to USDA or Health Canada.
- Nutrition values are estimates from AI and public food databases and can be wrong. They are not medical or dietary advice.
6. When information is disclosed
We do not sell your personal information or your consumer health data, and we do not use or disclose it for targeted or cross-context behavioral advertising. We disclose information only in these cases:
- Service providers (processors) that host and run the app for us under contract and only on our instructions:
- Google (Firebase Authentication, Cloud Firestore database, Cloud Functions for Firebase, Firebase App Check, Remote Config, Firebase Installations, Firebase Hosting, and Cloud Logging).
- Google (Gemini API through Firebase AI Logic, paid tier), for AI estimates, with your consent, as described in Section 5. This covers only the meal photos and descriptions you submit.
- OpenAI (OpenAI API), only when Google's AI service fails or is unavailable, for AI estimates, with the same consent and on the same terms (Section 5). This covers only the meal photos and descriptions you submit.
- Apple (Sign in with Apple, App Store payments and subscription management, App Store Server API and App Store Server Notifications, App Attest), on iPhone.
- Google (Google Play payments and subscription management, Google Play Developer API and real-time developer notifications, Play Integrity), on Android.
- Google Sign-In, if you choose to sign in with Google.
- Legal reasons. If required by law, subpoena, or court order, or when needed to protect someone's safety or our rights. We will tell you about a request for your data when the law allows.
- Business transfer. If Macro Logic is involved in a merger, acquisition, or sale of assets, information may transfer to the successor, which must honor this policy. We will ask for your consent before transferring consumer health data where the law requires it.
- With your direction. For example, when you copy or send your CSV export, or share a visit summary PDF through your phone's share sheet.
We do not share your information with third parties for their own purposes, and we have no affiliates that receive your data.
7. Where data is stored and how it is protected
Your profile, logs, and subscription records are stored in Google Cloud Firestore in Google's United States multi-region location (nam5). The server code that receives subscription information from Apple and Google Play runs on Google Cloud in the United States (Iowa region) and saves the result to that U.S. database. Google and OpenAI may process AI requests in the United States or other countries. Macro Logic is based in Japan, and our team accesses data from Japan when needed to support you or run the service, so your information is transferred to and accessed from Japan.
Data is encrypted in transit (HTTPS/TLS) and at rest by Google. Database rules allow only your signed-in account to read or write your data, and App Check helps block requests that do not come from the genuine app. No method of storage or transmission is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires.
8. How long we keep data
- Profile, logs, and consent records: kept while your account exists, including if you cancel Premium, so you never lose your history. Deleted when you delete your account.
- Subscription records (plan, status, expiration date, test or real purchase, and store transaction IDs or purchase token): kept while your account exists, so Premium can be restored, and deleted when you delete your account. A store notification we cannot match to an account is kept for up to 90 days so we can fix the problem, then deleted automatically. Apple and Google keep their own purchase records under their own policies.
- Sign-in record (account ID, email, and name held by Firebase Authentication): deleted when you delete your account. If you used Sign in with Apple, we also revoke the app's Apple sign-in authorization.
- Meal photos: not stored by us, including on the server that passes requests to OpenAI. Google keeps photos and descriptions submitted for AI estimates for up to 55 days, and OpenAI (if it was used) for up to 30 days, only to check for misuse (Section 5).
- Technical data held by our providers, including our server logs (which record account IDs and shortened store identifiers, never photos, meal descriptions, AI answers, or health information): kept for the limited periods set by those providers for security and operations, generally 30 days for our server logs.
- Emails to us: kept for up to 2 years.
- Backups: we do not keep backups of the app database (point-in-time recovery and scheduled backups are turned off), so data you delete is not kept in backups. Residual copies in our providers' systems are removed on the providers' normal deletion schedules.
9. Your choices and rights
- See and export your data. In the app, go to Settings → Export my data (CSV) to get your meals and check-ins. To get a complete copy of everything we hold about you, including your profile, email us.
- Correct your data. Edit your profile in Settings, or email us.
- Delete your data. In the app, go to Settings → Delete account. This permanently deletes your profile, logs, consent records, and subscription records from our database, clears the copies stored on your device, revokes Sign in with Apple if you used it, and then deletes your sign-in account. You may be asked to sign in once more for security. You can also email us to request deletion. Deleting the app alone does not delete your account. Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your Apple ID settings (iPhone) or in the Google Play Store app → Payments & subscriptions → Subscriptions (Android).
- Withdraw consent. You can withdraw your consent to the collection of health information, or to sending content to our AI providers for AI estimates, at any time by deleting your account or emailing us. After you withdraw, we stop collecting or sending that information.
- No discrimination. We will not charge a different price or provide a lower quality of service because you exercised a privacy right. Some features cannot work without the information they need; for example, AI estimates require sending the photo or description to our AI providers.
Delete your PetitePlate account
You can delete your PetitePlate: GLP-1 Meal Coach account and its data at any time.
- In the app. Go to Settings → Delete account. You may be asked to sign in once more for security. We then delete all of your data from our database and delete your sign-in account. Deletion happens right away.
- If you deleted the app or cannot use it. Email support@macro-logic.com with your sign-in method (Apple or Google) and the email address on that account, or the relay address if you use Hide My Email. We will verify the request and delete your account within 45 days.
- What is deleted. Your profile (including GLP-1 status, medication note and day, weight, foods you skip, and protein goal), meal logs, check-ins, weight entries, safe foods, daily water and nutrition totals, consent records, subscription records (including the store transaction IDs, purchase token, and account code linked to your account), and your sign-in record (account ID, email, and name). If you used Sign in with Apple, we also revoke the app's Apple sign-in authorization. In-app deletion also clears the copies, CSV exports, visit summary PDFs, and reminder settings stored on that phone.
- What we keep. None of your PetitePlate data. We do not keep database backups. The only exceptions are emails you send us, kept for up to 2 years (Section 8), the short-term copies of content sent for AI estimates kept by Google (deleted within 55 days) and OpenAI (deleted within 30 days) (Section 5), and the purchase records Apple and Google keep themselves.
- Subscriptions are separate. Deleting your account does not cancel a subscription. Cancel it in your Apple ID settings (App Store) or in the Google Play Store app → Payments & subscriptions → Subscriptions (Google Play).
How to make a request
Email support@macro-logic.com and tell us your sign-in method (Apple or Google) and the email address on that account, or the relay address if you use Hide My Email. We verify requests by matching them to your account, and may ask you to confirm from inside the app. An authorized agent may submit a request for you with your signed permission; we may still ask you to verify your identity. We respond within 45 days, and if we need more time (up to 45 more days) we will tell you why.
Appeals. If we decline your request, you can appeal by replying with "Appeal" in the subject line. We will respond in writing within 45 days (60 days for Colorado residents), explain our decision, and tell you how to contact your state attorney general if you are not satisfied.
10. California residents
This section is our notice at collection and privacy policy under the California Consumer Privacy Act, as amended (CCPA). In the past 12 months we collected the following categories, from you and your device, for the purposes in Section 4:
| CCPA category | Examples in PetitePlate | Disclosed to |
|---|---|---|
| Identifiers | Account ID, email address and name (sign-in record), app-instance ID, IP address | Service providers |
| Internet or other electronic activity | App integrity checks | Service providers |
| Sensitive personal information: health | GLP-1 status, medication name, medication day, symptom check-ins, weight (with the date of each entry), meal logs, water, safe foods | Service providers |
| Commercial information | Subscription plan, status, expiration date, test or real purchase, store transaction IDs or purchase token, and the account code linking a purchase to your account | Service providers (including Apple and Google Play) |
| Sensitive personal information: account log-in | Sign-in credentials handled by Apple, Google, and Firebase Authentication | Service providers |
| Audio, visual information; food descriptions | Meal photos and text you submit for AI estimates (not stored by us) | Service providers (Google Gemini API, and the OpenAI API as a backup), with your consent (Section 5) |
| Inferences | Your protein goal, calculated from your weight | Service providers |
We do not sell personal information or share it for cross-context behavioral advertising, and we have no actual knowledge of doing so for consumers under 16. We use sensitive personal information only to provide the services you request and for security and other purposes allowed by CCPA regulations. Retention periods are in Section 8.
California residents may request to know what personal information we collected, used, and disclosed; to access a copy; to correct it; and to delete it, using the steps in Section 9. We do not disclose personal information to third parties for their direct marketing (California Civil Code §1798.83).
11. Residents of other U.S. states
Depending on where you live (for example Colorado, Connecticut, Virginia, Texas, Oregon, and other states with consumer privacy laws), you may have rights to confirm whether we process your data, access it, get a portable copy, correct it, delete it, and opt out of sale, targeted advertising, and certain profiling. We do not sell personal data, use it for targeted advertising, or profile you in ways that produce legal or similarly significant effects. We process health-related data only with your consent and only to provide the features you ask for. You can use the steps in Section 9 wherever you live. Washington, Nevada, and Connecticut consumer health data rights are described in our Consumer Health Data Privacy Policy.
12. Children
PetitePlate is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
13. Changes to this policy
We will post any changes on this page and update the "Last updated" date. If a change is material, or if we want to collect, use, or share consumer health data in a new way, we will notify you in the app and ask for your consent before the change applies to you.
14. Contact us
Macro Logic G.K. (Macro Logic LLC; Macro Logic合同会社)
Wind Ebisu Bldg. 8F, 2-4-8 Ebisu-Nishi, Shibuya-ku, Tokyo 150-0021, Japan
Email: support@macro-logic.com