Privacy Policy
Effective date: 14 November 2026
1. Who we are
AI Calorie Tracker: PlateCount (the "App") is published by Cloud Honest LLC, 5830 E 2nd St, Pmb 7000, Casper, WY 82609-4308, US. Cloud Honest LLC is the data controller. You can reach us at hello@cloudhonest.com.
2. What stays on your device
Your food log, weight history, recipes and profile are saved in a database on your iPhone. They stay there unless you turn on iCloud sync (section 7). There is no PlateCount sign-in account. We do not ask for your name or email in the App.
3. AI estimates (only if you allow them)
The first time you use an AI feature, the App asks for your consent. You can turn it off any time in Profile > Privacy and data > Consent and cloud sync. Search, barcode and manual logging work without it.
- Who receives it. Our AI providers are Google Gemini, run through Google Cloud Vertex AI in the EU region (our main provider), and Anthropic (Claude), used as a fallback.
- When it is sent. Only when you scan: when you take a meal photo, record a voice note, or scan a menu. It is sent only after you have given consent, and never in the background.
- What is sent. A meal photo or a voice recording, or the dish names from a menu you scan.
- Where it goes. It passes through our own server, which runs on Google Firebase (Cloud Functions) in the EU, in Belgium. From there a photo or voice recording goes to Google Gemini on Vertex AI in the EU. Dish names from a menu, and a photo that Gemini cannot read or when Gemini is not available, go to Anthropic (Claude) as a fallback. Anthropic may process this data outside the EU, in the United States.
- What is not sent. Your name, your email and any account details. The App has none to send.
- Is it kept? No. We do not keep your photos, recordings or menus. They are used once to make the estimate. Under the business terms we use with Google and Anthropic, they may not train their models on this data.
- Transfers. Because the Anthropic fallback may process data outside the EU, we rely on standard contractual clauses for this transfer.
The App also has a setting to share anonymized corrections to estimates. It is off by default and shares nothing in this version.
4. Our server
To make the free weekly limit work, our server (Google Firebase, EU) keeps an anonymous ID for your device and the times of your recent AI scans. It also receives App Check tokens that show the request comes from the real App. This ID is tied to your install, not to your name or email, and the App has no sign-in account. When you buy PlateCount Plus, the App sends the purchase record that Apple has signed to our server. The server checks it with Apple and then turns Plus on. We never see your card or payment details.
5. Crash reports and usage events (Google Firebase)
- Crash reports (Firebase Crashlytics). On by default. If the App crashes, Google receives the device model, the iOS version and where in the App it failed. A report never includes your food, weight or health data.
- Usage events (Google Analytics for Firebase). Off until you turn on "Product analytics" in Consent. When on, the App sends events such as "a meal was logged by photo" or "onboarding finished". Events never carry food names, amounts or weights. The App does not use the advertising identifier. Google Analytics has no EU-only data location, so Google may process these events outside the EU. You can switch this off again at any time.
6. Apple Health (optional)
If you connect Apple Health, you choose which types to allow. The App can save the calories, protein, carbs and fat you log. It can read your weight, height, body fat, active energy, workouts, and your sex and date of birth to fill in your profile. This happens only between your iPhone and Apple Health. Health data is never sent to us or to our AI providers, never used for advertising or marketing, and never sold. You can change this in the Health app.
7. iCloud sync (optional)
iCloud sync is available in this version. It is off until you turn it on in Profile > Privacy and data > Consent and cloud sync. When you turn it on, your diary is copied to your private iCloud database, which Apple encrypts, so it appears on your other Apple devices and comes back on a new iPhone. It is stored with Apple, not with us, and we cannot access it. No PlateCount sign-in account is needed. When you turn sync off, you can keep or delete the iCloud copy.
8. Barcode look-ups
When a barcode is not in the food database on your iPhone, the App looks it up on Open Food Facts (openfoodfacts.org). Only the barcode number is sent. No name, account or device ID is added, but like any web request, Open Food Facts can see your IP address. See the Open Food Facts privacy policy.
9. Camera, microphone and notifications
The App asks permission before it uses the camera (meal photos and barcodes), the microphone (voice logging), Apple Health and notifications. You can refuse or change each one in iOS Settings. Reminders are created on your iPhone.
10. Summary of data we collect
| Data | Why | Linked to you? | Tracking? |
|---|---|---|---|
| Anonymous user ID | Free scan limit and Plus check (App functionality) | Yes | No |
| Purchase record | Check that Plus is active (App functionality) | Yes | No |
| Scan times (how many AI scans you used) | Free weekly limit (App functionality) | Yes | No |
| Crash data | Fix crashes (App functionality) | Yes | No |
| Usage events, only if you agree | Analytics | Yes | No |
| Meal photos, voice recordings and menu dish names | One AI estimate, sent to Google Gemini (EU) or the Anthropic fallback; not stored (App functionality) | No | No |
"Linked to you" means tied to the anonymous ID of your install. It is not linked to your name or email, because the App has none. Meal photos, voice recordings and menu dish names are used only to make an estimate and are not stored.
11. What we do not do
- No advertising and no ad SDKs.
- No tracking across other apps or websites. We do not use the advertising identifier.
- We do not sell or rent your data.
- We do not use your food or health data to train AI models.
12. Purchases
PlateCount Plus is sold through Apple's In-App Purchase. Apple takes the payment and gives us only sales reports. Apple's privacy policy applies to the purchase: apple.com/legal/privacy.
13. Service providers
| Provider | Purpose | Where |
|---|---|---|
| Google (Firebase: Cloud Functions, Authentication, App Check, Firestore) | Our server, anonymous ID, scan limit, Plus check | EU (Belgium) |
| Google (Vertex AI, Gemini) | Meal photo and voice estimates | EU |
| Anthropic (Claude) | Fallback: menu dish names, and photos Gemini cannot read | May be outside the EU (United States) |
| Google (Crashlytics, Analytics for Firebase) | Crash reports; usage events with your consent | Crashlytics as set by Google; Analytics may be outside the EU |
| Apple (iCloud, Health, StoreKit) | Optional sync, Health, purchases | Apple |
| Open Food Facts | Barcode look-up | Open database; sees only a barcode number and IP address |
14. How long we keep data
Your diary stays on your iPhone until you delete it or delete the App. The anonymous ID and scan times on our server are removed when you use Delete all data. If you were offline, they are removed the next time you are online. Crash reports and analytics events are kept by Google under its own retention rules. We do not keep your photos, recordings or menus.
15. Delete your data
- In the App, open Profile > Privacy and data > Delete all data. This deletes your diary, weight history and profile from your iPhone, and the record on our server.
- If you used iCloud sync, choose to delete the iCloud copy when you turn sync off, or remove it in iOS Settings > Apple ID > iCloud > Manage Storage.
- Data you saved to Apple Health stays in Health until you remove it there.
Deleting your data does not cancel a PlateCount Plus subscription. Cancel that in iOS Settings > Apple ID > Subscriptions.
16. Your rights (GDPR, UK GDPR, CCPA and similar laws)
You can ask to access, correct, export or delete your personal data, to object to or limit how it is used, and to withdraw consent at any time. You can export your diary (including as CSV) and delete all data yourself in the App. For anything else, email us and we will answer within 30 days. Because the App has no sign-in account, we may need your anonymous device ID to find a server record. You may also complain to your local data protection authority.
17. Children
The App is not directed at children under 13, and we do not knowingly collect their data. If you think a child has used it, email us.
18. Changes to this policy
If we change how the App uses data, we will update this page and the date at the top before that version of the App is released.
19. Contact
Cloud Honest LLC · 5830 E 2nd St, Pmb 7000, Casper, WY 82609-4308, US · hello@cloudhonest.com