PicMyPlate is a calorie and nutrition tracker for Android. This policy explains exactly what the app collects, where it goes, and how to get rid of it. It is written to be read, not to be survived.
The short version. If you never create an account, everything you log stays on your phone and we hold nothing about you. If you do create an account, your logged data is copied to our server so you can restore it on another device. Photos you scan are sent to an AI provider to be identified, and so are the names of the dishes you log when you open the AI Insights screen. If you join a family group, the other members can see your daily calorie total, your target and your streak, and you can message each other — but never your weight. We do not sell your data and we do not use it for advertising.
1. Who we are
PicMyPlate is operated by an individual developer based in India. For any privacy question, correction or data request, contact support@picmyplate.app. We aim to respond within 30 days.
2. What the app collects
| Data | Why | Where it goes |
|---|---|---|
| Meals, calories and macros you log | To show your daily totals and history | Your device. Also our server if you sign in. The names of your dishes are also sent to an AI provider when you open AI Insights — see section 4. |
| Weight entries and progress photos | To chart your progress | Your device. If signed in, photos go to a private storage folder only your account can read. |
| Profile: age, sex, height, weight, activity level, dietary preference | To calculate your calorie and macro targets | Your device. Also our server if you sign in. |
| Email address and password | Only if you create an account, so you can sign in again | Our authentication provider (Supabase). Passwords are stored hashed and are never visible to us. |
| Food photos you scan | To identify the food and estimate its nutrition | Sent to an AI provider. See section 4. |
| Exercise calories from Health Connect | Only if you switch it on, to add exercise back to your daily budget | Read on your device only. See section 5. |
| Sleep from Health Connect | Only if you switch it on, to show last night on the Progress screen | Read on your device only. See section 5. |
| Nutrition corrections you make | To fix a wrong value, and to improve the value for everyone | Our server. See section 6. |
| Daily count of AI requests | To enforce fair-use limits and stop abuse | Our server. A per-day number only — never what you scanned. |
| Messages you send in a family group | So your family can talk to each other | Our server, and the other members of that group. Deleted after 90 days. See section 7. |
| Your calorie total for the day, your calorie target and your logging streak | So your family can see how each other's day is going | Our server, and the other members of your family group. Only while you are in one. See section 7. |
| Reactions you leave on another member's day | So they can see who cheered them on | Our server, and the other members of that group. |
| Messages you report, and people you block | To act on abuse, and to stop showing you someone's messages | Our server. A reported message is copied so it survives being deleted. See section 7. |
| A profile photo, if you choose one | So your family can tell each other apart at a glance | A private storage folder. Readable only by people who are in a family with you at the time they look, and by nobody else — not the public internet. See section 7. |
| Crash reports | So a crash can be found and fixed | Our server. Sent on the next launch after a crash, with personal values stripped out. See section 12. |
| Your name and email address from Google | Only if you choose “Continue with Google”, so you can sign in | Our authentication provider (Supabase). We receive your name, email and profile picture URL, and nothing else from your Google account. |
What the app does not collect
- No location data of any kind.
- No contacts, call logs, installed-app lists, or any of your phone's own messages. (The app has its own family chat — that is described in section 7 — but it cannot see your SMS or any other messaging app.)
- No advertising identifier, and no advertising or tracking SDKs are present in the app.
- No analytics. Earlier versions of this app included an optional anonymous usage-statistics feature; it has been removed and the app now sends no analytics events at all.
3. Using the app without an account
An account is optional. Without one, meals, weights, photos, water and goals are held only in the app's local storage on your phone. Uninstalling the app deletes them. We cannot recover them for you, because we never had them.
Signing in copies that data to our server so it survives a lost or replaced phone.
4. Food photos and AI
When you scan a meal, the photograph is sent to an AI provider to be identified — currently Google Gemini, with Groq as a fallback if Google is unavailable. The result comes straight back to you. The request is made through our own server so that our API keys are not exposed inside the app; the photo is not retained on our server after the response is returned.
Dish names, on the AI Insights screen
Photos are not the only thing that goes to an AI provider, and this is the other one. When you open AI Insights, the app sends the names of dishes you have logged — up to fifty of them, each with the hour of day it was eaten — to the same provider, and asks which meal of the day each one belongs to. It is what lets the screen say how many of your days have a breakfast, a lunch or a dinner recorded.
What is sent is only the dish name and an hour, for example "Paneer tikka" at 20. No calories, no macros, no photographs, no weight, no dates, and nothing that identifies you — not your name, your email or your account id. The answer is kept on your phone for a day so that opening the screen again does not send anything.
The same caution as above applies, for the same reason: once a dish name reaches an AI provider it is governed by that provider's terms, not ours. If you would rather this did not happen, do not open the AI Insights screen — nothing else in the app sends it.
Text you type
Photos and dish names are not the only things that reach the provider. Any text you type that asks the app to look something up goes the same way: the food description you write instead of scanning, the dish name you ask for nutrition on, and the preferences you set when you generate a meal plan or a recipe. It is sent to answer that request, and the answer comes straight back to you. As with a photograph, do not type anything into those boxes that you would not want a third party to read.
Please read this part. Once a photo reaches an AI provider it is governed by that provider's terms, not ours. Google states that content submitted through the free tier of its Gemini API may be used to improve its services, including review by human reviewers. Do not photograph anything you would not want a third party to see — documents, faces, screens or other people — and photograph the food only.
Provider terms: Google Gemini API · Groq.
5. Health Connect
If you turn on "Add exercise calories", the app reads exercise and step data from Android Health Connect for the day you are viewing, so it can work out how much you have burned and add it to your daily calorie budget on your own screen. The same data is shown back to you on the Progress screen as your steps, your exercise minutes and your active days. It reads six things:
- Active calories burned
- Total calories burned
- Steps
- Distance
- Exercise sessions — the start time, end time and activity type of workouts other apps have recorded
- Sleep sessions — the start time and end time of sleep other apps or a watch have recorded, and where those records include them, the sleep stages within a night (deep, light, REM and time awake)
- This data is read on your device and used immediately. It is not uploaded to our server, not stored by us, and not shared with anyone — including the other members of a family group.
- It is never used for advertising, and never sold or transferred.
- The app reads only. It never writes to Health Connect.
- You can revoke access at any time in the Health Connect app, or switch the feature off in PicMyPlate under Settings → Exercise. Revoking simply means no exercise calories are added.
Our use of Health Connect complies with the Google Play Health Apps policy, including its restrictions on the use and transfer of health data.
6. Nutrition corrections are pooled
When you correct a food's nutrition values, that correction is stored against your account and also contributes to a shared, aggregated estimate for that dish. Once enough different people have corrected the same dish and broadly agree, the improved value is used for everyone. This is how the app gets better at regional foods that no database covers well.
What is shared is the dish name and the corrected nutrition numbers, combined statistically with other people's. Your identity is not attached to the pooled value and it is not shown to other users.
7. Family groups, chat and shared progress
Family groups are opt-in. You are only in one if you created it or entered someone's share code, and you can leave at any time from Settings. Leaving stops all further sharing immediately.
What the other members of your group can see:
- The display name and the emoji or profile photo you chose for the group.
- Your calorie target, your goal (lose, maintain or gain) and your dietary preference, so the shared meal plan can be portioned for each person.
- Your calorie total for the day, whether it is within 10% of your target, and how many days in a row you have logged.
- Anything you write in the group chat.
Your weight is never shared. Nor is anything else in this list: your individual meals, your food photos, your progress photos, your water intake, your email address, or anything read from Health Connect. None of it is sent to the group, and your weight is not stored on the family side of our database at all.
This is not something you can partly opt out of. Being in a family group means sharing those numbers with the people in it. If you would rather not share them, do not join a group, or leave the one you are in.
Profile photos
You can set a picture from your gallery instead of an emoji. It is stored in a private folder, not a public one: it has no address anyone can open, and it is served through a temporary link that is issued only to someone who is in a family with you at the moment they load it. Leave the group and the picture stops resolving for them — there is no permanent URL still in circulation.
Replacing your picture deletes the previous one. Choosing an emoji instead removes the photo entirely. We never look at these pictures, and they are not sent to the AI provider — only food photos you scan are.
Messages
Group messages are stored as ordinary text on our server, so that they reach the other members and so that we can look at one that somebody reports. They are not end-to-end encrypted: content nobody can read is content nobody can moderate.
Messages are deleted automatically 90 days after they are sent, whether or not anyone deletes them. You can delete your own at any time by holding a message. Leaving a group stops further sharing but does not retroactively remove messages you have already sent; those are covered by the 90-day rule.
Reporting and blocking
Hold any message to report it, or to block the person who sent it.
- Reporting sends us a copy of the message, who sent it, and the reason you chose. We keep that copy even if the message is later deleted — otherwise anyone reported could simply delete the evidence. We review reports and may remove content or suspend accounts.
- Blocking stops that person's messages from being sent to your device at all; it is enforced on our server, not hidden in the app. It is one-directional and private: they are not told, and they stay in the family group.
8. Subscriptions
Paid plans are billed by Google Play. We never see or handle your card, bank or payment details — Google does not share them with us. The app only asks Google whether an active subscription exists for the device's Play account, and unlocks features accordingly. Manage or cancel a subscription in the Play Store under Subscriptions.
9. Notifications
Reminders are optional and are generated on your device. Enabling them does not send anything to us.
10. Who we share data with
We do not sell personal data, and we do not share it for advertising. Data is shared only with the service providers needed to run the app:
- Supabase — accounts, database and photo storage.
- Google (Gemini) and Groq — food photo and text recognition, as described in section 4.
- Google Play — subscription billing.
- Google Sign-In — only if you choose it, to verify who you are.
Separately from service providers: if you are in a family group, the other members of that group see the things listed in section 7. That is sharing with other people rather than with a company, it happens only because you joined a group, and it stops when you leave.
We may also disclose data where required by law.
11. How long we keep it
Data linked to an account is kept until you delete it or delete your account. Deleting your account removes your stored data from our systems, including progress photos, your profile photo, your family messages, your shared daily numbers and your reactions. Backups may retain copies for up to 30 days before being overwritten. Pooled nutrition values described in section 6 are aggregated and cannot be traced back to you, so they are not removed.
Family messages are deleted 90 days after they are sent, regardless of whether the account still exists. Reports are kept for as long as we need them to act on the account they concern.
12. Security
Traffic is encrypted in transit. Every database table uses row-level security so that your rows can only be read by your own account, or — for a family group — by the members of that group. Passwords are hashed by our authentication provider. No system is perfectly secure, and we cannot guarantee absolute security.
Crash reports. If the app crashes, it saves a report on your device and uploads it the next time you open the app, so the fault can be found and fixed. A report contains the error, where in the code it happened, and the app and Android versions. Personal values are stripped before it is sent: no meals, no photos, no messages, no email address.
13. Your rights and how to delete your data
- In the app: Settings → Account → Delete account & data. This removes your account and its stored data permanently.
- Without the app: see the account deletion page.
- Access or correction: email support@picmyplate.app and we will provide a copy of your stored data or correct it.
- Uninstalling removes everything held on the device.
If you are in India, you have rights under the Digital Personal Data Protection Act, 2023. If you are in the EEA or UK, you have rights under the GDPR, including access, correction, erasure, portability and objection. Use the contact address above to exercise any of them.
14. Children
PicMyPlate is not intended for children under 13, and is not directed at them. Calorie targets are calculated with formulas intended for adults. If you believe a child has created an account, contact us and we will delete it.
15. Changes to this policy
If this policy changes materially, the date at the top will change and the updated version will be published at this address. Continuing to use the app after a change means you accept the updated policy.
16. Contact
Questions, data requests or complaints: support@picmyplate.app