PicMyPlate is a calorie and nutrition tracker for Android. This policy explains exactly what the app collects, where it goes, and how to get rid of it. It is written to be read, not to be survived.
The short version. If you never create an account, everything you log stays on your phone and we hold nothing about you. If you do create an account, your logged data is copied to our server so you can restore it on another device. Photos you scan are sent to an AI provider to be identified. We do not sell your data and we do not use it for advertising.
1. Who we are
PicMyPlate is operated by an individual developer based in India. For any privacy question, correction or data request, contact support@picmyplate.app. We aim to respond within 30 days.
2. What the app collects
| Data | Why | Where it goes |
|---|---|---|
| Meals, calories and macros you log | To show your daily totals and history | Your device. Also our server if you sign in. |
| Weight entries and progress photos | To chart your progress | Your device. If signed in, photos go to a private storage folder only your account can read. |
| Profile: age, sex, height, weight, activity level, dietary preference | To calculate your calorie and macro targets | Your device. Also our server if you sign in. |
| Email address and password | Only if you create an account, so you can sign in again | Our authentication provider (Supabase). Passwords are stored hashed and are never visible to us. |
| Food photos you scan | To identify the food and estimate its nutrition | Sent to an AI provider. See section 4. |
| Exercise calories from Health Connect | Only if you switch it on, to add exercise back to your daily budget | Read on your device only. See section 5. |
| Nutrition corrections you make | To fix a wrong value, and to improve the value for everyone | Our server. See section 6. |
| Daily count of AI requests | To enforce fair-use limits and stop abuse | Our server. A per-day number only — never what you scanned. |
What the app does not collect
- No location data of any kind.
- No contacts, call logs, messages or installed-app lists.
- No advertising identifier, and no advertising or tracking SDKs are present in the app.
- No analytics. Earlier versions of this app included an optional anonymous usage-statistics feature; it has been removed and the app now sends no analytics events at all.
3. Using the app without an account
An account is optional. Without one, meals, weights, photos, water and goals are held only in the app's local storage on your phone. Uninstalling the app deletes them. We cannot recover them for you, because we never had them.
Signing in copies that data to our server so it survives a lost or replaced phone.
4. Food photos and AI
When you scan a meal, the photograph is sent to an AI provider to be identified — currently Google Gemini, with Groq as a fallback if Google is unavailable. The result comes straight back to you. The request is made through our own server so that our API keys are not exposed inside the app; the photo is not retained on our server after the response is returned.
Please read this part. Once a photo reaches an AI provider it is governed by that provider's terms, not ours. Google states that content submitted through the free tier of its Gemini API may be used to improve its services, including review by human reviewers. Do not photograph anything you would not want a third party to see — documents, faces, screens or other people — and photograph the food only.
Provider terms: Google Gemini API · Groq.
5. Health Connect
If you turn on "Add exercise calories", the app reads a single value from Android Health Connect: active calories burned, for the day you are viewing. This is used only to add that number to your daily calorie budget on your own screen.
- This data is read on your device and used immediately. It is not uploaded to our server, not stored by us, and not shared with anyone.
- It is never used for advertising, and never sold or transferred.
- The app reads only. It never writes to Health Connect, and requests no other health data type.
- You can revoke access at any time in the Health Connect app, or switch the feature off in PicMyPlate under Settings → Exercise. Revoking simply means no exercise calories are added.
Our use of Health Connect complies with the Google Play Health Apps policy, including its restrictions on the use and transfer of health data.
6. Nutrition corrections are pooled
When you correct a food's nutrition values, that correction is stored against your account and also contributes to a shared, aggregated estimate for that dish. Once enough different people have corrected the same dish and broadly agree, the improved value is used for everyone. This is how the app gets better at regional foods that no database covers well.
What is shared is the dish name and the corrected nutrition numbers, combined statistically with other people's. Your identity is not attached to the pooled value and it is not shown to other users.
7. Family sharing
Family groups are opt-in. If you create or join one using a share code, other members of that group can see the display name, calorie target, goal and dietary preference you chose for the group. They cannot see your meals, weights, photos, email address or profile details. You can leave a family at any time from Settings.
8. Subscriptions
Paid plans are billed by Google Play. We never see or handle your card, bank or payment details — Google does not share them with us. The app only asks Google whether an active subscription exists for the device's Play account, and unlocks features accordingly. Manage or cancel a subscription in the Play Store under Subscriptions.
9. Notifications
Reminders are optional and are generated on your device. Enabling them does not send anything to us.
10. Who we share data with
We do not sell personal data, and we do not share it for advertising. Data is shared only with the service providers needed to run the app:
- Supabase — accounts, database and photo storage.
- Google (Gemini) and Groq — food photo and text recognition, as described in section 4.
- Google Play — subscription billing.
We may also disclose data where required by law.
11. How long we keep it
Data linked to an account is kept until you delete it or delete your account. Deleting your account removes your stored data from our systems, including progress photos. Backups may retain copies for up to 30 days before being overwritten. Pooled nutrition values described in section 6 are aggregated and cannot be traced back to you, so they are not removed.
12. Security
Traffic is encrypted in transit. Every database table uses row-level security so that your rows can only be read by your own account. Passwords are hashed by our authentication provider. No system is perfectly secure, and we cannot guarantee absolute security.
13. Your rights and how to delete your data
- In the app: Settings → Account → Delete account & data. This removes your account and its stored data permanently.
- Without the app: see the account deletion page.
- Access or correction: email support@picmyplate.app and we will provide a copy of your stored data or correct it.
- Uninstalling removes everything held on the device.
If you are in India, you have rights under the Digital Personal Data Protection Act, 2023. If you are in the EEA or UK, you have rights under the GDPR, including access, correction, erasure, portability and objection. Use the contact address above to exercise any of them.
14. Children
PicMyPlate is not intended for children under 13, and is not directed at them. Calorie targets are calculated with formulas intended for adults. If you believe a child has created an account, contact us and we will delete it.
15. Changes to this policy
If this policy changes materially, the date at the top will change and the updated version will be published at this address. Continuing to use the app after a change means you accept the updated policy.
16. Contact
Questions, data requests or complaints: support@picmyplate.app