Legal

Privacy Policy

Last updated: September 7, 2026

This policy explains what information Plated collects, why, and how it's handled. It's written in plain language so it's worth actually reading — replace the placeholder contact details below with your own before this covers a live launch.

Information we collect

  • Account information: email address and password (managed by our authentication provider, Supabase — we never see or store your raw password), plus the profile handle, display name, bio, and timezone you choose to set.
  • Content you create: menu text or photos you submit, the recipes, meal plans, and grocery lists you generate or save, and any edits, substitutions, or chat instructions you make to a saved recipe.
  • Social features: friend requests and connections, household invitations, and the visibility (public, private, or friends-only) you set on each recipe.
  • Usage and device data:anonymous, aggregated page-view and performance metrics collected through Vercel Analytics and Speed Insights. This is cookieless and isn't tied to your identity.
  • Abuse-prevention data: if you use Plated without an account, we temporarily store a one-way hash of your IP address to enforce daily usage limits and prevent abuse. We don't store the IP address itself.

How we use it

  • To generate recipes and parse menus by sending your menu text, photos, and cooking requests to Anthropic's Claude AI models.
  • To operate your account: authentication, saving your library, meal plans, and grocery lists, and displaying your public profile if you choose to share recipes.
  • To enforce fair-use rate limits and keep the service reliable for everyone.
  • To understand aggregate usage and performance so we can improve the product.

We do not sell your personal information, and we do not use your data to train AI models.

Who we share it with

We share data only with the service providers that make Plated work, each acting under their own privacy and security commitments:

  • Anthropic — processes menu text, images, and recipe requests to generate results. Requests are not used to train Anthropic's models.
  • Supabase — hosts our database and handles authentication.
  • Vercel — hosts the application and provides cookieless analytics and performance monitoring.

Recipes you mark public are visible to anyone, including on your public profile and the Explore feed. Recipes marked friends-only are visible to your accepted friends. Everything else stays private to your account.

Cookies and local storage

We use a small number of strictly necessary cookies to keep you signed in, and browser local storage to remember preferences like light/dark mode. We don't use advertising or cross-site tracking cookies.

Your choices

  • Edit or remove your profile details, and toggle recipe visibility, at any time from Settings.
  • Clear all saved recipes from your account from the Danger Zone in Settings.
  • Request a copy of your data, or full deletion of your account, by emailing us at the address below.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within a reasonable period, except where we're required to retain it for legal or security reasons.

Children's privacy

Plated is not directed at children under 13, and we don't knowingly collect data from them.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you directly.

Contact us

Questions about this policy or your data? Email support@example.com.