Home

Privacy

As of November 4, 2026. This is a translation; the German version is the binding one.

Controller

Michael Broza
An der Kapelle 7a
48488 Emsbüren
Germany
Email: [email protected]

In short

Visiting the website (hosting)

The website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open it, Cloudflare processes technically necessary data: IP address, date and time, requested address, amount of data transferred, browser and operating system. This is needed to deliver the page and protect it against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR).

Cloudflare processes the data on our behalf (Art. 28 GDPR). Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, the EU Commission's standard contractual clauses apply. How long Cloudflare keeps log data is described in Cloudflare's privacy policy. We keep no access logs of our own and no visitor statistics.

Waitlist

If you join the waitlist, we store your email address and the time of sign-up, in order to write to you when One Plate launches. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time by emailing us; we then delete the entry. Without withdrawal, we delete the address no later than 30 days after we have notified you of the launch.

Tester application

When you apply as a tester, we store your first name, email address, the size of your household, your goal (if given), whether you use an iPhone, and the time. We use this only to select testers and invite them to the test phase. The legal basis is your consent (Art. 6 (1) (a) GDPR) and the steps towards taking part in the test phase (Art. 6 (1) (b) GDPR). You can withdraw your application at any time by email. We delete applications no later than six months after the test phase ends.

Account

For an account we store your email address, your password (as a hash only), your first name and, if you accept an invite, your membership of a household. The account is the same as in the app. The legal basis is the performance of the user agreement (Art. 6 (1) (b) GDPR). The data is kept for as long as the account exists. If you delete your account, we delete the data that belongs to it. Account emails (the code to confirm your address or to reset your password) are sent through Resend; your email address and the content of the email are transferred for this.

To keep you signed in, the page stores your session in your browser's storage (localStorage). This is technically necessary (§ 25 (2) no. 2 TDDDG) and is not used for tracking.

The One Plate app

The app stores your data on your device first. Without an account, everything stays there. With an account, we also store it on servers in the EU (Supabase, Frankfurt am Main), so that it is available on all your devices.

Health data

In the app you enter data that says something about your health: what you eat, calories and macros, weight, body fat, check-ins (such as sleep, hunger, energy), training and goals. This is health data under Art. 9 GDPR. We process it only with your explicit consent (Art. 9(2)(a) GDPR), which the app asks for before your first entry. You can withdraw it at any time by deleting your account or writing to us. Only your account can read this data.

Household and sharing

When you join a household, the other members see your shared week plan, the shopping list, shared recipes with photos and your first name. They see progress, check-ins, daily calories and weight only if you switch sharing on in the app; you can switch it off at any time. Nudges you send each other are stored until they are read.

Apple Health

Only if you allow it, the app reads weight, body fat, active energy, resting energy, steps and workouts from Apple Health. It writes nothing to Apple Health. Values it reads go into your diary and are then stored like it. We do not use data from Apple Health for advertising or marketing and do not pass it on to third parties. You can revoke access at any time in the iOS Settings under Health.

Camera and photos

The app uses the camera to scan barcodes and to take photos for your recipes. We store recipe photos with the recipe in your household (Supabase, EU). Barcode images are not stored.

Food search

When you search for a food, the search term goes to our server. For search by meaning, the server sends the search term, without any link to your account, to Voyage AI, Inc. (USA). When you scan a barcode we do not know, the app asks the open database Open Food Facts (Open Food Facts, France) directly for the product; the barcode and your IP address are transmitted.

Notifications

The app schedules reminders on your device. So that nudges from your household reach you, we store a push token of your device once you agree. Notifications are delivered through Expo's service (650 Industries, Inc., USA) and the Apple Push Notification Service.

Updates

The app downloads improvements through Expo's update service (650 Industries, Inc., USA). This transmits your IP address, app version and device type. The legal basis is our legitimate interest in an app that works (Art. 6(1)(f) GDPR).

Usage data (only with your consent)

In the app you can turn on “Share usage data” under Profile › Settings. The switch starts off. Only once you turn it on do we learn which screens you open and which actions you take (for example “entry added” or “shopping ticked off”). This shows us what works well in the app and what we need to improve.

What is sent: the name of the screen or action, the time, app version, platform, language, device type and operating system, a random identifier for your device and, if you are signed in, your account number (not your email address). Never sent: weight, calories, macros, training values, notes, the names of your dishes or any other content you enter. Your IP address is transmitted technically when sending, but it is not stored and not used to determine your location.

We use PostHog for this (PostHog Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA) with servers in the EU (Frankfurt am Main). The data is deleted after 12 months. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time by turning the switch off; the app then stops sending at once and forgets the identifier. If you delete your account, we also delete the usage data linked to it at PostHog. On request we delete usage data already sent right away even without deleting your account; write to the address above.

No advertising, no tracking

The app contains no advertising and does not track you across other companies' apps and websites. We use the usage data above only for One Plate itself.

Deleting your account

You can delete your account in the app under Profile, “Delete account”. We then delete your account, your stored data and your household membership. To remove what is on your device, delete the app.

Emailing us

If you email us, we process your address and the content in order to reply (Art. 6 (1) (b) or (f) GDPR). Emails to our address are forwarded to our mailbox via Cloudflare. In the same way we receive a notification with your details when you join the waitlist, apply as a tester or create an account (name and email address, for an application also the details from the form). We delete messages once the matter is settled and no statutory retention duties apply.

Processors

We have data processing agreements under Art. 28 GDPR with these providers. We do not sell data or pass it on for advertising.

Obligation to provide data, automated decisions

You are not obliged to give us any data. Without an email address, however, we cannot put you on the waitlist, invite you as a tester or create an account. There is no automated decision-making or profiling.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)). Write to us at the address above.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

Changes

We update this policy when the website or the law changes. The version published here applies.