Privacy Policy

Overview

PlanPlate.ai ("we," "our," or "us") is operated by Opencream SASU. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website, our waitlist, and the PlanPlate app.

Information We Collect

Waitlist Information

When you join our waitlist, we collect:

• Your email address
• Timestamp of signup
• Source of signup (e.g., "coming-soon" page)
• GDPR consent confirmation
• Language preference (for localized communications)

Recipe Import Data

When you use our recipe import service, we collect:

• Recipe URLs you submit for processing (YouTube, Instagram, TikTok, websites)
• Public content from these URLs (captions, descriptions, publicly available recipe information)
• Generated recipe data (ingredients, instructions, etc.) stored in your personal library
• Usage analytics and performance metrics
• Website analytics data via Google Analytics (with consent)

Instagram Content Access

We use the Instagram oEmbed API (provided by Meta/Facebook) to access public Instagram posts when you import recipes. This means:

• What we access: Only publicly available Instagram post captions and images that you explicitly choose to import
• No login required: We do not ask for your Instagram credentials or access your private Instagram data
• Read-only: We only read public content; we never post, modify, or interact with Instagram on your behalf
• No data sharing: Instagram content you import is stored in your private recipe library and not shared with third parties
• User initiated: We only access Instagram content when you explicitly provide an Instagram URL to import

How AI Processes Your Recipes

To turn what you import into a usable recipe, we send that content to specialized outside services. Here's what that involves:

• What gets sent: The recipe text, photos, or public captions you import are sent to Google's Gemini AI, which reads them and pulls out the ingredients, steps, and cooking times. The same service also powers our translation and Thermomix conversion features.
• What doesn't get sent: We don't send your name, email address, or payment details to Google as part of this. Only the recipe content itself is shared.
• Where it's processed: Google processes this data in the United States, under its own data processing terms.
• For some imports: When you import from Instagram or Pinterest (and occasionally TikTok), we also use Apify, a content retrieval service, to fetch the public photo, video, or caption before our AI reads it.

How We Use Your Information

We use your information to:

• Send you launch notifications and updates about PlanPlate.ai
• Provide early access bonuses to waitlist members
• Send communications in your preferred language
• Improve our service based on user feedback and analytics
• Comply with legal obligations

Legal Bases

Under the GDPR we rely on the following legal bases:

• Consent (Art. 6(1)(a)): waitlist and launch emails, and analytics cookies and session replays. You can withdraw consent at any time.
• Contract (Art. 6(1)(b)): running your account, importing and storing your recipes, and providing the features you use.
• Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing abuse, and fixing errors, including technical server logs.
• Legal obligation (Art. 6(1)(c)): keeping records that the law requires us to keep.

Who Receives Your Data

We share data only with service providers that help us run PlanPlate, under agreements that limit how they may use it:

• Hetzner Online GmbH (Germany): hosting of the website, our backend services and our database on servers in Germany.
• Cloudflare: DNS and redirect service for our domains, and storage of database backups in its EU region.
• Google (Gemini): AI processing of the recipe content you import, as described above.
• Apify: retrieval of public photos, videos, and captions for some imports.
• PostHog (EU) and Google Analytics: website and app analytics, only as described under "Cookies and Analytics".
• EU Send (Norway): sending waitlist and launch emails. Message data is stored and delivered on servers in the EU.
• Apple and Google: App Store distribution and subscription billing (Apple), and sign-in if you choose Sign in with Apple or Google.

International Transfers

Some of these providers, such as Google and Cloudflare, may process data outside the European Economic Area, for example in the United States. In that case the transfer relies on the safeguards in the provider's data processing terms.

Data Security

We use industry-standard security measures to protect your data:

• Data is stored in a PocketBase database on servers in Germany, and all connections to our website and API are encrypted (HTTPS)
• Access controls and authentication protect against unauthorized access
• Regular security updates and monitoring

How Long We Keep Data

We keep personal data only as long as needed for the purposes above:

• Account and recipes: until you delete your account.
• Waitlist: until you unsubscribe or ask us to remove your email.
• Analytics: only as long as needed to understand and improve the service. You can withdraw consent at any time.
• Backups: backups are kept for a limited time and overwritten on a rolling basis, so deleted data disappears from backups within 30 days.

Cookies and Analytics

With your consent, we use Google Analytics and PostHog to understand how visitors interact with our website and app. This helps us improve the user experience and measure the effectiveness of our content. Until you make a choice, PostHog only counts page views anonymously: it sets no cookies, stores no identifier on your device, and records no clicks or session replays. PostHog data is processed in the EU.

What Our Analytics Tools Collect

• Pages you visit and time spent on each page
• How you arrived at our site (referral source)
• General location (country/city level, not exact address)
• Device and browser information
• Language preferences
• Clicks and other interactions, and session replays in which typed input is masked (PostHog, only after you accept)

Your Analytics Choices

• Consent-based: Google Analytics is only loaded after you accept. PostHog only records clicks, session replays, and persistent identifiers after you accept.
• IP Anonymization: Your IP address is anonymized before processing
• Link to your account: If you accept and later sign in, usage events may be linked to your account so we can improve the app. Without your consent, analytics cannot identify you.
• Opt-out anytime: You can change or withdraw your choice at any time via "Cookie settings" in the footer. Withdrawing stops measurement and removes the analytics cookies.
• Fonts: Our fonts are served from our own servers. Your browser does not contact Google Fonts.

Your Rights (GDPR)

If you are located in the European Union, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability - receive your data in a structured format
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting processing that took place before

You also have the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the supervisory authority in your country of residence.

Providing your email address is required for the waitlist and for an account; without it we cannot offer them. We do not make decisions about you by automated means that have legal or similarly significant effects.

Data Deletion

You can delete your data at any time:

• Recipe data: Delete recipes individually from your library within the app
• Account deletion: Delete your account in the app, or contact us at contact@planplate.ai to request complete account and data deletion
• Waitlist removal: Contact us to remove your email from our waitlist
• Response time: We will process deletion requests within 30 days

Important: We do not store Instagram content permanently. When you import a recipe from Instagram, we only temporarily access the public caption to extract recipe information. The original Instagram content remains on Instagram's servers and is not stored in our database.

Contact Us

The data controller for PlanPlate.ai is Opencream SASU. Full company and contact details are available in our Legal Notice.

For any questions about this privacy policy or to exercise your rights, please contact us at:

Email: contact@planplate.ai

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date above.