Privacy policy
Last updated: 7 October 2026
Pre-launch draft. The service operator and provider arrangements must be confirmed, and the deletion process put in place, before public registrations open. Privacy contact: accounts@plateahead.app.
What we collect
When you create an account, we collect your email address and display name. Supabase handles your password and sign-in session. We store your household membership, recipes, meal plans, shopping lists, pantry dates, preferences and notes, and invitation details. Hosting and email providers may process technical information such as IP addresses, delivery status and request logs to operate and protect the service.
How we use it
We use this information to sign you in, save and synchronise your kitchen, invite a household member, provide reminders and respond to support requests. Dietary preferences and ingredient exclusions are optional. Avoid adding medical records or other information you do not want to share with your household.
Your shared household
Both household members can view and edit shared kitchen information, including preferences and notes. Your display name and membership role are visible to the other member. A household ID identifies your household; it does not give someone access. Email invitations are tied to the invited email address. Anyone you give a join code to can use it with a verified account before it expires or is used. Share codes only with the person you intend to invite.
Providers and international processing
Supabase provides account and database services. Vercel provides website hosting when deployed there. Resend sends invitations and account emails when configured. PlateAhead’s primary hosting region is Sydney, Australia. Email delivery, content delivery and provider support may involve processing outside Australia; choosing Sydney does not mean every provider processes all information exclusively there. Before public launch, the operator must confirm and disclose any overseas processing countries that apply.
AI meal plans
PlateAhead does not automatically send your kitchen data to an AI service. The template can include the preferences you enter. When you copy it into an AI service, that service handles the information under its own terms and privacy policy. Review the template before sharing it. Pasted plans are saved to your shared kitchen only when you confirm the import.
Cookies and device storage
We use necessary sign-in cookies. Local storage holds sample data, a cache of your signed-in household, and reminder settings on this browser. This version includes no advertising trackers or third-party analytics. On a shared device, sign out and clear site data when appropriate. Sample data remains on the device unless you clear it.
Notifications
In-app reminders use the dates and meals you enter. Browser notifications are optional, require your permission and run while PlateAhead is open. You can disable them in the notification centre or browser settings. This version does not send scheduled reminder emails or background push notifications.
Retention and your choices
Kitchen data remains available while your household uses the service. Past meal plans are not automatically removed by the free planning limit. You can edit or remove individual kitchen entries. For account deletion, email accounts@plateahead.app. We delete your account and the personal information associated with it within 30 days of receiving your deletion request. This is the maximum retention period after a deletion request, including personal information in backups and logs. We may verify your identity to protect your account when handling the request.
Shared kitchen entries may also belong to another household member. We will explain which shared entries remain for that member and remove your personal information from those entries within the same 30-day period. For access, correction or a copy of your information, contact us at the email address above. Clear PlateAhead’s site data on your devices to remove locally stored copies as well.
Security
Database access is restricted to household members with row-level security and checked database functions. Invitation secrets are stored as hashes, expire and can be used once. No online system can guarantee absolute security.
Questions and complaints
Email accounts@plateahead.app with your question or request. We will review it and respond. If you are dissatisfied, you may contact the privacy regulator in your jurisdiction, including the Office of the Australian Information Commissioner in Australia where applicable.
Changes
We will update this page as the service changes and revise the date above. Material changes to how information is handled will be communicated through the service.