Privacy policy

Platoo is a meal-planning and cooking service operated by Braightminds in the Netherlands. Braightminds is the controller for the personal data described in this policy.

Privacy questions and requests can be sent to privacy@getplatoo.app.

Account data: email address, display name, user ID, sign-in provider, and profile image when supplied by Apple or Google.

App content: recipes and recipe photos, meal plans, shopping lists, household membership, invitations, and allergy or food-preference settings that you choose to enter.

Service data: support messages, waitlist submissions, app interactions, device/app version, IP-derived security information, crash details, and performance data. For Plus, we store the Apple product, transaction identifier, subscription status, and expiry date, but not your payment-card details. We do not use this data for advertising profiles.

We process account and app content to provide authentication, synchronization, household collaboration, support, and in-app account deletion (performance of our contract).

We process limited security, diagnostics, and abuse-prevention data to keep Platoo reliable and protect users (our legitimate interests). We process waitlist and product-news data with your consent, which you can withdraw at any time.

We may retain information where required to comply with law or establish, exercise, or defend legal claims.

Recipes, plans, shopping lists, allergy preferences, and member names in a household are visible to that household's members. Owners choose the role of a new member and invite links are private, one-time links.

Only share a household or invitation with people you trust. Leaving a household removes your access; where offered, you can copy recipes to your personal space first.

When you deliberately use an AI or import feature, the recipe text, source-page content, or recipe photo needed for that request is sent through Platoo's backend to Google Gemini. We do not send your full account or unrelated household content with that request.

AI output can be incomplete or wrong. Review ingredients, quantities, cooking times, allergens, and food-safety instructions before using or sharing a result. Platoo is not medical, nutritional, or allergy-safety advice and must not replace package labels or professional advice.

We use Google Firebase/Cloud for authentication, database, storage, and functions; Google Gemini for user-invoked AI processing; Vercel for web hosting and aggregate product analytics; Sentry for production crash and performance diagnostics when enabled; Apple for App Store subscription processing; and Apple or Google when you choose their sign-in method.

These providers act under their applicable data-processing terms. Processing can occur outside the EEA using an adequacy decision, Standard Contractual Clauses, or another lawful transfer safeguard. We do not sell personal data or share it for cross-site advertising.

Account and app content is kept while your account is active. In-app account deletion removes your account, personal Firestore content, personal files, invitations you created, and a solely owned household; owners with other members must transfer ownership or remove those members first. Apple may retain purchase records under its own legal obligations, and account deletion does not cancel an Apple subscription.

Waitlist records expire no later than 24 months after the latest submission and support messages no later than 12 months after receipt. Security rate-limit records expire shortly after their operational window; production diagnostics are retained only for the period configured with the provider and needed for troubleshooting.

We use access rules, role checks, input validation, rate limits, transport encryption, provider encryption at rest, and restricted server-side credentials. No internet service can promise absolute security.

The site and app use functional local storage for sign-in, language, and session preferences. Vercel Analytics records limited page interaction data without advertising trackers; household invite codes and sensitive query values are removed from analytics and crash-report URLs.

Under GDPR you may request access, correction, deletion, restriction, portability, or object to certain processing. You can delete your account in Settings or contact privacy@getplatoo.app; we may need to verify your identity.

You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority. This policy is effective 22 July 2026 and material changes will be published here.