Privacy Policy

Who we are

ShredPlate ("we", "us") is an AI-first kitchen assistant that helps you track your pantry, discover recipes, plan meals, and manage groceries. This policy explains what personal data we collect, why, how it is stored, and the choices you have.

Data we collect

• Account information — your email address and profile name, managed through our identity provider (Keycloak). We do not store your password; authentication is handled by Keycloak.
• Kitchen and food data — your pantry and inventory items, saved recipes, meal plans, and grocery lists.
• Uploaded photos — images of your kitchen, fridge, or ingredients that you choose to upload so the app can identify items.
• Health and body metrics (sensitive) — body weight, nutrition targets, and logged nutrition/calorie data. This is health-related information and we treat it as sensitive. We use it only to power the app's tracking and planning features and never sell it.
• AI assistant conversations — the messages you exchange with the in-app AI assistant.
• Technical data — basic operational data such as authentication tokens and request logs needed to run the service securely.

How we use your data

• To provide and operate the core app: pantry, recipes, meal plans, and groceries.
• To track nutrition and body metrics that you choose to log.
• To power AI features — recipe generation, the AI assistant, and photo-to-ingredient vision (see below).
• To keep your account secure and to diagnose technical problems.

AI features and OpenAI

Several features rely on OpenAI. When you use them, the relevant data is sent to OpenAI's API for processing:

• Recipe generation — your ingredients and preferences.
• AI assistant — your messages and relevant context (e.g. pantry or nutrition data) needed to answer.
• Photo → ingredient vision — the kitchen or ingredient photos you upload are sent to OpenAI's vision models to identify items.

OpenAI processes this data under its own terms and privacy policy as our sub-processor. We send only what is needed for the requested feature.

Where your data is stored

Your data is stored on our self-hosted infrastructure: a PostgreSQL database for structured data (account, pantry, recipes, plans, metrics, messages) and MinIO object storage for uploaded photos. We apply reasonable technical and organizational measures to protect it.

Third parties

• OpenAI — AI processing for the features described above.
• Keycloak — authentication and identity management (self-hosted).

We do not sell your personal data and do not use it for third-party advertising.

Cookies and local storage

We use browser local storage to keep you signed in by storing authentication tokens. These are required for the app to function and are not used for tracking or advertising.

Your rights and choices

You can access and control your data at any time. In the app, go to Profile → Account to:

• Export your data — download a copy of the data we hold about you (data access and portability).
• Delete your account — permanently remove your account and associated data (erasure / "right to be forgotten").

Depending on your location, you may have additional rights under laws such as the GDPR, including the right to rectify inaccurate data and to object to certain processing. To exercise any of these rights, use the in-app tools or contact us below.

Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your personal data from our systems, subject to any limited retention required for security or legal reasons.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above.

Contact

Questions about privacy? Email us at privacy@shredplate.com.