← Back

Privacy policy

Last updated September 12, 2026

Off My Plate is a meal planning app run by one person, Rebecca Fiss. This policy explains what the app collects, who else sees it, and what it's never used for.

It's written to be read. If anything here is unclear, email offmyplateapp@gmail.com and ask.

1. The short version

The full detail is below, but the shape of it is simple:

  • The app collects what you tell it, so it can plan your meals. Your food preferences, what's in your freezer, what you asked Mae, what you saved.
  • It is never sold, rented, or handed to advertisers.
  • There is no advertising, no analytics, no tracking pixels, and no advertising cookies in this app. That is not a promise for later; it is the current state of the code.
  • AI providers process what you send Mae so she can answer. Under their current business terms, they don't use it to train their models.
  • You can ask for a copy of your information, or ask for all of it to be deleted, by emailing offmyplateapp@gmail.com.

2. Who runs this

Off My Plate is operated by Rebecca Fiss as a sole proprietor in the United States. For anything in this policy, including requests about your own information, the contact is offmyplateapp@gmail.com.

3. What the app collects

Your account

  • Your email address.
  • Your password, stored only as a secure hash. It's never visible to us, and can't be read back out.
  • A display name, if you set one.

Your subscription

Payments are handled by Stripe. Your card details are typed into Stripe's own form and go straight to Stripe: they never reach Off My Plate's servers, and your card number is never seen or stored here.

What's kept on your account is the bookkeeping around that, not the payment details themselves:

  • A reference number from Stripe, which links your account to your billing record with them.
  • Whether your subscription is running, in its trial, or has ended.
  • When your free trial finishes, and the date of your first payment.
  • Whether your account is on a free, paid, or complimentary plan.

Stripe is told your email address and your account's id, so it can recognize you and so a payment can be matched back to the right account. Your receipts, invoices and card are held by Stripe under their own privacy policy.

What you tell Mae

Your conversation with Mae isn't kept. What you type is sent to the AI provider so she can answer, and the app stores no transcript of it. What's kept is what comes out of a conversation: a meal you saved, a night on your plan, an item in your freezer, or a note she wrote down.

  • How many people you cook for, including how many are children.
  • Dietary restrictions, allergies, foods you avoid, and diet styles you would rather not be offered.
  • Kitchen equipment you have or don't have, and how much effort you want to spend on a normal night.
  • The notes Mae keeps about your household, which you can read and delete yourself on the Profile screen.

What you save in the app

  • Meals in your library, including any recipe text, ingredients, and notes you add.
  • Your weekly plans, and Hit or Miss feedback on meals you have already had. If you mark something a Miss, whatever you type in the comment box is kept on that meal and sent to the AI provider, so Mae can work out what to avoid in future. That box is often where a household detail lands, and what you write there can become a note she keeps, or even a food she rules out for you.
  • Your freezer inventory, including quantities and the dates you record.
  • Your shopping list, which is worked out from your plan. Anything you add to it by hand stays in your own browser, on your own device. The exceptions are ingredient names: when Mae writes or imports a recipe she files each ingredient under an aisle on your account, and if you move an item to a different aisle yourself, that correction is saved too, so the app remembers where you like it filed.
  • Which meals the app has already shown you, and which ones you turned down. It keeps this so it doesn't offer you the same thing repeatedly, and so Mae can notice a pattern worth asking you about. Any note she writes off the back of that is one you can read and delete on the Profile screen.

Voice and photos

  • If you use the microphone to talk to Mae, the app records that clip and sends it for transcription so it can become text. The app doesn't store the audio, and the text it becomes is treated like anything else you type: sent to Mae so she can answer, not saved as a transcript. The company doing the transcription may hold the clip for a short period under its own terms, to check for misuse, before deleting it.
  • If you add a photo, for example a recipe card or a package label, the image is sent to the AI provider so it can be read. Photos are handled as part of that conversation.
  • If you paste a link to a recipe, Off My Plate's own server fetches that page rather than your browser doing it, and then sends the recipe text to the AI provider so Mae can read it. Nothing about you goes with that request: the recipe site sees our server, not you, and gets no cookies, no account details, and no clue who asked.

Bug reports

You can report a problem from the Profile screen, or by shaking your phone. Either way the report includes what you type and basic device information: your browser user agent, the size of the window the app was running in, and your platform.

You can attach a screenshot, and that's your choice rather than something the app takes by itself. If you got there by shaking your phone, it offers to capture the screen you were just on; from the Profile screen, you pick an image out of your photo library instead.

A screenshot of the app will usually show your own meals and household details, so it's worth a glance before you send it. If Mae's chat is open when you capture one, it will show that conversation too, and that is the single way anything from her chat reaches us, since nothing else keeps a record of it.

Technical information

The hosting provider keeps standard server logs for security and reliability, which include IP addresses and request timestamps. This is ordinary infrastructure logging, not analytics, and it's not used to build a profile of you.

4. Allergies and dietary needs, specifically

An allergy or a medical diet is health information, and it deserves calling out rather than being buried in a list. The app asks for this because Mae genuinely needs it to avoid suggesting something that would hurt you.

It's stored the same way as the rest of your preferences, and it's included in what gets sent to the AI provider when Mae plans a meal, because that's the only way she can work around it. It's not shared with anyone else, and it is never used for advertising, insurance, or any purpose other than planning your food.

You can see the notes Mae keeps on the Profile screen, and delete any of them yourself at any time.

Your dietary answers are held in two places: the note you can read, and a stored version the app works from when it decides what to suggest. Deleting the note clears both together, so removing it really does take that information out of the app rather than only hiding it from you.

There's one more thing on that screen worth knowing about. If you turn down a whole style of eating often enough, Mae learns to stop offering it, and that shows up as its own line reading something like "No vegetarian meals". It's kept separately from your dietary answers, so deleting a note doesn't remove it. It has its own delete, in the same place.

5. Children

Off My Plate is for people aged 13 and over, and it's not directed to children under 13. We don't knowingly collect information from a child under 13. If you believe a child under 13 has created an account, email offmyplateapp@gmail.com and it will be deleted.

The app does record how many children are in your household, because that's how it sizes a meal. That's a number you give us about your own family, not information collected from a child, and the app never asks for a child's name, age, or any other detail about them.

6. If you're trying the demo

Off My Plate can be tried without signing up, as a demo embedded on a website. It's the same app underneath, so it behaves the same way, and that's worth spelling out.

  • Opening the demo quietly creates a temporary anonymous account for you. You're never asked for an email address or a password.
  • The demo asks the same opening questions the real app does. The first is what Mae should call you, and whatever you type is saved as your name. The rest include dietary restrictions and allergies. All of it is stored and sent to the AI provider, exactly as described above.
  • Because no email address is attached, a demo account isn't linked to a real identity. That cuts both ways: it also means a demo account can't be looked up and deleted on request the way a real account can.
  • Demo accounts aren't currently cleared out on a schedule.

So if you would rather not hand over real details about yourself and your household just to have a look around, the demo is a perfectly good place to make something up, starting with the name. Nothing in it is connected to a real account.

7. What the app doesn't do

Stated plainly, because most apps in this category do some of it:

  • Your information is never sold or rented.
  • It is never shared with advertisers, data brokers, or marketing companies.
  • There is no advertising in the app.
  • There are no analytics tools, no tracking pixels, no session recording, and no advertising cookies. The only storage here that belongs to another company is Stripe's fraud check on the payment page, described under Cookies.
  • You're not tracked across other websites or apps.
  • No profile of you is built for anyone else's benefit.

8. Cookies

The app uses only the cookies, and equivalent browser storage, that it needs to run: keeping you signed in and that session secure, and holding the small things that live on your device rather than on the server, such as the shopping list items you add by hand. In the demo embedded on a website, your session is held in your browser's local storage instead, because an embedded page can't rely on cookies. Stripe's payment form, which runs inside the app's own checkout page, sets a little of its own storage to spot card fraud. There are no advertising or analytics cookies of any kind, which is why you're not made to click through a cookie banner to use it.

9. Who else processes your information

Running the app means using a small number of other companies. Each one only receives what it needs to do its job, and none of them may sell your information or advertise to you with it. Some of them do hold what they receive for a short period for their own security and misuse checks, which their own terms require of them.

  • Supabase, which stores your account, your saved meals, plans, freezer and preferences, and any bug report screenshots. This is where your data lives.
  • Anthropic, which powers Mae. It receives your chat messages, the notes Mae keeps, your household size and preferences, your current plan and freezer contents, and any photo you send, so it can generate a reply or a meal suggestion.
  • OpenAI, which is used for one thing only: turning a voice clip into text when you use the microphone. It receives that audio clip and nothing else.
  • Vercel, which hosts the app and keeps the standard server logs described above.
  • Stripe, which runs subscriptions and payments. It receives your email address and your account's id, and takes your card details directly through its own form. It tells the app when a subscription starts, renews, or ends, which is how the app knows whether yours is running. Off My Plate never sees or stores your card number.

Under the current business terms of both AI providers, content sent through their APIs isn't used to train their models. Those are their terms rather than ours, so they could change; if they change in a way that affects you, this policy will be updated and you'll be told.

Information may also be disclosed if the law genuinely requires it, or to protect someone's safety. If that ever happens and it's legally permitted to tell you, you'll be told.

10. When you share a plan

The app can create a link to a read-only copy of a week's plan, so you can send it to a partner or whoever else is cooking. There are things about those links you should know before you use one.

  • Anyone who has the link can open it. It's not guessable, but it's not protected by a password or an account either.
  • The link doesn't currently expire, and there's currently no way to switch one off once it exists. Treat sending one as permanent.
  • It's a snapshot taken at the moment you shared it. Changing your plan afterwards doesn't change what an already-sent link shows.
  • It carries each meal in full, ingredients and cooking steps included, along with the days and your display name if you have set one, plus the things that make a shared week read like your own: how many people each meal serves, how many extra guests on a night you're hosting, the restaurant on a night out, and which day's meal the leftovers came from. Note the serving count is usually the size of your household. It also keeps the web address of any recipe you originally imported, as credit, though the page doesn't show it.
  • It deliberately can't carry your freezer contents, Mae's notes about you, your preferences, or your email address. Sharing a dinner doesn't publish what's in your freezer.

11. One thing collected without your name on it

When you correct the grocery category the app guessed for an item, for example moving something out of Produce, that correction is logged without any identifier attached to it. It records the item name and the category change, and the record itself carries no account details. It's used to improve the app's guesses for everyone.

12. How long it's kept

Your information is kept for as long as your account exists, because the whole point of it is that Mae doesn't ask you the same question twice.

When you ask for your account to be deleted, your account and the meals, plans, freezer items, preferences and notes attached to it are removed within 30 days. Encrypted backups may hold a copy for a short while after that before they roll over.

Three things are deliberately not swept up in that, and it's better to say so than to let you assume otherwise:

  • Bug reports you have sent are kept, so the problem in them can still be fixed, and the link to your account is removed. Any screenshot you attached is still filed under your old account number, so the reports stay grouped together even though nothing names you. If you would rather your reports and their screenshots went too, say so and they will be deleted.
  • The anonymous category corrections described above aren't deleted, because there's nothing in them identifying you to delete.
  • If you ever paid, Stripe keeps its own record of the payments and invoices. That's not ours to delete, and tax and accounting rules require it to be kept for several years. It lives with Stripe rather than in the app.

Deleting your account doesn't by itself stop a subscription, because the subscription lives with Stripe rather than in the account being deleted. Cancel it first, or say in the same email that you want it cancelled too, and it will be handled together.

13. Your choices and your rights

You can change most things yourself, at any time, without asking anyone. Mae's notes about you can be read and deleted on the Profile screen. Saved meals and plans can be edited or removed in the app, and freezer and shopping list items deleted, all without asking anyone.

For anything beyond that, including a copy of everything held about you, a correction, or full deletion of your account, email offmyplateapp@gmail.com and it will be handled within 30 days.

Being straight with you: there's not yet a self-serve delete button in the app. Right now these requests are done by hand, by a person, on request. That's a gap being worked on, and in the meantime the request will be honored either way.

If you live in California

You have the right to know what's collected and why, to get a copy of it, to correct it, and to have it deleted. You also have the right to opt out of the sale or sharing of your personal information, though there's nothing to opt out of, because it's never sold or shared for advertising. Exercising any of these rights will never get you worse service or a worse price.

If you live in the UK or the EU

You have the right to access, correct, delete, or export your information, to object to or restrict how it is processed, and to complain to your local data protection authority. The legal basis for most processing is performing the contract you entered into by using the app; for the anonymous improvements described above it is legitimate interest.

Allergies and medical diets count as health information, which needs its own separate basis. That basis is your explicit consent, given when you choose to enter it. You don't have to; the app works without it, and you simply get suggestions that know less about you. You can withdraw it at any time by deleting the note on the Profile screen, which clears it, and you can email offmyplateapp@gmail.com if you would rather someone did it for you.

Off My Plate is operated from the United States and its providers are US-based, so using it means your information is processed in the United States.

14. How it's protected

  • Everything travels over an encrypted connection.
  • The database enforces, at the database level rather than only in the app, that your information can only be read by your account. Another signed-in user can't read your meals, your freezer, or Mae's notes about you.
  • Bug report screenshots are held in private storage, not on the open web, so one can't be opened by someone who simply has its address.
  • Passwords are hashed by the authentication provider and are never stored in a readable form.
  • The keys that allow the app to talk to the AI providers are held on the server and are never sent to your browser.

No system is perfectly secure, and it would be dishonest to claim otherwise. If a breach ever affects your information, you'll be told promptly and told what to do about it.

15. Changes to this policy

If this policy changes, the date at the top changes with it. If a change actually matters to you, for example a new company processing your information, or a new purpose it's used for, you'll be told in the app or by email before it takes effect rather than left to notice a date.

16. Contact

Questions, requests, complaints, or anything that reads wrong here: offmyplateapp@gmail.com.

Off My Plate is run by one person. If any of this is unclear, or you want something explained in plainer words, email offmyplateapp@gmail.com and you will get a real answer.