Last updated November 9, 2026
Privacy policy
PlateStride is a food log, meal planner, recipe book and fitness app, run by Patrick Desjardins in Quebec, Canada. This policy explains what information PlateStride handles, why, where it is kept, who it is shared with, how long it is kept, and the choices and rights you have.
In short
- Your information is yours. It is used only to run the features you use, and it is never sold, rented, or used for advertising.
- There are no ads and no third-party analytics or tracking tools.
- Your data is stored in Canada, on servers in Quebec.
- Google Health data is read only if you connect your Google account, only to show it to you and to log your meals and weight, and you can disconnect at any time.
- You can see, correct, download or delete your information.
What we collect
Your account
Your name, email address and username; a password (stored only as a salted scrypt hash) or your Google account's ID if you use Sign in with Google; your two-step sign-in settings if you turn them on (passkeys, an encrypted authenticator secret, hashed recovery codes); your birth month and year (not the day), which decide which features you can use; when you agreed to the Terms of Service and this policy, and your consent to keep your health information; your language; and a short history of sign-ins and security events (time, IP address and browser) so you can spot misuse of your account.
What you enter
Your food log (foods, meals, amounts and times), recipes and ratings, meal plans and batch preps, nutrition targets, bodyweight and goal, daily weights, kitchen inventory and shopping list. Your weight, food log and goals are health information, and we treat them as sensitive: PlateStride asks for your express consent before keeping them, and you can withdraw it by deleting your account.
Photos and text you send to the AI features
Photos of recipes, receipts, product labels or your plate, and text you type into those features, are sent for processing and then discarded; they are not stored by PlateStride (see Gemini).
Technical information
PlateStride sets only the cookies it needs: one to keep you signed in, short-lived ones to complete sign-in steps, and one that remembers your language. Your browser also stores your light or dark mode and a few display choices on your device. There are no advertising or analytics cookies. Like any website, our server sees your IP address and browser details when you visit; these appear in security logs.
Google Health
PlateStride can connect to your Google Health account, which brings together data from Fitbit, Pixel Watch, and the apps and devices you use with it. Connecting is optional, is done by you for your own account, and asks for your permission on Google's own screen, after PlateStride explains what it collects. PlateStride collects health and fitness data from Google Health to show your activity, sleep, heart and body measurements in the app, to log your meals and weight to Google Health, and to include your activity in your weekly check-in.
What is read and written
| Google permission | What PlateStride does with it |
|---|---|
| Nutrition (write) | When you log a meal and choose to send it to Google Health, writes that meal's name, meal type, time, calories, protein, carbs and fat. You can remove it again from the Food log. |
| Nutrition (read) | Reads the food and water you logged in Google Health for the day, to show them on your Food log and Today pages. |
| Activity and fitness (read) | Reads steps, distance, floors, active and total calories burned, active minutes, Active Zone Minutes, time sedentary, workouts (type, time, duration, calories, distance, average heart rate and the device or app that recorded them) and cardio fitness, to show them on Today and Health, chart them by week or month, and, if you turn it on, add part of your exercise calories to your daily calorie budget. |
| Health metrics and measurements (read) | Reads weight, body fat, heart rate, resting heart rate, heart rate variability, blood oxygen, breathing rate, skin and body temperature and blood glucose, to show the ones you choose and chart them. |
| Health metrics and measurements (write) | When you log your weight in PlateStride, writes that weight to Google Health. Removing it in PlateStride removes it there too. |
| Sleep (read) | Reads your sleep sessions (times, time asleep, sleep stages and naps) to show last night's sleep and chart it. |
How Google Health data is kept
- Your Google connection (access and refresh tokens) is stored encrypted, linked only to your account, and deleted when you disconnect.
- Numbers read from Google Health are fetched when you open a page and shown to you. They are not copied into PlateStride's database. To keep pages fast, recent numbers may be held in the server's memory for up to 12 hours, then discarded.
- PlateStride keeps references (IDs) to the meals and weights it wrote to Google Health so it can update or remove them, and your weekly check-in summary (which can include your average steps and number of workouts) until the next check-in replaces it.
- Google Health data is never shown to anyone but you, never used for advertising, never sold, and never used to decide anything about you (such as credit, insurance or employment).
PlateStride's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Gemini (AI) features
Some optional features use Google's Gemini API: reading recipes, receipts and labels from photos or text, estimating a food's nutrition, meal ideas and weekly plans, recipe changes and substitutions, the weekly check-in, and questions about your data. Each feature says what it sends before you use it. For example, the weekly check-in and questions about your data send a summary of your recent food log, weights, targets and, if connected, Google Health activity (daily steps, active calories and workouts), only to write the answer you asked for.
These requests use a paid Gemini API account, under which Google does not use the content to train or improve its products. Nothing is sent to Gemini unless you use one of these features. Google allows its Gemini API to be used by people 18 and older only, so these features are turned off for members under 18.
How information is used
- To provide the features you use: show and calculate your own data, and send the emails the service needs (confirming your email, password links, and receipts or notices about your plan).
- To keep your account and the service secure: sign-in protection, blocking repeated failed sign-ins, and security logs.
- To run the business: knowing how many people have accounts and which plan they're on, and anonymous daily totals (for example, how many meals were logged that day) that aren't linked to anyone. When someone creates an account, the operator gets a notification with their name and email.
- Not for advertising, profiling, selling, or any purpose unrelated to the features you use. No person reads your food log or health data, except you, or the operator when you ask for help, when needed for security, or when the law requires it.
Payments
PlateStride Plus is paid by subscription. On the website, payments are processed by Stripe; in the Android app, once it is available, by Google Play. They handle your card details directly: PlateStride never sees or stores your full card number. PlateStride receives and keeps what it needs to manage your subscription and taxes: your plan, its status and renewal date, the amounts paid, and your country and province.
Where information is kept
PlateStride's server and database are in Canada, in Quebec: for now on a server operated by PlateStride, and soon in OVHcloud's data centre in Beauharnois, Quebec. Backups are kept in Quebec as well. You'll be told before the move.
How long information is kept
- Your account and what you enter: while your account exists. When you delete your account, its data is removed from the database right away, and from backups as they rotate out, within 30 days.
- Sign-in and security events: 6 months.
- Payment and subscription records: as long as tax law requires (in Canada, generally 6 years), even after your account is deleted.
- Accounts that haven't been used for 3 years may be deleted after we warn you by email at least 30 days before.
Security
- All traffic is encrypted (HTTPS). You can turn on two-step sign-in with a passkey or an authenticator app.
- Each member's data is separated in the database with row-level security, so one member's requests can't read another's.
- Passwords are hashed; Google tokens and authenticator secrets are encrypted.
- The server is kept up to date and backed up daily, and each backup is checked to make sure it can be read back.
- If a security incident put your information at risk of serious harm, we would notify you and the Commission d'accès à l'information du Québec, as the law requires.
Your choices and rights
- See and correct what you entered, directly in the app, at any time.
- Disconnect Google Health at any time (Account & security → Connections → Disconnect). This revokes PlateStride's access with Google and deletes the stored connection. You can also remove access from your Google Account (Security → Third-party apps with account access).
- Get a copy of your information, in a structured, commonly used format (JSON): Account & security → Download my data, or write to the address below.
- Delete your account and its data at any time: Account & security → Delete my account. Your data is deleted right away (backup copies within 30 days), Google Health is disconnected, and you get a confirmation email. You can also write to the address below.
- Withdraw your consent to an optional use (for example Google Health or the AI features) at any time, by turning it off or disconnecting.
- Under Quebec's Act respecting the protection of personal information in the private sector, and Canada's PIPEDA, you can access and correct your personal information, ask how it is used, and withdraw your consent. If you're not satisfied with our answer, you can file a complaint with the Commission d'accès à l'information du Québec, or the Office of the Privacy Commissioner of Canada.
We answer requests within 30 days.
Children
PlateStride is meant for people 14 and older. It is not directed to children under 14, and we do not knowingly collect their information: everyone gives their birth month and year, and an account that turns out to belong to someone under 14 is deleted. If you believe a child under 14 has an account, write to us and we will delete it.
Members aged 14 to 17 can use the free features. The features that use Google's Gemini AI, and PlateStride Plus, are for members 18 and older. For members under 18, PlateStride doesn't suggest calorie deficits.
Changes to this policy
If this policy changes, the date at the top is updated. For important changes, we tell members by email or in the app before they take effect.
Contact
Patrick Desjardins is the person in charge of the protection of personal information at PlateStride. For any question or request about your information: [email protected].