Privacy Policy

Information you choose to provide

Safely Plate stores the adult account holder email and authentication identifier. Family profiles may include a first name, relationship, age, food allergies, optional medical conditions, optional medication, sharing choices, destination, and language preferences.

Profile photos are optional. Only the square WebP crop created on your device is uploaded; the original photo is not uploaded. Restaurant-facing allergy cards do not show profile photos.

How information is used

We use account and family information to provide private synchronization, offline access, translated allergy cards, profile switching, and the sharing choices you control. We use account and technical information to secure the service, prevent abuse, provide support, and maintain reliability.

Premium conversation microphone audio and temporary conversation text are processed on the device after model download. They are not synchronized to the family account or used for advertising. Conversation turns exist only in the current screen until cleared or closed.

Safely Plate is a communication aid, not a medical record, medical advice, an emergency service, or a guarantee that food is safe. Always verify ingredients and cross-contact with restaurant staff and follow your clinician-provided emergency plan.

Service providers and advertising

Cloudflare hosts the website and application edge services. Supabase provides authentication, private database storage, private profile-photo storage, billing entitlements, and hashed promotional-code records. Google processes Google sign-in and Android purchases when you choose them. Stripe processes web purchases and billing; Safely Plate does not store full payment-card numbers.

On Android, Google ML Kit downloads and runs on-device translation models. In the PWA beta, approved speech and translation model files are downloaded from Hugging Face and cached by the browser. Those providers may receive ordinary model-download request information such as IP address, time, device/browser headers, and requested model file, but Safely Plate does not send conversation audio, conversation text, allergy profiles, or medical information with those requests.

Safely Plate does not sell family, allergy, medical, medication, or child profile information. Google AdSense or another advertising provider may display contextual or non-personalized ads on public guide pages, but Safely Plate does not provide family health information to select ads. Ads are excluded from private family profiles and restaurant-facing allergy cards.

Advertising providers may process device, network, cookie or similar-storage, consent, coarse location, fraud-prevention, measurement, and ad-delivery information under their own policies. Non-personalized ads are not based on a visitor’s past behavior but may still use limited storage or identifiers for frequency control, aggregated reporting, and abuse prevention. Where required, visitors receive consent choices before advertising storage or personalized advertising is used. Google advertising choices are available at https://adssettings.google.com/.

Offline storage and security

A private account snapshot and compressed profile-photo cache may be stored locally on a signed-in device so travel cards remain available without a connection. Anyone with access to an unlocked device may be able to view that offline copy. Sign out on shared devices and protect the device with a passcode.

Data is encrypted in transit. We use account isolation, private storage controls, and access policies designed to restrict each account to its own records. No online service can promise absolute security.

Children

Safely Plate accounts are for adults age 18 or older. A parent, legal guardian, or authorized caregiver manages any child profile. Children must not create accounts or use the service without active adult supervision.

Retention and deletion

Account data is retained while the account is active. An account holder can delete the account from Settings in the app or use the public deletion instructions. Deletion removes the Supabase authentication account, family snapshot, entitlement record, and owned profile photos. Local data on the current device is also cleared after a successful in-app deletion.

Limited transaction, security, fraud-prevention, tax, dispute, and legal records may be retained by Safely Plate or payment and infrastructure providers when required or permitted by law. Backups may take a limited time to cycle out. Offline copies on other devices remain until those devices reconnect, sign out, clear app data, or uninstall the app.

Contact and changes

For privacy questions or deletion help, contact support@pacificagames.com. Safely Plate may update this notice as the service changes. Material changes will be dated and, when appropriate, shown in the app.