Privacy Policy

1. Who we are

CheckMyPlate.ai is a nutrition assistant that works through messaging apps such as WhatsApp and Telegram. The service is operated by SIA “OffBeat IT”, a company registered in Latvia (registration No. 40203503379). For the purposes of data protection laws (such as GDPR in the EU/EEA), SIA “OffBeat IT” is the controller of your personal data when you use our service.

2. Data we collect

We collect the following categories of information when you use CheckMyPlate.ai:

• Account and contact data: phone number, messaging app ID, display name or username, basic profile info you provide.
• Nutrition and usage data: photos of your meals, text messages, notes and comments, nutrition goals, onboarding answers, and app interaction history.
• Payment data: subscription details (plan, status, renewal dates) and limited billing information processed via Stripe. We do not store your full card details.
• Technical data: timestamps, IP address, device and browser info (where applicable), and basic log data for security and debugging.

3. How we use your data

We use your information to:

• Provide the core service: analyse meal photos and messages, estimate nutrients, and log your meals.
• Personalize feedback: adapt recommendations to your goals, preferences, and history.
• Manage your account and subscription, including billing and customer support.
• Improve and secure the service, including monitoring for abuse and technical issues.
• Comply with our legal obligations (e.g. accounting, tax, fraud prevention).

4. Legal bases (for users in the EU/EEA/UK)

Where GDPR or similar laws apply, we process your personal data on the following bases:

• Contract: to provide the service you have signed up for.
• Legitimate interests: to run, improve, and protect our service in a way that does not override your rights.
• Legal obligation: to comply with applicable laws and regulations.
• Consent: for certain optional features, where we clearly ask you first. You may withdraw such consent at any time.

5. Use of AI (OpenAI, Google Gemini)

To estimate the nutritional value of your meals, we may send parts of your messages and images to third-party AI providers such as OpenAI and Google (Gemini) for processing.

• We share only what is necessary to produce the analysis (e.g. meal photos and related text).
• These providers process the data on our behalf in accordance with their own terms and privacy policies.
• We do not use AI outputs to make automated decisions with legal or similarly significant effects about you.

You can choose not to use the service if you are not comfortable with third-party AI processing.

6. Messaging platforms and other third parties

When you use CheckMyPlate.ai through WhatsApp or Telegram, your messages are also processed by those platforms under their own terms and privacy policies.

• WhatsApp / Meta: messages you send to our number are processed by WhatsApp and its infrastructure.
• Telegram: messages are processed via Telegram’s infrastructure.
• Stripe: we use Stripe to process payments and store limited billing data.
• Hosting & infrastructure: we use third-party providers (e.g. cloud hosting, databases, log services) to operate the service.

We aim to work only with providers that follow appropriate security and data protection practices.

7. How we share your data

We do not sell your personal data. We may share your data:

• With service providers who help us operate the product (hosting, AI, analytics, payment, support).
• When required by law, legal process, or to protect our rights, users, or the public.
• In connection with a merger, acquisition, or other business transaction, subject to appropriate safeguards.

8. Data retention

We keep your personal data only as long as necessary to provide the service and for legitimate business or legal purposes. Meal logs and chat history may be retained while your account is active so that we can provide long-term insights. After you delete your account or we no longer need the data, we will delete or anonymize it within a reasonable period, unless we must keep it longer for legal reasons.

9. International data transfers

Our servers and some of our providers may be located in other countries. If your data is transferred outside your country or region (for example, outside the EU/EEA), we aim to use appropriate safeguards such as standard contractual clauses or equivalent mechanisms as required by law.

10. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal limits.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise your rights, contact us using the details below. We may need to verify your identity before responding.

11. Security

We use reasonable technical and organizational measures to protect your data, such as access controls and encryption where appropriate. However, no online service can be 100% secure, and we cannot guarantee absolute security of information transmitted over the internet.

12. Children’s privacy

CheckMyPlate.ai is not intended for children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, please contact us so we can delete it where appropriate.

13. Cookies and similar technologies

If you visit our website, we may use cookies or similar technologies to operate the site, remember your preferences, and understand usage patterns. You can typically control cookies through your browser settings. Messaging apps (WhatsApp, Telegram) may also use their own tracking technologies under their respective policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, inform you via our website or in chat.

15. Contact us

If you have questions about this Privacy Policy or how we handle your data, you can contact the data controller at:

• SIA “OffBeat IT”
• Registration No. 40203503379
• Country of registration: Latvia
• Email: support@offbeatit.com