PlateCalibrate!

1. Data controller

The data controller for PlateCalibrate is:

PlateCalibrate (individual developer)
Yevhena Konovaltsia St 117A, Ivano-Frankivsk, 76000, Ukraine
Email: developer.prokopiv@gmail.com

We provide this service globally, including to users in the European Economic Area (EEA), the United Kingdom, and other jurisdictions.

2. What data we collect

We design PlateCalibrate to collect the minimum data necessary to provide the service.

• Photos of meals you upload
  When you use PlateCalibrate, you may upload a photo of your meal for analysis.
  
  Important: You must not upload any images containing faces, people, or identifiable human body parts. This service is only for photos of food.
• Technical data
  When you access the website, we and our providers may automatically collect: browser type, device type, operating system, basic configuration, approximate location (based on IP), IP address (processed and protected via Cloudflare), date and time of access, and basic server logs for security and performance.
• Cookie and similar technologies
  We use strictly necessary cookies and security technologies (e.g., Cloudflare) to protect the service. Third-party ad networks (such as Google AdSense) may use cookies or similar technologies for advertising and frequency capping, especially for users in the EEA based on their consent.

We do not require names, accounts, passwords, or other direct personal identifiers to use PlateCalibrate.

3. How we use your data and legal bases

We use your data for the following purposes:

• To provide the core service
  We process uploaded photos to analyze food content and generate approximate calorie and plate-balance estimates. Legal basis (EU/UK GDPR): performance of a contract or steps taken at your request (Article 6(1)(b)).
• To run and secure the website
  We use technical data (including IP address via Cloudflare) to protect the service against abuse, manage traffic, and maintain availability. Legal basis: our legitimate interest in operating a secure and reliable service (Article 6(1)(f)).
• To show advertising
  We may use Google AdSense or similar providers to display ads. For users in the EEA/UK, cookies or similar identifiers used for personalized or non-essential advertising are set only with your consent, collected via a consent banner. Legal basis: consent (Article 6(1)(a)) and applicable ePrivacy rules.
• To improve the service (aggregate statistics)
  We may use aggregated, anonymized statistics (for example, counts of how many analyses were performed) to understand how the service is used and to improve it. Legal basis: legitimate interest in improving and developing the service (Article 6(1)(f)).

We do not use your data to make automated decisions that produce legal effects or similarly significant impacts on you. PlateCalibrate is a support tool for awareness, not a diagnostic or decision-making system.

4. No images of people or faces

PlateCalibrate is intended exclusively for photos of food and meals. For privacy and safety reasons, you must not upload any images that:

• show identifiable faces or people;
• include children or minors in any form;
• focus on human body parts that could reasonably allow identification.

If we become aware that such content has been uploaded, we may delete it and may restrict access to the service for the user who uploaded it.

5. AI providers and international data transfers

PlateCalibrate can operate in two technical modes:

• Local processing (Ollama or similar)
  In the default mode, images are processed on our own infrastructure using local AI models. In this case, your photos are not transferred to third-party AI providers.
• External AI provider (OpenAI or equivalent)
  In some configurations or as a fallback when local processing is not available, we may send your photo to a trusted AI provider (such as OpenAI) for analysis. In that case:
  • the provider acts as our data processor,
  • the image is used solely to perform the requested analysis,
  • we configure the provider not to use your data for training their models, to the extent this option is available in their settings.

When your data is processed by an external AI provider, it may be transferred outside your country, including to countries outside the EEA/UK (for example, the United States). Where required by law, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs), and additional technical and organizational measures.

6. How long we keep your data

• Uploaded photos
  Images are processed only for the time necessary to perform the analysis and generate a response. They are not stored permanently in our systems and are deleted or overwritten shortly after processing.
• Technical logs
  Server and security logs (for example, Cloudflare edge logs) may be retained for a limited period (typically up to 90 days) to monitor security, detect abuse, and ensure the stability of the service, unless a longer retention is required to investigate a specific incident.
• Aggregate anonymous statistics
  Aggregated statistics that do not identify individuals may be retained for longer to monitor usage trends.

We do not keep personal data longer than necessary for the purposes described in this Policy.

7. Cookies and similar technologies

We use the following categories of cookies and similar technologies:

• Strictly necessary and security cookies
  These are required to operate the website, provide basic functionality, and protect the service (for example, Cloudflare security cookies). They are used based on our legitimate interest and do not require consent under ePrivacy rules.
• Advertising cookies (Google AdSense)
  Ad networks may use cookies or similar identifiers to display ads, limit how often you see the same ad, and prevent fraud. For users in the EEA/UK, we obtain your consent before using non-essential cookies via a banner or consent interface. You can withdraw your consent at any time via the same interface, where available.

Your browser settings may also allow you to block or delete cookies. However, disabling essential cookies may affect the proper functioning of the service.

8. Third-party services we use

We may rely on the following categories of third-party providers:

• Content delivery and security: Cloudflare (CDN, DDoS protection, TLS termination);
• AI processing: local inference (Ollama or similar) and, where configured, external AI APIs such as OpenAI;
• Advertising: Google AdSense or equivalent ad networks.

These providers process limited technical and usage data as part of their normal operations and are bound by their own privacy policies and, where applicable, data processing agreements with us.

9. Your privacy rights

Depending on your location (for example, if you are in the EEA/UK), you may have the following rights under data protection laws:

• Right of access to your personal data;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure (“right to be forgotten”) in certain circumstances;
• Right to restriction of processing in certain circumstances;
• Right to data portability where technically feasible;
• Right to object to processing based on legitimate interest or to withdraw your consent;
• Right to lodge a complaint with a supervisory authority, in particular in the EU/EEA country where you live or work, or where an alleged infringement has taken place.

To exercise your rights, please contact us at developer.prokopiv@gmail.com. We may need to verify your identity before responding to certain requests.

10. Children’s privacy

PlateCalibrate is intended for adult users and is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can delete it.

11. Automated decision-making

PlateCalibrate provides informational estimates of calories and plate balance only. We do not use your data to make automated decisions that produce legal effects concerning you or similarly significantly affect you. You remain fully responsible for how you interpret and act on the information provided.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the “last updated” date at the bottom of this page. Where required by law, we will notify you of material changes or seek your consent again (for example, for certain cookies).

13. Contact

If you have any questions about this Privacy Policy or how we process your data, you can contact us at:

Email: developer.prokopiv@gmail.com
Address: Yevhena Konovaltsia St 117A, Ivano-Frankivsk, 76000, Ukraine

Last updated: 2025