Legal
Privacy policy
What stays on your phone, what leaves it, and why.
Last updated: 28 October 2026
The short version: what you log in OttoPlate stays on your phone. There's no account, no ads, no tracking across other apps, and nothing is sold. The few things that do leave your phone, such as a meal photo sent for analysis, are listed below with the reason.
Who is responsible for your data
The data controller is CXR GLOBAL ENTERPRISE SRL, company no. 43395800, J40/16478/2020, registered at București, Sectorul 2, Șoseaua Pantelimon, Nr. 245, cam. 1, Bl. 51, Sc. B, Et. 6, Ap. 118, represented by Robert Duican. For any question about your data, email [email protected].
What stays on your phone
Everything you enter or the app calculates is stored only on your iPhone: your profile, food log, weight, measurements, workouts, photos, notes, goals and settings. We don't have a copy and can't see it. If you delete the app, this data is deleted with it, so use “Export my data” in settings if you want a backup.
Apple Health
If you allow it, OttoPlate reads weight, body measurements, steps, active energy, workouts and, only if you turn on cycle-aware notes, menstrual flow from Apple Health. It can save weight, measurements and workouts back.
Apple Health data is used on your phone only, to adapt your plan. It is never sent to our server, to the AI service or to anyone else, and is never used for advertising. Change permissions anytime in Settings › Health › Data Access & Devices › OttoPlate.
Cycle information
Cycle-aware notes are off by default. Period dates you enter or read from Apple Health stay on your phone and are never sent to the AI service or to our server.
What leaves your phone
1. AI features
When you use an AI feature (Otto's take, photo or text logging, reading a nutrition label), the meal photo or text you submit, together with a short summary needed to answer (for example your goal and recent calories), is sent through our server to Anthropic, which analyses it to produce the answer. The server only relays the request and counts usage per access code to prevent abuse; it does not keep your photos or text. Anthropic handles that data under its own privacy policy (anthropic.com/legal/privacy).
2. Food lookups
When you scan a barcode or search for a food, the barcode or search text is sent to Open Food Facts, a public food database.
3. Crews (optional)
If you join or create a crew, our server stores your display name, which crew you belong to, the calendar days you logged food (dates only) and, if you take part in the weekly comparison, a summary of percentages and counts. It never receives your weight, your food or your photos.
4. Coach (optional)
If you join a coach with their code, the app first shows you exactly what they'll see: days logged, protein days, weigh-ins, your weekly weight change as a percentage, and the workouts you logged (name, day, length). The server keeps this, plus messages and programs sent, while you're connected to the coach; training data expires automatically after 60 days. The coach never sees your food, calories, kilos or photos. When you leave, it all stops and the conversation is deleted.
5. Access codes
If you enter an invite or promo code, it's sent to our server to check it.
6. 1-to-1 coaching calls
Calls are booked on Cal.com. There you give your name, email and answers to a few questions, including, if you choose, health information (such as a condition or a pregnancy) and the 4-week summary from the app. We use these only to prepare the call and to check we can help you safely. Coaching sessions are paid through Stripe; we never see your card details. The call takes place on Google Meet and is not recorded. Robert may keep short notes of what you agreed, so the next call can pick up from there.
7. Emails
If you email us, we use your address only to reply.
8. This website
The site is hosted by Cloudflare, which processes your IP address to deliver the pages and protect them from attacks. The site uses no cookies, analytics or tracking.
We use no advertising or analytics services and no third-party trackers, in the app or on the site.
Why we're allowed to (legal basis)
- Contract (GDPR Art. 6(1)(b)): to provide the features you choose, your subscription and the calls you book.
- Explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)): for health data you choose to send, such as a meal photo for analysis or the answers in the booking form. You can withdraw it anytime by turning the feature off or emailing us.
- Legitimate interest (GDPR Art. 6(1)(f)): to prevent abuse and keep the server and site secure.
- Legal obligation (GDPR Art. 6(1)(c)): for accounting records of payments.
Transfers outside the European Union
Anthropic, Cal.com, Stripe, Google and Cloudflare may process data in the United States. These transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission, as applicable.
How long we keep data
- Data on your phone: until you delete it or the app.
- Crews and coach: while you use the feature; deleted when you leave or choose “Delete all my data”.
- Bookings and call notes: at most 2 years after your last call, then deleted.
- Payment records: as long as accounting law requires.
- Emails: as long as needed to reply, then deleted.
Your rights
You have the right to access, correct and delete your data, to restrict processing, to receive it in a portable format and to object to processing. For any of these, email [email protected] and we'll reply within one month. If you're not happy with the answer, you can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or the authority where you live.
Deleting your data
In OttoPlate, go to Profile & settings › Delete all my data. This erases everything on your phone, plus your crew and coach profile on the server. Data you already saved in Apple Health stays there; manage it in the Health app. You can also email us and we'll delete anything held on the server.
Children
OttoPlate is not meant for people under 18, and we don't knowingly collect data from children.
Health notice
OttoPlate gives general guidance, not medical advice. If you are pregnant, under 18 or have a medical condition, check your plan with a doctor or registered dietitian. If food or weight starts to feel stressful, please talk to someone you trust or a professional.
Changes
If this policy changes we'll update the date above and, for significant changes, tell you in the app.
Contact
CXR GLOBAL ENTERPRISE SRL, attn. Robert Duican · [email protected]