Effective 27 September 2026. Sanvvy, Inc., 8 The Green #12050, Dover, DE 19901, US (“we”) publishes PlateCall for iPhone and Apple Watch. Contact: lufei.zhou@sanvvy.com.
Speech is transcribed on your device by Apple’s speech recognition. Recordings never leave your devices. The Apple Watch app sends your take to your iPhone only.
We never write to Apple Health, never store health data in iCloud, and never use health data for advertising or marketing.
Only when you ask for a verdict and only after you allowed it:
| Recipient | What | Why |
|---|---|---|
| Our relay server (run on Cloudflare) | everything in the TypeSafe row, passed straight through and not stored or logged; your IP address, as with any web request, not stored; a random key your iPhone creates when the app is installed, which proves the request comes from the genuine app. We keep that key with a count of today’s requests to limit misuse. It is not linked to you and is replaced when you reinstall the app | to protect the service from misuse and forward the request to TypeSafe |
| TypeSafe (typesafe.ai), which runs the model behind “Instinct” | the meal in words and the time; your age, sex and height; current and target weight and weekly pace; today’s steps, stand minutes and latest workout, last night’s sleep and sleep score, your most recent VO₂ max; today’s weather; the meals you already logged today with their verdicts | to produce the verdict for that meal |
| ipinfo.io | your IP address | to find an approximate city for the weather |
| Apple (WeatherKit) | that approximate location | to get the day’s forecast |
Separately, whether or not you ask for verdicts, the app sends anonymous usage statistics to TelemetryDeck (telemetrydeck.com): that the app was opened and for how long, the app and iOS version, the device model, language and region, when the subscription screen was shown, a purchase or free trial (product, price and App Store country) and which kind of error occurred. These are tied to a random identifier that is salted and hashed on your iPhone before it is sent, so neither we nor TelemetryDeck can tell who you are. Your meals, health data and weight are never part of it. We use it only to see how the app is used and where it breaks, never for advertising or tracking.
No name, email or advertising identifier is sent; the only identifiers are the random app key above, which goes to our relay only, and TelemetryDeck’s hashed identifier. Each recipient processes the data only for the purpose above, under its own terms and privacy policy: Cloudflare (for our relay), TelemetryDeck, TypeSafe, ipinfo.io, Apple. TypeSafe states that it does not train or fine-tune AI models on what it receives. Cloudflare handles each request at a data centre near you, and TypeSafe and ipinfo.io process data in the United States, so if you use PlateCall outside the US, this data is transferred there. We require each recipient to protect the data at least as well as this policy does.
Purchases are handled by Apple; we receive only whether your subscription is active, never your payment details.
The app is not directed at children under 13 and we do not knowingly collect their data.
We will update the effective date and, for material changes, tell you in the app.
Sanvvy, Inc. · 8 The Green #12050, Dover, DE 19901, US · lufei.zhou@sanvvy.com