Privacy Policy
Last updated: September 5, 2026 • Effective Date: September 5, 2026
Zero Data Selling
We never sell, rent, or trade your personal information or Google user data to third parties or brokers.
Limited Scope OAuth
We only access basic profile information (name, email, avatar) to authenticate you and sync your meal plans.
Total Deletion Control
You can permanently delete your account, session data, and saved plans at any time with a single request.
1.Introduction
Welcome to OffMyPlate ("OffMyPlate", "we", "our", or "us"). OffMyPlate provides an intelligent meal planning, recipe scaling, and grocery consolidation platform designed to simplify home cooking and eliminate household food waste.
This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you access our website (including offmyplate.app and offmyplate.pages.dev) and use our meal planning services. By accessing or using OffMyPlate, you acknowledge that you have read and understood this Privacy Policy.
2.Information We Collect
We collect information strictly necessary to provide, personalize, and secure our meal planning service:
🔑Google User Data (via Google OAuth 2.0)
When you authenticate via Google Sign-In, we request access only to your basic public profile under the standard Google OAuth scopes (openid, email, and profile). The specific information we receive from Google includes:
- Your Primary Email Address: Used as your unique account identifier and to associate your saved meal plans.
- Your Full Name: Used to personalize your chef dashboard experience.
- Your Profile Picture URL: Used strictly to display your user avatar within your account navigation dropdown.
Note: We do NOT request or access sensitive Google account data such as your Google Drive files, Gmail messages, Google Calendar, contacts, or location history.
🥗Meal Planning & Culinary Preferences
When configuring menus, you provide dietary preferences, allergen exclusions, household servings (adults and kids), weekly schedule pacing, budget targets, recipe favorites, and grocery checklist items.
🌐Technical & Session Information
To protect your account against unauthorized access and session hijacking, our edge servers log standard technical metadata (your IP address, browser user-agent, and session creation timestamp).
⚖️Google API Services User Data Policy Compliance
OffMyPlate's use and transfer to any other app of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: We do not transfer or disclose your Google user data to third parties unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger or acquisition. We never use Google user data to serve personalized advertisements or train generalized AI models.
3.How We Use Your Information
We process your data exclusively for legitimate operational purposes:
- Authentication & Security: Authenticating you via Google OAuth and issuing cryptographically secure, edge-based HTTP-only session tokens.
- Saved Meal Plans & Cloud Sync: Persisting your weekly meal menus in our Cloudflare D1 encrypted database so you can access and load them across devices.
- Personalized Culinary Recommendations: Tailoring generated recipes to your selected dietary restrictions, allergens, and household sizes.
- Direct Grocery Export: Assembling consolidated grocery quantities for export to cart providers (e.g. Instacart or Amazon Fresh) only when explicitly triggered by you.
4.Third-Party Sharing & Disclosure Policies
We do not sell, rent, monetize, or trade your personal data under any circumstances. Data collected through OffMyPlate, including Google user data, is never sold or shared with third parties for marketing, advertising, or lead-generation purposes.
We share data only with essential, enterprise-grade cloud service providers that help operate OffMyPlate under strict data protection terms:
Cloudflare (Edge & D1 Database)
Hosts our edge compute and encrypted D1 SQL database instances with TLS 1.3 encryption.
Google Gemini API
Processes culinary prompts to generate recipe ideas statelessly without user identity attachment.
5.Data Retention & Security Safeguards
Your account and plan data is stored in Cloudflare D1 distributed SQLite instances. We enforce defense-in-depth technical safeguards:
- Secure Session Cookies: Cookies are strictly marked with
HttpOnly; Secure; SameSite=Lax; Path=/, preventing script-based XSS extraction. - Automatic Expiration: Inactive sessions automatically expire in our database after 30 days.
- Transport Layer Security: All data transmitted between your browser and our servers is encrypted using modern TLS encryption.
6.Your Data Rights & Deletion Instructions
We respect your privacy and provide complete autonomy over your personal data:
How to Request Account & Data Deletion
You can delete individual saved plans at any time via the Saved Plans drawer in the application. To permanently delete your entire user account, all associated session records, and all historical meal plans, please send an email to:
Please include your registered account email address with the subject line "Account Deletion Request". All account deletion requests are honored and permanently purged within 48 hours.
You can also revoke OffMyPlate's authorization to your Google Account at any time directly through your Google Account Third-Party Access Settings.
7.Cookies & Tracking Technologies
OffMyPlate uses only essential, functional cookies necessary to keep you authenticated (omp_session_token). We do NOT use third-party advertising cookies, cross-site trackers, or marketing pixels.
8.Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Privacy Team:
OffMyPlate Privacy & Compliance
Support & Deletion: support@offmyplateapp.com
Direct: offmyplate1@gmail.com
Website: https://offmyplateapp.com