Privacy Policy

SECTION 1 — INTRODUCTION

CYP Health Technologies LLC (“Company,” “we,” “us,” or “our”) operates the CheckYourPlate mobile application, website, and related digital services (collectively, the “Application” or “App”). CheckYourPlate is a general wellness platform that uses artificial intelligence to analyze user-submitted meal photographs and provide non-clinical nutritional feedback and encouragement toward user-defined health goals.

This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, and what rights you have over your data. It applies to all users of the App and website.

This Policy should be read alongside our full Terms of Service, Privacy Policy & Regulatory Disclosures (v1.0, March 26, 2026), which governs your use of the App in its entirety.

SECTION 2 — INFORMATION WE COLLECT

We collect only the information reasonably necessary to operate the App and provide your personalized wellness feedback. Here is exactly what we collect:

2.1 Account Information

When you create an account, we collect:

• Email address — used only for account creation, login, and service communications (e.g., technical notices, updates to these Terms). We do not share your email with your Nutrition Coach or with third-party advertisers.
• Encrypted password — your password is stored in encrypted form. We do not have access to your plaintext password.

2.2 Wellness Profile Information

During onboarding and through your use of the App, you may voluntarily provide:

• Age (year only; not full date of birth)
• Biological sex or gender (optional)
• Height (exact or range, at your discretion)
• Body weight (exact or range, at your discretion)
• Physical activity level
• Self-reported health goals (e.g., weight management, improved energy, better eating habits)
• Dietary preferences (e.g., vegetarian, vegan, Mediterranean)
• Known food allergies and intolerances
• Voluntarily disclosed underlying medical conditions, if any

2.3 User-Generated Content

• Meal photographs submitted for AI analysis
• Text descriptions and inputs submitted with meal logs, including your AI-assisted chat communications with the App
• In-app chat messages exchanged with your Nutrition Coach, transmitted and stored via Stream Chat infrastructure

2.4 Usage and Technical Data

We collect limited technical data to operate and improve the App, including app interaction data (features accessed, session duration, error logs) and device type and operating system. Where feasible, this data is collected in aggregated or anonymized form. We do not sell this data to advertisers.

SECTION 3 — HOW WE USE YOUR INFORMATION

We use the information we collect solely for the following purposes:

• To provide and operate the App — including AI meal analysis, nutritional scoring, and personalized feedback based on your profile and goals
• To support Nutrition Coach sessions — when you voluntarily export your data to a Coach (see Section 5)
• To communicate with you — account verification, technical notices, and updates to these Terms
• To improve the App — through aggregated and de-identified analysis of usage patterns; we never use individually identifiable data for this purpose
• To comply with legal obligations — including applicable data protection and breach notification laws

SECTION 4 — THIRD-PARTY INFRASTRUCTURE & DATA SHARING

To deliver the App’s core features, we rely on three trusted third-party infrastructure providers. By using the App, you acknowledge and consent to the following data flows. We do not share your data with any party beyond those listed below for the purposes listed.

4.1 No Sale of Personal Information

4.2 Legal Disclosures

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

SECTION 5 — NUTRITION COACHING & VOLUNTARY DATA EXPORT

The App includes an optional “Export to Coach” feature. This feature is entirely voluntary. You are never required to share your data with a Coach to use the App’s core AI features.

5.1 What the Coach Receives

When you voluntarily activate the Export to Coach function and confirm the “Send to Nutrition Coach” prompt, the assigned Coach is authorized to access the following data for the preceding 7 days:

• Your meal photographs submitted during that period
• AI-generated meal analysis summaries and nutritional feedback
• Your general wellness profile: age, height, weight, health goals, dietary preferences, allergies, and any medical conditions you have disclosed

5.2 Coach Data Handling Obligations

All Nutrition Coaches are employees of CYP Health Technologies LLC and are bound by written employment agreements that prohibit them from:

• Using exported user data for any purpose other than the coaching session for which it was shared
• Disclosing user data to any third party
• Retaining copies of user data outside the App’s infrastructure
• Contacting users through channels outside the App

You may revoke a Coach’s access to your data at any time by contacting support@checkyourplate.com.

SECTION 6 — DATA RETENTION

We retain your data only for as long as necessary to operate the App and fulfill the purposes described in this Policy.

SECTION 7 — YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you have the following rights with respect to your personal information. To exercise any of these rights, contact us at privacy@checkyourplate.com. We will respond within 30 days.

7.1 California Residents — CCPA / CPRA

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know the categories and specific pieces of personal information we have collected about you
• The right to delete personal information we hold about you
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not engage in this practice)
• The right to non-discrimination for exercising your California privacy rights

California residents may exercise these rights by contacting us at privacy@checkyourplate.com or through the in-app privacy request portal.

SECTION 8 — DATA SECURITY

We implement commercially reasonable administrative, technical, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, or destruction, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Role-based access controls limiting employee access to user data
• Regular review of our security practices and third-party provider agreements

SECTION 9 — REGULATORY DISCLOSURES

9.1 HIPAA

9.2 FTC Health Breach Notification Rule

Health-related data collected by the App may be subject to the Federal Trade Commission’s Health Breach Notification Rule (16 C.F.R. Part 318). In the event of a qualifying security breach involving personally identifiable health information, we will provide timely notification to affected users, the FTC, and, where applicable, prominent media outlets, as required by law.

9.3 FDA General Wellness Status

The App is designed and operated as a general wellness product consistent with FDA guidance on “General Wellness: Policy for Low Risk Devices” (2019). The App has not sought and does not hold FDA clearance or approval as a medical device, diagnostic instrument, or clinical decision-support tool. It does not make claims to diagnose, treat, cure, or prevent any disease or medical condition.

SECTION 10 — CHILDREN’S PRIVACY

The App is intended solely for individuals who are 18 years of age or older. We do not knowingly collect personal information from persons under 18. If you believe that a minor has provided us with personal information, please contact us at privacy@checkyourplate.com and we will promptly delete that information.

SECTION 11 — CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via in-app notification or by email to the address associated with your account at least 14 days before the changes take effect, unless immediate changes are required by law.

The “Effective Date” at the top of this page indicates when this Policy was last updated. Continued use of the App after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree with the changes, you must stop using the App and may request deletion of your account.

SECTION 12 — CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the appropriate channel below: