Last updated 22 May 2026. Effective 22 May 2026. Data controller: Murdoch Dietary Limited (“Plait Health”). Contact: plaithealth@gmail.com.
Who we are
Plait Health is a nutrition app for people managing chronic health conditions, built and operated by Murdoch Dietary Limited.
Data we collect
- Account data: your email address, for sign-in and account recovery.
- Health data you choose to provide: conditions, allergies, medications, life stage, symptoms, dietary preferences, and tracked markers (blood pressure, weight, blood glucose, sleep, and custom markers).
- Meals you log: food entries, scanned photos, and notes.
- App usage: anonymous events about screens visited and features used, to improve the app, never tied to your identity in third-party analytics.
- Purchase data: subscription status, product identifiers, and renewal dates. Plans are $4.99 per week or $179.99 per year, billed through your Apple ID on iPhone or by card via our web checkout, with auto-renewal until cancelled.
How we use your data
- To personalise meal plans, AI scanner warnings, and tracking insights.
- To authenticate you at sign-in.
- To send notifications you opt into, such as meal reminders and weekly summaries.
- To provide customer support.
- To detect and prevent abuse, fraud, and security incidents.
- To comply with our legal obligations.
We do not use your health data for advertising, profiling for marketing, or sale to any third party.
Where your data is stored
Your data is stored encrypted at rest in Supabase (PostgreSQL, hosted on AWS infrastructure). Row-level security ensures only your authenticated account can access your records. Scanned photos are kept in private buckets accessed via short-lived signed URLs.
Third-party processors
We use carefully selected processors, bound by data processing agreements:
- Supabase Inc.: authentication, database, storage, and edge functions.
- Anthropic, PBC: the AI model powering the food scanner. Photos submitted for analysis are not retained for training under our enterprise agreement.
- Apple Inc.: payments, subscription management, push notifications, and App Store distribution.
- RevenueCat, Inc.: subscription-state synchronisation, using anonymous product identifiers only.
- Stripe, Inc.: card payment processing for web subscriptions.
Sharing
We do not share, rent, lease, or sell your personal or health data to any third party for marketing, advertising, or analytics. We may disclose data only when you request it, when it is required by law or court order or to protect rights, property, or safety, or in connection with a merger, acquisition, or asset sale, with prior notice and an opportunity to delete your data.
Your rights
- Access: request a copy of all your data.
- Correct: update or correct inaccurate information.
- Delete: wipe your account and all associated data with one tap in Settings, Privacy, Delete account.
- Restrict or object: limit how your data is used, including opting out of analytics.
- Portability: receive your data in a machine-readable format.
Email plaithealth@gmail.com to exercise any of these rights. We aim to respond within 30 days.
Children
Plait Health is rated 13+ on the App Store and is not designed for children under 13. We do not knowingly collect data from children under 13.
Security
Our security measures include bcrypt-hashed passwords, authentication tokens stored in the Apple Keychain via the iOS Secure Enclave, TLS-encrypted API traffic, and row-level database security. Report any vulnerability to plaithealth@gmail.com.
International transfers
We operate from New Zealand, and your data may be processed in other jurisdictions, notably the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
Changes to this policy
Material changes will be notified in-app at least 30 days before they take effect. Minor clarifications may be made at any time, with the date at the top updated to reflect them.
Contact
Privacy questions, security concerns, and general support: plaithealth@gmail.com.