PlateO beta privacy policy

Last updated: 27 October 2026 · Effective from: 27 October 2026 · Version: beta (0.9)

PlateO is a gym app for your iPhone. This page explains, in plain English, what happens to your data in the PlateO app during the beta, and on this website.

The short version. You sign in to use PlateO, with Apple for now. Your workouts live on your iPhone. They are copied to our server in London only if you say yes to a separate backup question. Apple Health data and voice audio never leave your iPhone. There are no ads, no analytics and no tracking. You can delete your account and everything on our server from inside the app.

What PlateO collects, and when

Your account. Sign-in is required in the beta. At the moment the only way in is Sign in with Apple (email codes and Google are switched off for now). PlateO asks Apple for your email address only, not your name. Apple may give us a private relay address instead of your real one. We also hold a random account number made for you. This is stored by our sign-in service when you sign in, whether or not you turn backup on.
Your year of birth. Before you can sign in, PlateO asks for your year of birth (not your full date of birth), to check you are 13 or older. See Children. The year is kept on your iPhone. It only goes to our server as part of backup, and only if you leave profile backup on (see below).
Your training, on your iPhone. Workouts, sets, notes, body weight, settings and what you said (as text) are stored on your iPhone.
Backup to our server (your choice). After you sign in, PlateO asks a separate question: back up your training? It is never ticked for you, and you can answer "Not now, keep it on my phone". If you agree, PlateO copies to our server: your workouts, sets and exercises, exercise notes, conditioning results, cardio pieces and custom workouts you saved, custom exercises you made, your settings and your consent record, and body weight you log. Height, year of birth and sex go too, only if you have added them and have not switched on "Keep my profile on this phone only". Body weight, height and sex are health information, so they also need your separate agreement to PlateO keeping health information. If you withdraw it, they are erased from the server.
Bug reports (your choice). If you tap Send report on the feedback button (the ladybug), PlateO sends what you typed or said as text and whatever you left ticked: the screen you were on, app and iOS version, iPhone model, a trail of recent taps and screens, and a screenshot. You can add a name (optional). The report also carries a random number made for this install, which is not a device ID, so repeat sends can be limited. If you are signed in, the report is linked to your account. Nothing is sent until you tap Send report. If you choose "Email instead", it goes from your own Mail app.
Backup file (your choice). If you turn it on, PlateO writes a file (encrypted if you set a passphrase) to a folder you choose, such as iCloud Drive. It never comes to us.

What never leaves your iPhone

Voice (optional). If you use voice logging, speech is turned into text on your iPhone, using Apple's on-device speech models. Audio is held in memory for a few seconds and is never recorded, stored or sent anywhere. The text of what you said stays on your iPhone, apart from a bug report you choose to send.
Whiteboard photos. If you photograph a gym whiteboard to fill in a workout, the writing is read on your iPhone. The photo is not saved or sent anywhere.
Apple Health. If you allow it, PlateO reads workouts, active and resting energy, body weight, height, year of birth and sex, and (if you turn it on) food energy and macros. It can write workouts, active energy and body weight you log. PlateO never reads heart rate, routes, sleep or steps. Nothing read from Apple Health is uploaded to our server or used for advertising.
Injuries, how you feel today, recovery taps, and what PlateO learns about how you talk.

Where it is kept and who can see it

Your account and backup are held by Supabase, our database and sign-in provider, in a project in London, UK. Supabase handles it on our behalf and under our instructions. It is sent over encrypted (HTTPS) connections only.
Each account can only read and change its own rows. Other PlateO users cannot see your data. Friends and leagues are switched off in the beta.
The person who runs PlateO (Lee Praoline) can open the database and read bug reports in order to run the service and fix problems you report. We do not look at your training for any other purpose, and we never sell it, share it for advertising, or use it to profile you.
Apple handles Sign in with Apple, TestFlight and your Apple Health data under its own policies.

Analytics, ads and tracking

None. PlateO has no analytics, no advertising, no tracking and no third-party software libraries. It does not use your data to track you across other apps or websites.

How long we keep it

Account and backup: until you delete your account. We do not yet delete inactive accounts automatically. When you delete a workout or a weight, a bare "deleted" marker stays on the server so your other devices learn about it, until you delete your account.
Bug reports: deleted after 180 days. A screenshot sent with a report is removed in the next clean-up. If you were signed in when you sent one, deleting your account deletes it too. Email us with the report number if you want one deleted sooner.
Our host's own backups: may keep routine backups for up to 30 days after a deletion.
On your iPhone: until you delete it or delete the app.

Deleting and exporting your data

Delete your account: You, then Account, then Delete my account. This removes your account and every row we hold for you straight away. You need to be online. You can choose to keep the copy on your iPhone or delete that too.
Delete all my data: You, then Your data, then Delete all my data. If you are signed in, this deletes the server copy and your account as well as the data on your iPhone.
Stop backing up: switch backup off in You, then Account. You choose whether to keep or delete your copy on our server.
Export: You, then Your data, then Export everything gives you a file of your training that you can keep or share.
You can also ask us by email (see Who we are) for a copy of what we hold, or for it to be corrected or deleted.

Children

PlateO is for people aged 13 and over. Before you can sign in, PlateO asks for your year of birth. If it says you are under 13, PlateO stops there: it keeps nothing, offers no sign-in, and sends nothing to our server. This check relies on the year you enter. If you think a child under 13 has an account, email us and we will delete it.

This website

No cookies, no analytics, no tracking pixels, no third-party scripts or fonts. So there's no cookie banner.
This website is hosted on Cloudflare. Like every website host, Cloudflare briefly keeps standard server logs, such as your IP address and browser type, to deliver the page and stop abuse. We don't use them to identify or profile you.
The fonts are stored on this website, so loading a page does not contact Google Fonts or anyone else.

What we collect. If you fill in the beta sign-up form: your name, your email address, and, if you choose to tell us, which iPhone you have, what you mainly train and a short note. We also keep a record that you ticked the box agreeing to be emailed about the beta, and when.
Why. To invite you to the closed PlateO beta on TestFlight, and to email you about the beta. Nothing else: no newsletters, no marketing, and it is never sold or shared.
Lawful basis. Your consent (UK GDPR Article 6(1)(a)). You can withdraw it at any time.
Where it goes. The form sends your details to a small program (a Cloudflare Worker) that sits in front of this website. It saves them in Cloudflare's storage, so nothing is lost if an email fails, and emails a copy to the owner's mailbox. Cloudflare handles this on our behalf and under our instructions. Cloudflare runs a global network, so your details may be handled outside the UK, under Cloudflare's data protection terms.
Stopping misuse. To limit repeat sign-ups, the Worker keeps a scrambled (hashed) form of your IP address, which changes every day, for up to an hour. Your IP address itself is not stored with your sign-up.
How long we keep it. Up to 180 days, then it is deleted, from Cloudflare storage automatically and from the owner's mailbox by hand. If you join the beta, Apple's TestFlight then handles your invitation under Apple's own policies. We delete your sign-up sooner if you ask.
Your rights and withdrawing. To withdraw your consent, or to see, correct or delete your sign-up, email hello@plateo.fit. Withdrawing does not affect anything we did with your consent before you withdrew it.

Your rights

Under UK data protection law you can ask to see, correct or delete what we hold about you, ask for a copy you can move elsewhere, or object to how we use it. Much of this you can do yourself in the app (see above). For the rest, email us and we'll reply within one month. For the account, we rely on needing your details to run the service you signed up to; for backup and health information, and for beta sign-ups on this website, we rely on your separate agreement (consent), which you can withdraw at any time.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, though we'd appreciate the chance to put it right first.

Who we are

PlateO is made by Lee Praoline, an individual in the UK, who is the data controller for the app and this website.

Contact: hello@plateo.fit

Changes

If PlateO changes what it collects, for example when friends, leagues or other sign-in methods are switched on, this policy will change before they go live, and the date above will be updated.

← Back to PlateO