Legal

A Plate in Time - Privacy Policy

Last updated: May 8, 2026

This Privacy Policy explains how A Plate in Time ("we", "our", or "us") collects, uses, stores, and protects personal information when you use our website, applications, APIs, and related services.

1. Information We Collect

We may collect the following categories of information.

Account Information

When you create an account, we may collect:

  • name;
  • email address;
  • password credentials (stored securely and hashed);
  • account preferences;
  • country and language preferences.

Content You Create

We may collect and store:

  • recipes;
  • uploaded images;
  • comments;
  • categories and tags;
  • AI-assisted content submissions;
  • saved drafts and edits.

Technical Information

We may collect:

  • IP address;
  • browser type;
  • device information;
  • operating system;
  • session identifiers;
  • usage activity;
  • access timestamps.

Analytics and Usage Data

We may collect information about:

  • pages viewed;
  • search activity;
  • feature usage;
  • AI usage metrics;
  • uploads and storage usage;
  • interactions with the Platform.

Cookies and Similar Technologies

We may use cookies and similar technologies for:

  • authentication;
  • security;
  • remembering preferences;
  • analytics;
  • performance optimization.

You can manage cookies through your browser settings.

2. How We Use Information

We use information to:

  • provide and operate the Platform;
  • authenticate users;
  • manage accounts and subscriptions;
  • deliver AI-assisted features;
  • improve recipes and search functionality;
  • monitor performance and security;
  • detect abuse or fraud;
  • communicate with users;
  • comply with legal obligations.

3. AI and Automated Processing

The Platform may use third-party AI providers to process prompts, recipe content, and editing requests.

Information submitted to AI-powered features may be transmitted to external AI service providers solely to provide requested functionality.

You should not submit:

  • sensitive personal data;
  • confidential business information;
  • payment data;
  • highly private information

AI-generated outputs may be stored for operational, debugging, moderation, or improvement purposes.

4. Legal Bases for Processing (UK GDPR / EU GDPR)

Where applicable, we process personal data under one or more of the following legal bases:

  • performance of a contract;
  • legitimate interests;
  • consent;
  • compliance with legal obligations.

5. Sharing of Information

We may share information with:

  • hosting providers;
  • analytics providers;
  • authentication providers;
  • cloud storage providers;
  • email service providers;
  • AI service providers;
  • CDN and infrastructure providers.

We may also disclose information:

  • when required by law;
  • to protect rights or safety;
  • during a merger, acquisition, or business transfer.

We do not sell personal information.

6. Data Retention

We retain information for as long as reasonably necessary to:

  • operate the Platform;
  • comply with legal obligations;
  • resolve disputes;
  • enforce agreements;
  • maintain security and audit records.

Uploaded content and account information may remain in backups or logs for a limited period after deletion.

7. Security

We implement reasonable technical and organizational safeguards designed to protect information, including:

  • authenticated access controls;
  • encrypted connections (HTTPS);
  • token/session security;
  • audit logging;
  • role and feature-based access controls.

However, no system can guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

  • access your data;
  • correct inaccurate information;
  • request deletion;
  • object to processing;
  • request portability;
  • withdraw consent;
  • lodge a complaint with a supervisory authority.

To exercise your rights, contact us using the details below.

9. International Transfers

Your information may be processed or stored in countries outside your jurisdiction.

Where required, we use reasonable safeguards for international transfers.

10. Children’s Privacy

The Platform is not intended for children under 13.

We do not knowingly collect personal data from children under 13.

11. Third-Party Links

The Platform may contain links to external websites or services.

We are not responsible for third-party privacy practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Updated versions will be posted on this page with a revised effective date.

13. Contact

For privacy-related requests or questions:

Email: [email protected]

If you are located in the UK or EU, you may also lodge a complaint with your local data protection authority.