Skip to main content

Platedby Estopia Engineering

Privacy Policy

Last updated: 21 October 2026

On this page
  1. Who We Are
  2. What Stays on Your Device
  3. Importing Recipes
  4. Genuine App Checks
  5. Discover
  6. Estopia Account
  7. Encrypted Sync
  8. Purchases
  9. Why We Use Your Data
  10. Transfers and Retention
  11. Your Rights and Deleting Your Data
  12. Children
  13. Changes
  14. Contact

Who We Are

Plated is a recipe app for iPhone, iPad, Apple Watch and Android made by Estopia Engineering Ltd, a company registered in Scotland (company number SC874827) ("we", "us", "our"). We are the controller of the personal data described here. This policy covers the Plated app, including its widgets, share extension and shortcuts; our main privacy policy covers estopia.net and Estopia accounts.

In short: Plated has no ads, analytics or crash reporting, your recipes stay on your device unless you turn on sync, and sync is end-to-end encrypted so we can't read it.

What Stays on Your Device

You don't need an account to use Plated. The recipes you save, your grocery list and your settings are stored on your device. We can't see them.

  • Apple Watch: the watch app gets your grocery list and recipes from Plated on your iPhone, directly between your devices.
  • Widgets, Live Activities, Siri and Spotlight: recipe titles, grocery items and Cook mode steps are shown on your Home Screen, Lock Screen and in search using data on your device. Siri requests are handled by Apple under its own privacy policy.
  • Notifications: Cook mode timer alerts are scheduled on your device. We don't send push notifications.
  • Camera: used only to scan a pairing code when you turn on encrypted sync. The image never leaves your device.
  • Backups: your device's own backups (such as iCloud or Google backups) may include your Plated recipes and grocery list, under Apple's or Google's terms. On Android, your sign-in and encryption keys are left out of backups.

If you delete the app, the data stored on your device is deleted with it.

Importing Recipes

When you paste or share a link to a recipe website, a YouTube video or a TikTok video, Plated sends that link to our API at api.estopia.net. Our server then:

  • removes tracking parameters from the link and fetches the content from the site it points to: the web page, a YouTube video's title and description, or a TikTok video's caption and creator name. Our server fetches it, not your device, so the site doesn't see your IP address;
  • sends the link and that text to an AI model through our own AI gateway. The model is currently Google Gemini, which turns the text into a structured recipe (title, ingredients, steps and so on);
  • returns the recipe to the app, and keeps a copy of the result for that link so that importing the same link again is faster. This copy is stored against the link only, with nothing about who imported it.

We only send the link and the content found at it. We don't send your name, email address, IP address or saved recipes to the AI model. Google processes the content to give us the result, under its terms for paid API customers, which don't allow it to use the content to train its models.

Daily import allowance: to stop the service being abused, we count how many recipes you import each day. If you're signed in, the count is kept against your Estopia account. If not, it's kept against a scrambled (hashed) form of your IP address, which we can't turn back into the address.

Genuine App Checks

Imports only work from the genuine Plated app on a genuine device, which stops automated abuse of the service. To check this:

  • On iPhone and iPad, Plated uses Apple's App Attest and DeviceCheck. The app creates a key on your device and registers its public part with us. We store that key and a counter, not linked to your account. We also send a DeviceCheck token to Apple, which lets us keep two flags for your device on Apple's servers. We use one of them to mark a device that goes over its daily import allowance, which gives it a smaller allowance until the end of that month. Apple doesn't tell us who you are or which device it is.
  • On Android, Plated uses Google's Play Integrity. The app gets a token from Google Play, our server sends it to Google, and Google tells us whether the app and device are genuine. We don't store the result.

Discover

The Discover feed shows recipes from Spoonacular, a recipe database. The app asks our API for these recipes and our server requests them from Spoonacular, so we don't pass anything about you to Spoonacular. Recipe images load straight from Spoonacular's servers or the original website, which will see your IP address, as with any image on the web.

Estopia Account

Signing in with an Estopia account is optional. It lets you use Plated Pro on all your devices, on iPhone, iPad and Android, and turn on sync. When you sign in, Plated receives your Estopia account ID, username and profile picture. Your sign-in is stored securely on your device (in the Keychain on Apple devices, encrypted on Android).

Your Estopia account itself is covered by our main privacy policy. If you sign out, sync turns off and your recipes stay on your device.

Encrypted Sync

Sync is off until you turn it on. When it's on, your recipes and grocery list are end-to-end encrypted on your device before they reach our servers, with keys that only your devices hold. We can't read them, and neither can anyone who gets into our servers.

To make this work, we store:

  • Your encrypted data, plus what we need to sync it: an ID, size, version number and time for each item.
  • Your devices: a name for each device you add (such as "Plated on Pixel 9"), its type and its public key, so your devices can share your encryption keys with each other. You can see and remove devices in Settings.
  • A recovery copy of your keys, locked with your recovery code. We never see the code itself, so we can't open it.

These keys are shared by the Estopia apps you use with the same account, so a device you trust in one Estopia app can be trusted in another.

Earlier versions of Plated synced without end-to-end encryption. When you update while signed in, the app copies that data back to your device and deletes the old unencrypted copy from our servers. Nothing is uploaded again until you turn on encrypted sync. Any old copy that's still there is deleted when you delete your Estopia account.

Purchases

Plated Pro is bought through the App Store or Google Play. Payment is handled by Apple or Google; we never see your card details.

  • Signed out: your purchase stays with the App Store or Google Play, and the app checks it on your device. We don't receive it.
  • Signed in: the purchase is tagged with your Estopia account ID, and the app sends us the store's receipt so Pro works on your other devices. We store which account it belongs to, the store, the plan, its status, when it renews or expires, and the store's transaction or purchase IDs. We check these with Apple's App Store Server API or Google's Play Developer API, and Apple and Google tell us when a subscription renews, is cancelled or is refunded.

We don't use any other subscription or payment service.

Under UK data protection law, we rely on:

  • Contract: to import recipes you ask for, provide Discover, sync your data and provide Plated Pro on your devices.
  • Legitimate interests: to keep the app and our API secure, check that requests come from the genuine app, prevent abuse, and fix problems.
  • Legal obligation: to keep records we're required to keep, and to respond to lawful requests.

We don't sell your data or use it for advertising, and Plated doesn't use analytics or crash-reporting services.

Transfers and Retention

Some of the services we use, including Google and Apple, may process data in the United States or other countries outside the UK. Where they do, we rely on safeguards recognised under UK law, such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.

We keep data only as long as we need it:

  • Encrypted sync data and devices: until you delete them, reset your encryption keys or delete your account.
  • Subscription records: while your subscription is linked to your account, and as long as we need them for accounting and tax.
  • Daily import counts: up to 90 days.
  • Server logs (which include your IP address, the address requested and, if you're signed in, your account ID): a short time, usually a few days.
  • Imported recipe copies and App Attest keys aren't linked to you, and we keep them while they're useful.

Backups of our servers may hold deleted data for a short time longer before they're overwritten.

Your Rights and Deleting Your Data

You can ask to access, correct, delete or receive a copy of your personal data, or object to or restrict how we use it.

  • Without an account: delete the app to remove your recipes and grocery list from your device.
  • Synced data: use Delete Synced Data in Settings to remove Plated's synced copy from our servers for all your devices. Copies on your devices stay.
  • Your Estopia account: use Delete Estopia Account in Settings. This deletes your account, your synced data, your devices and keys, and your subscription records linked to the account.
  • Anything else: email [email protected], for example to ask what we hold about you. We reply within one month. Because synced data is end-to-end encrypted, we can only give you an encrypted copy of it; your recipes are always available to you in the app.

Cancelling Plated Pro is done through your App Store or Google Play subscriptions; deleting the app or your account doesn't cancel it.

If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, though we'd like the chance to sort it out first.

Children

Plated is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

Changes

We may update this policy, for example when the app gains new features. We'll change the date at the top of this page, and tell you in the app if a change is significant.

Contact

Questions about this policy or your data: email [email protected] or use the Plated support form.