Privacy Notice

Who is responsible

piato decides what happens to your data and is responsible for it.

Write to privacy@piato.me with any question about this notice. You get an answer within 30 days.

piato runs in the European Union and your data stays there.

What piato stores

Your email address. It is how you sign in, and it is the only way to reach you.

What you told piato about your body: sex, date of birth, height, current weight, target weight, and how active you are. Every weight you enter is kept, so the app can show the trend.

The name you chose. It is optional, and it can be a nickname.

Your meals: the photographs, anything you typed about them, and the foods and nutrient numbers worked out from them.

Your settings: language and time zone.

The version of these documents you accepted, and the day you accepted it.

This is health data

Your weight and your eating history say something about your health. European law calls this a special category of data and asks for your explicit permission before anyone may handle it.

That permission is what you give when you tick the box. It is the legal basis for everything described here.

You can withdraw it at any time. Because there is no part of piato left once the food and the weight are gone, withdrawing it closes your account and deletes your data.

Why piato uses it

To sign you in and keep you signed in.

To work out your daily calorie and nutrient targets from the formula, and to keep them honest against the weight you actually record.

To read your food photographs and turn them into a list of items with numbers.

To show your own history back to you.

To show the community screen described below.

Nothing is used for advertising. Nothing is sold. Nothing goes to a data broker. There is no profiling beyond the arithmetic that produces your own targets.

Who else touches it

Supabase stores the database, the accounts and the photographs, on servers in the European Union.

Vercel runs the application itself, from Dublin.

Anthropic reads your food photographs and your notes and returns the nutrition estimate. Anthropic does not use what is sent through its API to train its models.

Resend sends the sign-in email. It sees your email address and nothing else.

Each of these acts only on instruction and may not use your data for its own purposes.

What other members see

The community screen shows every other member the name you chose, how close you came to your four targets today, and how many days you logged this week.

It never shows your email address, your weight, your target weight, your photographs, or what you ate.

There is no way to hide from that screen today. If you would rather not appear on it, write to privacy@piato.me and your account will be closed.

How long it is kept

A full photograph is kept for 30 days, so that you can still correct an old meal. After that only a small thumbnail remains, for the journal.

Everything else is kept until you ask for it to go.

When your account is deleted, all of it is deleted with it, photographs included. This cannot be undone.

Your rights

Ask for a copy of everything piato holds about you.

Correct anything that is wrong. Most of it you can correct yourself in Settings.

Delete your account and everything in it.

Withdraw your permission, which has the same effect as deleting the account.

Object to what is done with your data, or ask for it to be restricted.

Complain to the data protection authority in your country. In Italy that is the Garante per la protezione dei dati personali.

For any of these, write to privacy@piato.me.

Cookies

piato puts two things in your browser: one that keeps you signed in, and one that remembers your language.

There is no analytics, no advertising, and no tracking of any kind. This is why piato never asks you to accept cookies.

Children

piato is not for anyone under 18. If an account turns out to belong to a child, it is deleted.

When this notice changes

New wording means a new version, and piato asks you to accept it before you carry on.

The version you accepted, and the day you accepted it, stay on record.