Privacy Policy
Last updated: October 22, 2026
This policy explains what Plait collects, why, who helps us process it, how long we keep it and the choices you have. Plait is operated by Multiplai, S.E.P. ("we", "us"), the controller of your data. Contact: support@plait.fit.
The short version
- We use your wearable, body and food data to build your meal plan and guidance. We never sell it and never put health data in advertising.
- Analytics and advertising cookies follow your choice. In the EU, EEA, UK and Switzerland they stay off until you allow them. Elsewhere they are on by default and you can opt out with "Do not sell or share my personal information". Plait honors Global Privacy Control.
- You can download your data or delete your account at any time in the app: You → Your data and account deletion.
How you sign in
- WHOOP or Garmin: you sign in with that account. We receive your name, your email address and permission to read your data. New Garmin accounts also confirm their email address with a code.
- Email: we email you a 6-digit code that works for 10 minutes. Apple Watch accounts sign in this way, and any account can.
- Links in emails: some Plait emails contain a one-tap sign-in link that works for 72 hours. We store only a scrambled (hashed) copy of it.
What we collect
- Account: email address, name, language, time zone, which wearable you use, and the access keys that let Plait read your WHOOP or Garmin data or receive your Apple Health data.
- Body and profile: height, weight, age and sex; your goal; foods you avoid (allergies, dislikes, diets) and foods you like; meals per day and when you train; your answers to the health questions (whether you are 18 or older, and whether you are pregnant or breastfeeding).
- WHOOP data: recovery, heart rate variability, resting heart rate, sleep, strain and calories, workouts and body measurements.
- Garmin data: daily summaries (calories, steps and activity), sleep, activities, stress, heart rate variability and Body Battery.
- Apple Health data (sent by your iPhone): active and resting energy, steps, exercise minutes, sleep, heart rate, heart rate variability, resting heart rate, respiratory rate, VO2 max and workouts.
- What you do in Plait: your meal plans and swaps, the meals you mark as eaten, shopping lists, events you add (such as a race), answers to feedback questions, notification settings and, if you turn them on, the push notification address of your device.
- Payments: your plan, subscription or order number at PayPal, status, amounts and dates. PayPal handles your card or bank details; we never see them.
- How you found Plait: the campaign or page that brought you (for example UTM tags and the Google or Meta click ID), and your cookie and advertising choices.
- Messages: emails you send to support@plait.fit.
- Technical data: IP address and browser details in short-lived server logs, and the sign-in cookie that keeps you signed in.
Plait only reads data from WHOOP, Garmin and Apple Health. It never writes anything back to your wearable account.
How we use it
- To build your calorie and macro targets, your weekly meal plan and, with Pro, meals that follow your training.
- To show your data, daily guidance and the morning briefing in the app, and to send the emails and notifications you chose.
- To keep plans safe: the 18+ check, maintenance instead of a deficit when you are pregnant, breastfeeding or in a lower weight range, and a daily calorie floor.
- To answer support requests, handle payments and keep billing records.
- To measure our advertising, only within your cookie and advertising choices (see below).
- To find bugs and improve Plait, for example by checking that plans meet their targets.
- To publish anonymous statistics about groups of users (see below).
If you are in the EU, EEA, UK or Switzerland, our legal bases are: providing the service you asked for (your account, plans and payments); your consent (health data, analytics and advertising cookies, and email matching); our legitimate interests (security, preventing abuse, fixing bugs and improving Plait); and legal obligations (billing records).
Health data
Your wearable readings, your body details and your answers about pregnancy and breastfeeding are health data. Plait uses them only to provide Plait to you, never for advertising, and never sells them.
If you are in the EU, EEA, UK or Switzerland, we process health data on the basis of your explicit consent, which you give when you choose to connect a wearable or enter these details. You can withdraw it at any time by disconnecting your wearable (You → Connections → Disconnect) or by deleting your Plait account. Withdrawing does not affect what was done before.
Consumer Health Data Privacy Policy (US states)
Some US states, such as Washington, Nevada and Connecticut, give you extra rights over consumer health data. At Plait this means your wearable readings, body details, health question answers, food restrictions, meal plans and meal log.
- What we collect, from where and why: the data listed above, from you and from your wearable company (WHOOP, Garmin, or Apple Health through your iPhone), only to provide Plait.
- Who receives it: only the service providers listed below that need it to run Plait, such as our hosting and database providers and OpenAI. We do not sell consumer health data and do not share it with advertisers.
- Your rights: to know whether we hold your consumer health data and get a copy, to have it deleted, to withdraw your consent, and to see the list of companies we share it with (below).
- How to use them: download or delete your data in the app (You → Your data and account deletion), or email support@plait.fit. We answer within 45 days. If we turn down your request, you can appeal by replying "Appeal"; we answer appeals within 45 days, and if we turn down an appeal you can contact your state's attorney general.
Who processes your data
We use these companies to run Plait. Each receives only what it needs for its job.
- Heroku (Salesforce): hosts the Plait app and its server logs.
- MongoDB Atlas: our database.
- OpenAI: helps choose the foods and dishes in your plan and swaps, reads the messages you send the coach, writes short insight texts, draws meal pictures and translates older plans. It receives your targets, food preferences and restrictions, when you train, meal names, your recent coach messages and number summaries of your data. It does not receive your name or email address.
- PostHog: product analytics and session recordings (see below).
- Google: Google Analytics and Google Ads measure visits and our campaigns. Google Fonts serves the typefaces on our pages, so Google sees your IP address when they load.
- Meta (Facebook, Instagram): the Meta pixel and Meta's Conversions API measure our ads.
- X: the X advertising pixel, after you allow advertising cookies.
- Resend: sends Plait's emails.
- PayPal: handles payments, including Apple Pay and Google Pay when offered at checkout.
- Push services (Apple, Google, Mozilla, Microsoft): deliver notifications to your device if you turn them on.
WHOOP, Garmin and Apple are where your data comes from; we do not send them your Plait data. When you delete your account, we tell WHOOP and Garmin to remove Plait's access.
Advertising choices
If advertising cookies are allowed, Meta, Google and X may use visits and non-sensitive events to measure Plait campaigns and show relevant Plait ads. When you create an account, start using your plan or buy Pro, Plait may also send that event to Meta and Google with ad-click identifiers, your IP address and browser details. These events never contain wearable readings, health data or meal contents.
In the European Economic Area, the United Kingdom and Switzerland, Plait loads no optional analytics or advertising cookies until you choose Allow selected. Plait uses your browser's time zone to decide this; if the time zone is unavailable or generic, the same opt-in rule applies.
Elsewhere, including the United States, analytics and advertising cookies are on by default and a notice tells you so. Some US state laws may treat this advertising use as selling or sharing personal information. To opt out, choose "Do not sell or share my personal information" in the notice or page footer, or choose Essential only with the button below. Your choice is saved in this browser and, when you are signed in, on your account.
Plait honors Global Privacy Control. If your browser sends this signal and you have not made a choice, optional analytics and advertising cookies stay off, and Plait does not record advertising permission from a request that carries the signal.
In every region, sharing a hashed version of your account email with Meta and Google (email matching) requires your separate, explicit selection. Hashing is a matching technique, not anonymization.
Email matching is optional and is not required to use Plait. We do not include wearable readings, health metrics, meal contents or fitness goals in customer lists. Declining a choice does not affect your account or paid features. You can withdraw permission using the button below; we stop new exports and remove previously shared list entries through the relevant advertising service.
Analytics and session recording
PostHog helps us see how people use Plait so we can fix problems. On public pages it runs when analytics is on. In the app it runs only after you allow analytics in this browser, and then it records sessions: what appears on screen, taps and clicks, scrolling and page changes.
Recordings hide what you type into form fields, but other things on screen, such as your plan and its numbers, can appear in them. In the app, analytics is linked to your account email. Our server also sends PostHog product events (for example "plan created") for accounts whose analytics setting is on.
Choose Essential only with the button above to turn PostHog off in this browser.
Email measurement
If analytics is allowed, Plait can measure requests for links in its emails, visits after you sign in, and whether you load a meal plan. Optional HTML emails sent with analytics permission may also contain a small image that records an image request. Email apps can load images or check links automatically, so these signals do not prove that you read a message.
Essential account and payment emails do not include an open-tracking image. Choosing Essential only stops new email engagement recording for your account after your preference is saved. New emails require analytics permission when sent as well as when the image or link is requested. This measurement does not record your IP address, browser details or wearable readings, and message records expire after 90 days.
Every email that is not about your account or a payment has an unsubscribe link.
Anonymous statistics
We publish statistics about groups of Plait users on our press data page, for example how sleep or calorie burn varies across the week. Each figure combines at least 30 people, leaves out smaller groups, and contains no names, emails or individual records. They can use wearable data and profile details such as age, sex, height and weight. If you would rather be left out of future figures, email support@plait.fit.
How long we keep data
- Until you delete your account: your account, profile, preferences, meal plans, meal log and the wearable data Plait keeps. Plait keeps a recent window of wearable data: about the last 60 days of daily Garmin and Apple data and up to 120 workouts, and the latest 200 WHOOP records of each kind.
- Shorter periods: sign-in codes 10 minutes; email sign-in links 72 hours; sign-in sessions 30 days; temporary advertising signals (IP address and browser details) up to 14 days; daily plan adjustments 14 days; email engagement records 90 days; answers to plan feedback questions 180 days.
- Email-only sign-ups (an email address left on our website without an account): until you ask us to delete it. You can unsubscribe from any of these emails at any time.
- After you delete your account: we delete your data straight away. For accounting, we keep payment records (PayPal numbers, amounts and dates) without your email address. If our database provider keeps backup copies, they are overwritten on its schedule.
Your rights and choices
- Access and portability: You → Your data and account deletion → Download my account data gives you a copy of your data as a file.
- Correction: change your profile, measurements and preferences in the app, or ask us.
- Deletion: You → Your data and account deletion → Delete account and personal data. Cancel any active PayPal subscription first.
- Disconnecting a wearable: In Plait, go to You → Connections → Disconnect. For WHOOP and Garmin we ask them to remove the access Plait has; for Apple Watch your sync link stops working. You can also remove Plait from the connected apps in your WHOOP or Garmin account. Data already received stays until you delete your account.
- Cookies and advertising: the button above, or "Do not sell or share my personal information".
- Emails: the unsubscribe link in any email that is not about your account or a payment.
- Objection, restriction and other requests: email support@plait.fit. If you are in the EU, EEA, UK or Switzerland, you can also complain to your data protection authority.
Using these rights never changes your price or the features you paid for.
Children
Plait is for adults 18 and over. We do not knowingly collect data from anyone under 18. If you answer that you are under 18, Plait does not build plans for the account. If you believe someone under 18 uses Plait, email support@plait.fit and we will delete the account.
Security
Plait uses encrypted connections (HTTPS). Sign-in sessions are stored encrypted, and sign-in links are stored only as hashes. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
Where data is processed
Plait and most of the companies above process data in the United States, and some in other countries where they operate.
Changes to this policy
If we make important changes, we will tell registered users by email or in the app before they take effect.
Contact us
Plait is operated by Multiplai, S.E.P., the controller of your data. Questions about this policy or your data: support@plait.fit.