Last Updated: May 13, 2026 Effective Date: May 13, 2026

Introduction

This Privacy Policy explains how Lasyaa AI Tech Pvt Ltd (referred to in this document as "we", "us", or "our") collects, uses, and protects your information when you use the DesiPlate mobile application and the related website at https://desiplate.kriva.studio. These are together referred to as the "Service".

DesiPlate is a nutrition tracking application designed for people who eat South Asian food. The app helps you log meals, understand your nutrition, track your daily macro and micronutrient intake, and view a Diabetes Risk Score based on the food you eat.

DesiPlate is currently in a beta development stage. Some features, integrations, and policies may evolve as the product matures. This document will be updated whenever significant changes occur.

We have written this policy in plain language because we want you to actually read it. If anything is unclear, please reach out to us using the details in the Contact section at the end.

Who This Policy Applies To

This Privacy Policy applies to anyone who:

• Downloads or installs the DesiPlate mobile application on iOS or Android
• Creates a DesiPlate account
• Uses any feature of the app, whether on the free tier, free trial, or paid subscription
• Joins the DesiPlate beta program or signs up to the waitlist
• Visits our website
• Contacts our support team

If you do not agree with this policy, please do not use DesiPlate.

Information We Collect

We collect information in a few different ways. The sections below explain what we collect, how we collect it, and why we collect it.

Information You Provide Directly

When you create an account or use DesiPlate, you may provide us with:

Account information. Your name, email address, and password. If you sign in with Apple or Google, we receive your name and email from those sign-in services.

Onboarding information. During onboarding, you tell us your cuisine heritage, country or region, primary health goal, dietary preference (such as vegetarian, vegan, halal, or Jain), and any health conditions you choose to disclose.

Meal and nutrition data. Every meal you log, including the dish name, portion size, cooking fat used, and the time you logged it. This is the core data the app exists to track.

Photos of meals. When you use the AI photo recognition feature, you take a photo of your meal. This photo is sent to our processing system to identify the dish.

Recipes. Any recipe you save in your Family Recipe Vault, including the name, ingredients, quantities, and any notes you add.

Feedback and communication. When you contact our support team, submit beta feedback, or fill out forms on our website, we receive whatever information you choose to send us.

Subscription information. If you choose to subscribe, the payment itself is processed by the Apple App Store or Google Play Store. We do not receive your full payment details. We do receive a confirmation that you have an active subscription, along with the type of plan you chose.

Information Collected Automatically

When you use DesiPlate, we automatically collect certain technical information that helps the app function properly and helps us improve the product.

Device information. The type of device you are using, the operating system version, the app version, your device language, and time zone.

Usage information. Which features you use, how often you use them, when you open the app, and how long you spend on different screens. This is anonymised analytics data, not tied to your personal identity.

Crash and diagnostic data. If the app crashes or behaves unexpectedly, we receive diagnostic information that helps us identify and fix the problem.

Push notification token. A unique token that allows us to send you notifications such as meal reminders, streak alerts, and weekly progress summaries. You can disable these notifications at any time from your device settings or from within the app.

Information from Third Parties

If you sign in using Apple or Google, those services share basic identity information with us (typically your name and email). We do not receive your contacts list, your other apps, your browsing history, or anything else from those services.

Permissions We Request

DesiPlate requests certain permissions on your device. These permissions are only used for the specific purposes described below.

Camera access. Required for the AI photo recognition feature. The camera is only activated when you tap the camera button inside the app. We do not access your camera in the background.

Photo library access. Optional. If you choose to upload a meal photo from your existing library instead of taking a new one, the app needs permission to read photos you select. We only read the specific photos you choose. We do not scan your entire library.

Notifications. Optional. Used to send meal reminders, streak reminders, weekly progress reports, and health alerts you have configured.

Internet access. Required for the app to function. Used to sync your data, run AI dish recognition, fetch your subscription status, and communicate with our servers.

We do not request access to your contacts, your location, your microphone, your call history, your messages, or your other apps.

How We Use Your Information

We use the information described above for the following purposes.

To run the app. We use your account information and meal logs to provide you with the nutrition tracking experience the app is built for. This includes calculating your daily nutrition, generating your Diabetes Risk Score, tracking your micronutrient intake, and storing your saved recipes.

To personalise your experience. We use your cuisine heritage, dietary preference, and health goals to surface relevant food suggestions, prioritise certain dishes in the database, and tailor the health insights you see.

To process meal photos. When you take a photo of a meal, the image is sent to our AI processing service for dish recognition. The AI returns the predicted dish name, and you confirm or correct it before logging.

To generate health insights. We periodically analyse the meals you have logged over recent days and generate plain-language insights about your patterns. This processing happens on our servers and the resulting insight is stored in your account.

To send notifications. If you opt in, we send meal reminders, streak reminders, weekly summaries, and alerts about nutrition patterns.

To manage your subscription. We use your subscription information to determine which features you have access to, when your trial ends, and when your subscription renews.

To provide customer support. When you contact us, we use your account details and the information you provide to respond and resolve your issue.

To improve the app. We use anonymised usage analytics and crash data to understand which features are working well, where users get stuck, and what we should build next.

To prevent abuse and protect users. We may review activity that appears to violate our Terms and Conditions or that suggests fraudulent or harmful behaviour.

To meet legal obligations. We may process information when required by applicable law, regulation, or court order.

We do not use your health data, your meal photos, or your personal nutrition information for advertising. DesiPlate does not show advertisements and does not sell or rent your information to advertisers.

How Long We Keep Your Information

Different types of information are kept for different periods of time.

Account information. Kept for as long as your account is active. If you delete your account, this information is removed from our active systems within a reasonable period.

Meal logs, recipes, and health data. Kept for as long as your account is active. You can export or delete this data at any time from within the app.

Meal photos. Photos used for AI recognition are typically deleted within thirty days. They are not kept long term. Once the AI has recognised the dish and you have logged the meal, the photo is no longer needed for the app to function.

Subscription records. Kept for the period required by applicable financial and tax regulations, even after your subscription ends.

Support communications. Kept for a reasonable period so we can refer back to past issues if you contact us again.

Anonymised analytics. Anonymised data that cannot be linked back to you may be retained for longer periods to help us understand long-term trends in the product.

When information is no longer needed for the purposes described in this policy, we will either delete it or anonymise it so it can no longer be associated with you.

Who We Share Your Information With

We do not sell your personal information. We do not rent it. We do not share it with advertisers. We do not share it with data brokers.

We do share certain information with the following categories of service providers, but only to the extent needed for them to perform the specific service we have engaged them for.

Cloud infrastructure providers. We use third-party cloud services to host our application, store data securely, and run our backend systems. These providers store the data on our behalf but do not use it for their own purposes.

AI processing services. Meal photos are processed by an AI service to identify the dish. The AI provider processes the image and returns the predicted dish name. They do not retain your image for their own training or commercial purposes beyond what is needed to provide this specific service.

Subscription management. We use a third-party subscription management service to handle subscription status, trial periods, and renewals across iOS and Android. This service receives information about your subscription status but does not receive your meal data or health information.

Analytics and crash reporting. We use analytics tools to understand how the app is used and to identify crashes and bugs. The data sent to these tools is anonymised wherever possible.

Payment processors. Payments for subscriptions are processed by the Apple App Store and Google Play Store. We do not receive or store your full payment card details.

Support tools. When you contact us, your message and email address may be processed by a customer support tool to help us respond to you efficiently.

We may also share information in the following limited circumstances:

• If we are legally required to do so by a valid legal request, court order, or regulation
• If we believe in good faith that sharing is necessary to investigate fraud, abuse, or threats to the safety of users
• In connection with a merger, acquisition, or sale of all or part of the business — in which case the receiving party would be required to honour this policy or notify you of any changes
• With your explicit consent, if you ask us to share specific information for a specific reason

Data Security

We take reasonable steps to protect your information. These steps include encrypted connections between the app and our servers, encrypted storage of sensitive data at rest, access controls limiting who within the company can see user data, and regular reviews of our security practices.

No system on the internet is completely immune to risk. We cannot guarantee absolute security, but we work to apply industry-standard practices and to respond quickly if we ever become aware of an issue.

If we ever become aware of a security incident that materially affects your information, we will notify you in accordance with applicable law.

Your Rights and Choices

You have several rights regarding your information. The exact rights available to you may depend on the laws of the country you live in.

Access your data. You can view your meal logs, recipes, and health data at any time from within the app.

Export your data. You can export all your data from within the app at any time.

Correct your data. You can edit your profile information, your meal logs, and your recipes directly inside the app.

Delete your data. You can delete individual meals, recipes, or other entries inside the app. You can also delete your entire account, which will remove your personal data from our active systems within a reasonable period.

Withdraw consent. Where we rely on your consent to process information, you can withdraw that consent at any time. This will not affect any processing that took place before your withdrawal.

Manage notifications. You can turn notifications on or off from inside the app or from your device settings.

Opt out of analytics. You can disable optional analytics from the app settings.

Object or restrict processing. Depending on your local law, you may have additional rights to object to or restrict certain processing. You can contact us if you want to exercise these rights.

To exercise any right that requires our help, contact us using the details in the Contact section.

Children

DesiPlate is not intended for children under the age of thirteen. We do not knowingly collect information from children under this age. In some jurisdictions, the minimum age is higher, and you must meet the age threshold required in your country.

If you believe a child has provided us with personal information, please contact us. We will take appropriate steps to remove that information from our systems.

We expect parents and guardians to supervise the use of DesiPlate by minors and to review this policy on their behalf.

International Data Transfers

DesiPlate is available to users around the world. Your information may be stored or processed in countries other than the country you live in. Where this happens, we take reasonable steps to ensure that your information continues to be protected to a standard consistent with this policy and with applicable law.

Changes to This Policy

DesiPlate is a beta-stage product and the way we handle information may evolve over time. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of the document and may also notify you through the app or via email.

For minor or clarifying changes, we may simply update the document on our website.

We encourage you to review this policy from time to time so you are aware of how your information is being handled.

Contact

If you have questions, requests, or concerns about this Privacy Policy or about how your information is handled, please contact us at:

• Company: Lasyaa AI Tech Pvt Ltd
• Website: https://desiplate.kriva.studio
• Support Email: support@desiplate.kriva.studio
• Support Phone: support@desiplate.kriva.studio
• Business Address: support@desiplate.kriva.studio

We aim to respond to all privacy-related queries within a reasonable timeframe.