Privacy Policy

Effective date: August 7, 2026

This Privacy Policy explains how First Plate (the “App”), developed and operated by XenDevApp (“we,” “us,” or “our”), handles information when an adult caregiver uses the App and its related services.

1. Scope and intended users

This Policy applies to the First Plate Android application, related support communications, and websites that link to this Policy. First Plate is intended for parents, legal guardians, and other adult caregivers. It is not directed to children and should not be used independently by a child.

Because caregivers may enter information relating to a baby or child, the adult providing that information confirms that they have the authority to do so and are responsible for using the App in the child’s best interests.

2. Information stored locally on your device

First Plate may store the following information locally so the App can provide personalization:

• Baby name, birth date or age range, and optional gender selection;
• Optional caregiver role;
• Pantry foods, saved foods, and saved recipes;
• Foods marked as tried, date of first tasting, optional tasting notes, and liked/disliked reactions;
• Optional meal-serving outcomes (such as touched, tasted, ate, enjoyed, not today, or possible reaction), texture, recipe reference, date, and short note used to build the Feeding Compass;
• Shopping-list completion state;
• Onboarding, notification, language, and appearance preferences;
• Locally cached subscription-entitlement information and limited usage counters.

This locally stored information is not automatically uploaded to a XenDevApp user account because First Plate does not currently offer account registration or cloud profile synchronization. You can remove it by clearing the App’s storage in Android settings or uninstalling the App. Uninstalling does not cancel an active Google Play subscription.

3. First Plate Chef and AI processing

When you submit a message to First Plate Chef, the App uses Google Firebase AI Logic and a Gemini model to generate a response. Information transmitted for this purpose may include:

• Your Chef message or question;
• The baby name you entered and calculated age in months;
• Your selected app language;
• Food identifiers representing pantry items and foods marked liked or disliked;
• Relevant messages from the active conversation needed to understand your request;
• Technical and security information required to operate and protect the service.

If you use “Same meal, two plates,” the family-meal description you enter and the same relevant baby profile context are sent to Firebase AI Logic to create a general adaptation. Meal descriptions and free-text notes may contain information you choose to provide; do not include unnecessary personal or medical information.

We use this information to answer your request, personalize the response, maintain security, prevent misuse, and diagnose failures. The current App keeps the visible Chef conversation in active app memory rather than creating a XenDevApp chat account; however, Google or other infrastructure providers may process and retain transmitted information according to their applicable service configuration, terms, security needs, and legal obligations.

Do not enter passwords, payment-card details, government identifiers, complete medical records, precise addresses, or unnecessary information about the child or another person into Chef. AI-generated responses can be inaccurate, incomplete, or unsuitable. Always verify health and feeding decisions with the child’s pediatrician.

4. Catalog and remote configuration

First Plate reads published foods, recipes, meal-plan references, and app-version configuration from Google Cloud Firestore. These catalog requests may involve standard network information, app instance identifiers, device information, security tokens, and request logs. The current App does not write your local baby profile or taste diary to Firestore.

5. Analytics and diagnostics

First Plate uses Google Analytics for Firebase to understand whether important product flows work and to improve usability. Analytics may process app instance identifiers, device and operating-system information, approximate/general region derived by the provider, app version, language, session and screen activity, and feature events such as onboarding completion, recipe views, saved recipes, filter use, taste entries, meal-serving outcome categories, Feeding Compass and family-meal feature usage, Chef success/failure, shopping-list interactions, and subscription funnel steps.

Our custom analytics events do not include the baby’s name, Chef or family-meal text, tasting-note text, email address, precise location, or payment-card details.

First Plate uses Firebase Crashlytics to process crash reports, non-fatal errors, ANR information, stack traces, app state, device model, operating-system version, app version, installation identifiers, and related diagnostics. This information is used to investigate stability and security problems.

6. App Check and security signals

First Plate uses Firebase App Check with Google Play Integrity in release builds. Google may process app, device, installation, and integrity signals to determine whether requests come from an authentic App installation and to reduce fraud, automated abuse, and unauthorized access.

7. Notifications

If notifications are configured and you choose to enable them, First Plate may use OneSignal to deliver meal reminders, useful tips, and product updates. OneSignal may process a push-subscription identifier, app/device identifiers, device type, operating-system information, notification status, delivery and interaction events, IP-derived general location, and related technical information.

Notifications are optional. You can disable them in the App where available or through Android notification settings. First Plate does not require access to contacts, SMS, call history, photographs, precise GPS location or camera for its current core features. Microphone access is optional and used only when you choose voice input; First Plate does not continuously listen or record in the background.

8. Purchases and subscriptions

Subscriptions are processed by Google Play. We do not directly receive or store your complete card number, bank credentials, or Google password. To provide and protect Premium access, Google Play, Firebase infrastructure, and First Plate may process limited purchase information such as product and base-plan identifiers, offer information, purchase token or transaction identifier, purchase status, renewal status, acknowledgement state, and verification result.

Google Play handles billing, payment methods, subscription management, cancellation, and refunds under its own terms.

9. Support communications

First Plate does not automatically collect your email address. If you contact us, we process your email address, message, attachments, and any information you voluntarily provide to respond, maintain support records, prevent abuse, resolve disputes, and comply with law. Do not include unnecessary health or identifying information in a support request.

10. How we use information

• Provide, personalize, maintain, and improve First Plate;
• Generate First Plate Chef responses;
• Display localized catalog and meal-planning content;
• Provide, verify, and restore Premium access;
• Deliver optional notifications;
• Measure product performance and important user flows;
• Detect crashes, fraud, abuse, and security threats;
• Respond to support requests and enforce our Terms;
• Comply with legal obligations and protect legal rights.

11. Service providers and disclosure

First Plate currently may rely on the following categories of providers:

• Google Firebase and Google Cloud: AI, Firestore, Analytics, Crashlytics, App Check, configuration, and infrastructure;
• Google Play: distribution, integrity, in-app updates, subscriptions, payments, and purchase status;
• OneSignal: optional push-notification delivery and measurement;
• Hosting and support providers: publication of legal pages and handling support communications.

We do not sell or rent personal information. We may disclose information to providers as necessary to operate requested features; when required by valid law or legal process; to protect users, XenDevApp, the App, or the public from harm, fraud, or security threats; in connection with a corporate transaction subject to appropriate safeguards; or with your direction or consent.

Provider practices are also governed by their policies, including the Google Privacy Policy and OneSignal Privacy Policy.

12. Legal bases

Where laws such as the GDPR apply, processing may rely on performance of a contract or steps requested by you, your consent (including optional notifications where required), our legitimate interests in operating and securing the App and improving its reliability, and compliance with legal obligations. You may withdraw consent where processing is based on consent, without affecting earlier lawful processing.

13. Retention and deletion

Local information remains until you remove it, clear App storage, or uninstall. Support communications are kept only as reasonably necessary to respond, prevent abuse, document resolutions, and meet legal obligations. Information processed by Google, OneSignal, Google Play, or another provider is retained according to the configured service settings and the provider’s legal and security requirements.

First Plate does not currently create user accounts, so there is no First Plate cloud account to delete. If cloud accounts or synchronization are introduced, this Policy and the App’s deletion controls will be updated before that feature is released.

14. Security

We use reasonable technical and organizational safeguards designed to protect information, including encrypted network connections, restricted service access, Firebase security rules, App Check integrity controls, and diagnostic monitoring. No internet transmission, electronic storage system, or security measure can be guaranteed to be completely secure.

15. International processing

Google, OneSignal, and other service providers may process information in countries outside your own. Where required, applicable contractual, organizational, and technical safeguards are used for international transfers. Privacy laws in those countries may differ from the laws where you live.

16. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, or portability of information we control. You can also:

• Avoid entering optional profile information or sensitive details into Chef;
• Clear local App data or uninstall First Plate;
• Disable notifications through Android settings;
• Manage or cancel subscriptions through Google Play;
• Contact us regarding a privacy request.

We may need to verify a request and may retain limited information where required or permitted by law, including for security, fraud prevention, billing, dispute resolution, or legal compliance.

17. Changes to this Policy

We may update this Policy when First Plate’s features, providers, or legal obligations change. The effective date will be revised, and material changes may be communicated through the App, Store listing, or another reasonable method. Review this page periodically.

18. Contact

For privacy questions, support requests, or rights requests, contact:
XenDevApp
App: First Plate
Email: helpxendevapp@gmail.com