Privacy policy

Effective November 2, 2026

Chickadee Studio LLC ("we") makes the Plenty app for iPhone and runs this website. This policy explains what data each one handles, where it goes, and what you can do about it.

Plenty

What stays on your phone

Everything you put into Plenty is stored on your iPhone, not on our servers. That includes:

• the meals you log and what you said about them
• your saved foods and the portion sizes Plenty has learned
• your plan and nutrient targets
• your details: your name, if you give one, and your age, height, weight, sex and activity level
• your settings

If you connect your own AI key, it's stored in your iPhone's Keychain.

If your iPhone is backed up to iCloud or to a computer, those backups can include Plenty's data. Backups are handled by Apple and your devices under Apple's terms. We can't read them. Your AI key and access token are kept out of backups that move to a new phone.

What goes to an AI provider

Plenty uses an AI model to turn what you type or say into a logged meal with nutrient estimates. Each request to the AI includes:

• what you just typed or said
• your last few messages with Plenty and its replies
• what you've logged today, with each food's amounts and nutrients, and the day's totals
• your main goal, such as building muscle, and your nutrient targets
• the names of your saved foods and their units
• the local date and time

It never includes your name, age, height, weight, sex or activity level. Your targets are calculated from those details on your iPhone, so the targets reflect them, but the details themselves stay on your phone.

When you ask Plenty to re-estimate a saved food, it sends that food's name, units and current values, along with anything you type to describe it. When you enter an AI key, Plenty sends a one-word test message to check that the key works.

Whatever you type or say is sent as you wrote it. Try not to include names, places or medical details you'd rather keep private.

When you speak a meal, your speech is turned into text on your iPhone using Apple's on-device speech recognition, and the audio isn't sent anywhere. The first time, iOS may download a language file from Apple. If you use the dictation button on the iPhone keyboard instead, that's handled by iOS under Apple's terms.

Where the request goes depends on how Plenty is connected:

• Your own key. Requests go straight from your iPhone to your own Anthropic or OpenAI account. We're not in the path and never see them. Your provider sees your IP address, and its own terms and privacy policy apply to that account. Requests to OpenAI ask it not to store them.
• Access through Plenty. Today this is tester access, available only in test versions of Plenty, not the App Store version. Requests pass through Plenty's server to Anthropic, which sees the server's address, not yours. Our server doesn't store what you send or what comes back.

What Plenty's server keeps

When you use access through Plenty, our server keeps only what it needs to run the service and prevent abuse:

• A short log line for each request: the access id tied to your code, the request type, whether it succeeded, how long it took, how many tokens it used, whether the daily limit was checked, and the names of any missing server settings. It never logs what you sent, what came back, your access code or your token.
• A count of today's requests for your access id, so a fault can't run up costs. It expires at the end of each day (midnight UTC).

Your access id is a short label like "t1". It doesn't contain your name, but it stays the same for as long as your code works, and we know which code we gave to whom.

Our server runs on Vercel, which also receives your IP address and keeps the log lines above in its own logs. The daily count is stored with Upstash. Both handle this data under their own terms.

Anthropic receives each request to process it, under its commercial terms, and retains API data according to its standard policy. We don't have a zero-retention agreement with Anthropic. You can read Anthropic's policies at anthropic.com/legal/privacy.

To reduce cost, our server asks Anthropic to cache the instructions Plenty sends with every request for up to an hour. Those instructions are the same for everyone and contain none of your data.

Subscriptions

When subscriptions are available, you'll buy them through Apple. Apple handles payment, and we don't receive your payment details or Apple ID. We'll update this policy before subscriptions launch.

What we don't do

• We don't have accounts, so there's no profile of you on our side.
• We don't include advertising or third-party analytics in Plenty, and we don't track you across other apps or websites.
• We don't sell or share your data for advertising.

If you've chosen to share analytics with app developers in your iPhone's settings, Apple may send us crash reports and usage statistics that don't identify you. You can turn that off in Settings, under Privacy and Security, then Analytics and Improvements.

Your controls

• Export. In Plenty's settings, you can export everything as a JSON file and your meals as a CSV file. Exports never include your name, your AI key or your access token, but they do include your body details and the words you logged. Once you share an export, it's in your hands.
• Delete all data. In Plenty's settings, you can delete everything Plenty stores, including your AI key or access token. Use this before deleting the app: iOS can keep Keychain items, like your key, after an app is deleted. It can't reach backups already made or requests already sent to an AI provider.
• Privacy lock. You can require Face ID, Touch ID or your passcode to open Plenty. This happens on your iPhone, and nothing about it is stored or sent.

Because your Plenty data lives on your iPhone, you're the one holding it. We can't see, correct or delete it for you, and we can't restore it if it's lost. The server log lines described above contain no meal content. If you have a question about them, email us.

Age

Plenty is for adults 18 and over. It asks for your age and won't save an age under 18. We don't knowingly collect data from children.

This website

chickadeestudio.io uses no cookies, analytics, advertising, third-party scripts or third-party fonts. It's hosted by Vercel, which processes standard server data such as IP addresses and browser type to deliver and secure the site. If you email us, we keep your email so we can reply.

Changes to this policy

If we change how we handle data, we'll update this page and the date at the top. If a change affects what Plenty sends or keeps, we'll also say so in the app before it takes effect.

Contact

Chickadee Studio LLC, Portland, Oregon
hello@chickadeestudio.io