Effective date: 1 November 2026
Contact: support@winningbeans.co.uk
Your food diary stays on your phone. Scanned product barcodes are sent to Open Food Facts and Open Prices for product and price lookups. The services also receive ordinary connection metadata, as explained below.
Made by Winning Beans, based in the United Kingdom.
When you scan a barcode the app sends the product barcode to Open Food Facts, an open food database, to find out what the product is. The request carries no name, no account, no device identifier and nothing about the rest of your diary. Open Food Facts has its own privacy policy at world.openfoodfacts.org.
Every product result is cached on your phone permanently, so the second time you scan the same product its details come from your phone.
Prices. When a scanned product is shown, the app also sends the same product barcode to Open Prices (prices.openfoodfacts.org), run by the same Open Food Facts project, to show a recent UK shop price reported by another shopper. This happens each time the product card opens, so a price can be current. If you type in what you paid, that price and shop name stay on your phone and are never sent anywhere.
Everything else — the food you log, your weight, your targets — stays on the device. As of 1 November 2026 the app makes no other network request of any kind: no analytics, no crash reporting, no advertising, no account.
Request metadata. Both lookup services receive your public IP address as part of the internet connection and an app-identifying User-Agent with Plate Maths’ version and our developer support address. This is our contact address, not yours. We do not add an account, advertising or device identifier. Open Food Facts’ published policy lists visitor IP/log retention of three years for security, technical analysis and popularity measurement. Its separate indefinite scan/MLKit entry is explicitly limited to users of that scanner; this iPhone app uses Expo camera barcode detection, not an asserted MLKit integration. Their handling of requests is governed by Open Food Facts’ privacy policy; this app does not control the services’ request-log retention.
On your device only: everything you log, the starting weight you typed for the target arithmetic (if you typed one; the app keeps no weight history), your targets and how they have changed, your weekly check-in answers, any product you have scanned, and any price you typed in for a product.
A weight and a food diary are health data and a special category under UK law. They never leave the device.
The camera is used for one thing: reading the barcode on a food packet. The picture is read on your phone and is not saved or sent anywhere — only the barcode number is looked up. The app does not take, store or send photos.
There is no account and no sign-in.
The app does arithmetic. It is not a dietitian and it does not diagnose anything. If you have a medical condition, are pregnant, or are under 18, talk to your GP before following any calorie target.
If you have an eating disorder, or are recovering from one, calorie tracking can make things worse. That is true of every app of this kind, this one included. Please talk to your GP before using it. In the UK, the eating disorder charity Beat offers support at beateatingdisorders.org.uk.
Where we hold no personal data about you, most of these rights have nothing to act on — but they exist and we will honour them.
You have the right to ask what we hold about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to receive it in a portable form. To exercise any of them, email support@winningbeans.co.uk. We will reply within one month.
If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.
Delete the app. Because everything is stored on your device, removing the app removes the data with it. There is no account to close and nothing of yours left on any server of ours, because there is no server of ours.
This app is not directed at children under 13 and we do not knowingly collect anything from them. We could not identify a child if we tried, because we collect nothing that identifies anyone.
If what the app does with data changes, this page changes first and the date at the top moves. We will not quietly widen what is collected and leave this page describing the old behaviour.