FodPlan App Privacy Policy
Effective from 28 October 2026.
1. Controller
The provider of the FodPlan app and the controller of the personal data you give us (e.g. in an email) or that we receive in connection with a Premium purchase is ADAMIT Adam Hałuszczyński, ul. Kolejowa 35, 05-860 Płochocin-Osiedle, Poland, Tax ID (NIP) 5291697421, email: contact@adamit3d.com.
2. In short
- The app works without an account. Apart from purchasing and checking a subscription and looking up a product by barcode, it does not need the internet.
- Your plan, settings and diary are saved on your phone. We do not send them to any server and we have no access to them. The only data that leaves your phone is what is needed to manage a Premium subscription (section 5) and, when you look up a product by barcode, the number of that barcode (section 6.2).
- We do not use advertising, analytics or tracking tools, and we do not send error reports from your phone.
- We do not sell data and we share no health data with anyone. Apart from the cases described above, the app sends no data off your phone.
- You can delete everything from your phone at any time: More → Delete my data (this does not cancel your subscription, see section 5).
3. What data is in the app and where
The app saves on your device what you enter or choose yourself: age, sex, height, body weight and activity level (to calculate your calorie needs), diet phase, excluded foods and preferences, meal plan, meal ratings, shopping lists, diary entries (how you feel, symptoms, notes), progress and notification settings, and the results of reintroduction tests (the foods tested, dates, symptoms and ratings). Some of this information concerns health.
The reintroduction PDF report is created on your phone. When you share it, the app opens your system share sheet and you choose where the file goes (e.g. to a doctor or dietitian). We do not receive it. Once you send the file outside the app, its recipient is responsible for processing it further.
All of this data is stored locally only, in the app's storage on your phone. We do not process it on our servers, and unless you knowingly take an action yourself (e.g. send us a screenshot in an email), we have no access to it.
4. Phone backups
The app's data is excluded from your phone's backups: on iPhone it does not go into iCloud backups, and on Android the app does not take part in Google backup. This means your diary data does not leave your device. After you change phones or reinstall the app, you will need to enter it again. You can restore your Premium subscription without losing your payment (see section 5).
5. Purchases and the Premium subscription
5.1. Payment for Premium is accepted and handled by the store where you buy it (Apple App Store or Google Play), as a separate controller of your payment data. We do not receive your card number or other payment details. The store may send us information about transactions (e.g. order number, country, amount, and the status of a subscription, refund or cancellation), needed for accounting, complaints and refunds.
5.2. To check whether you have an active Premium subscription, and to let you restore purchases on a new phone, the app uses the service of RevenueCat, Inc. (USA), which acts as our processor. The following is sent to RevenueCat: the purchase confirmation from the store (receipt or purchase token), a random user identifier generated by the app, which does not contain your name, email or Apple or Google account identifier, the device type and system version, and the time of last use. We do not send RevenueCat any health data or any content of your plan, settings or diary.
5.3. The basis for processing is performance of the Premium contract (Article 6(1)(b) GDPR), tax and accounting obligations (Article 6(1)(c)), and our legitimate interest in preventing abuse and in establishing or defending legal claims (Article 6(1)(f)). We keep purchase data for the duration of the subscription, and then for as long as needed for accounting, for the periods required by law and until the limitation periods for any potential claims have expired.
5.4. RevenueCat processes data on servers in the United States. Data is transferred to the USA on the basis of standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR), included in the data processing agreement with RevenueCat. A copy of the clauses is available on request at the address given in section 1.
6. Label and barcode scanner (camera)
6.1. The label scanner uses the camera, or a photo you choose, solely to read a product's ingredients. The image is analysed on your phone and is not sent to us or to any third party. You can withdraw camera access at any time in your system settings. The scanner is not a test for allergies or intolerances, and its result may be wrong.
6.2. Barcodes and Open Food Facts. The barcode scanner reads the code from the camera image or from a photo on your phone, or accepts a number you type in. The image is not sent anywhere. To find a product's ingredients, the app sends only the code number (digits) to the public Open Food Facts database (world.openfoodfacts.org), run by the French association Open Food Facts, and receives the product's name, brand and ingredients in return. As with any internet connection, your IP address reaches Open Food Facts with the request, together with the app's technical name and version (FodPlan 1.0) and our contact address. We do not send your name, email, a device identifier, the random identifier from section 5.2, any health data, or any other data from the app. We cannot link the code number to you: we have no access to Open Food Facts server logs, and we do not save that database's responses in the app beyond the current result on screen.
6.3. Open Food Facts is a separate controller of the data it processes itself (e.g. in server logs, including the IP address), under its own privacy policy: world.openfoodfacts.org/privacy. The basis for sending the code number is performance of the contract to provide the feature you ask for (Article 6(1)(b) GDPR). If you do not want to connect to Open Food Facts, do not use the barcode scanner: the label scanner and the app's other features work without that connection.
6.4. Product data in Open Food Facts is created by a community of users, may be incomplete or wrong, and is made available under the Open Database License (ODbL). The scanner result is approximate, so always check the ingredients on the package.
7. Notifications
Reminders are local notifications created by the app on your phone. We do not use our servers for this, and their content does not contain symptoms or other details from your diary. You can turn notifications off in the app or in your system settings.
8. External links
The app contains links to other parties' websites (e.g. scientific sources and shops). They open in your system browser. When you use them, you are subject to the privacy policies of those parties, over which we have no influence.
9. Email contact and support
If you email us, we process your email address and the content of your message solely in order to reply and handle your matter (Article 6(1)(f) GDPR, our legitimate interest in handling enquiries). Please do not send health data in emails. We keep this data for as long as needed to handle your matter, and then until the limitation periods for any potential claims have expired. The recipients of the data are the IT service providers we use to run our email, and RevenueCat, Inc. to the extent described in section 5. The recipient of a barcode number is Open Food Facts (section 6.2).
10. Your rights
You have full control over the data saved in the app on your own device: you can change it, and delete all of it in More → Delete my data or by uninstalling the app. You cancel your subscription in your store's settings (see the Subscription Terms). As regards data from email correspondence and data relating to a purchase, you have the right of access, rectification, erasure (except for data we are required by law to keep), restriction of processing, and the right to object to processing based on our legitimate interest (Article 21 GDPR). To exercise them, write to the address given in section 1. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland) or with the supervisory authority in your country.
11. Minors
The app is intended for people aged 18 or over. We do not knowingly collect data from children.
12. Changes
We will tell you about material changes to this policy (e.g. the introduction of a user account or a new service provider) in the app and on this page before they take effect. We will provide earlier versions on request.