OneBite Privacy

Effective 6 November 2026. This policy applies to the OneBite app (com.x70.OneBite). This policy describes the current OneBite review candidate: a device-only meal journal with on-device estimates, known-nutrition entry and optional online packaged-food lookup.

Visiting this policy website is covered by the separate x70 website Privacy Policy.

1. Controller and contact

Daniel Ensminger, trading as x70
Altheimer Eck 15
80331 München
Germany
Email: contact@x70.one

2. What x70 collects

x70 does not receive your meal photographs, journal, targets, notes, trends or product queries through a OneBite server. There is no OneBite account, advertising SDK, developer analytics endpoint or remote model.
When you explicitly look up a product code or submit product/brand text, the query goes directly to Open Food Facts. That provider receives the query, your IP address, request time/resource and ordinary client metadata. OneBite identifies its app/version with a fixed developer contact, not your identity. Provider operational/usage logging is disclosed conservatively as potentially linked to you; no anonymous or immediate-deletion promise is made.

3. Data kept by the app

Reviewed meal names, nutrition, source and portion notes, categories, journal history, targets and preferences are stored on your device. New journals use device-only storage. This candidate does not download or sync personal journal records through CloudKit; existing cloud copies are left unchanged. Apple-managed device backups are separate. Purchase rights are checked with StoreKit; trial timing is retained locally, including in the device Keychain.
Meal photographs are temporary capture state, not journal/archive records. Successful Save or Clear releases the app capture; cancelling manual entry may retain the capture for correction. Originals in Photos are not deleted or changed. Barcode frames stay with on-device Apple recognition and are not uploaded or saved to the journal.
A portable archive is created only when you choose Export; you control its destination in Apple's system interface.

4. When data leaves the device

Optional Open Food Facts lookup

Scan first displays the recognized product code. Only Look up code, Look up scanned code or Search products sends a request. Typing, opening the screen or scanning alone sends no food request. The client does not attach journal history, photos, targets, saved notes, account identifiers or advertising identifiers. Text you submit in the product/brand field is sent as the query; do not include private meal notes. You can use manual nutrition entry without the database. Check community data against the package label.

Open Food Facts privacy policy

Product data source

Product records and their source pages come from the Open Food Facts community database. OneBite retains source and portion information when you review and save a product. Opening a source page is a separate website visit.

Open Food Facts product database

Product data licence

The app attributes the reused product data to Open Food Facts under the Open Database License. The external licence explains the data-use terms; the product data still need to be checked against the package label.

Open Database License 1.0

Apple Vision and Foundation Models

Meal estimates and barcode recognition use supported on-device Apple frameworks. These estimation and recognition paths do not send their images, model prompts or results to x70 or a third-party model service. Product lookup is a separate explicit network request as described above. OneBite uses Apple VisionKit, not Open Food Facts’ own mobile app or Google MLKit.

Apple StoreKit

Apple processes the separate free seven-day trial and optional one-time Full purchase. Starting the trial does not automatically charge or create a subscription. The app checks verified transactions and retains existing paid ownership; x70 does not receive payment-card details.

Links you choose to open

Source, licence, privacy and support links open their respective websites, which receive ordinary web request data under their own policies.

5. Permissions

Camera access is requested only when you choose a meal-camera action or Start camera for barcode recognition. You can cancel and use printed codes/search/manual nutrition without enabling the camera.
Photo selection uses Apple's Photos picker and passes the chosen image to the app, not the whole library.
Files access uses Apple's picker/share interface for an export/import you request. No new location, contacts, tracking or photo-library-wide permission is added.

6. Tracking, advertising, and analytics

OneBite does not track you across apps or websites, sell app data, show third-party advertising, or include a developer-operated product-analytics SDK. System diagnostics remain controlled by your Apple device settings unless you deliberately share information with support.

7. Retention and deletion

Local journal records remain until you delete them or remove the app, subject to Apple-controlled device backups. Existing personal cloud records are not erased by this local-only candidate. Deleting a journal does not reset the original trial deadline or remove Apple purchase rights; local Keychain timing and verified transaction history support those checks.
The product client holds a bounded response cache in process memory. Entries are reused for up to five minutes and may remain until replaced, evicted or the app closes. The client does not write a product-query history file, cookie store or URL disk cache. This does not mean that the provider immediately discards requests.
Open Food Facts' general service privacy policy describes IP/access logs used for security, technical analysis and popularity measurement, with a three-year retention period. A separate API-specific retention period has not been independently established, so this general policy is the conservative basis for this disclosure. The provider controls its logs and rights requests. Deleting a OneBite journal does not delete provider logs. The separate Google MLKit/mobile-scanner entry in that policy concerns Open Food Facts' own app, not OneBite's Apple scanner.

8. Support, rights, and security

If you email support, x70 receives the contact information and message you choose to send. Do not include sensitive app records unless they are necessary for your request. Support correspondence is handled under the main x70 website Privacy Policy.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. Email contact@x70.one. You may also complain to the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

The app uses Apple platform protections appropriate to the data it stores. No storage method is risk-free, so keep your device updated, use a device passcode, and protect exported archives yourself.

9. Audience and safety

OneBite is a nutrition journal, not a medical, diagnostic or allergen-checking service. Product data are community-maintained; review against the package before saving.

10. Changes

A material change to the app's data handling will be reflected in this policy and, where required, in the App Store privacy disclosure before the changed feature is released.