Privacy Policy — Yes Plate

Last updated: 21 October 2026

The short version

Everything you enter into Yes Plate stays on your phone. There is no account to create, we run no servers that store your data, and we have no way to read what you record. That includes the health conditions you select — the most sensitive thing the app knows about you.

One thing to know: your phone may keep its own backup of the app's data in your Google or Apple account. That is the operating system's doing, not ours, and it goes to your account — but you should know it happens. See Your phone's own backup below.

What the app stores on your device

All of it lives in the app's private storage on your device. Uninstalling the app deletes it.

Under EU data protection law, information about your health is a special category of personal data. The app's answer to that is not to collect it centrally at all.

What leaves your device

Three things: a check for app updates, barcode scanning, and estimating a dish from a photo — and only when you ask for it.

When you open Yes Plate, it asks Expo's update service (u.expo.dev) whether a newer version of the app's code is available. That request contains:

It does not contain your name, your health conditions, your body details or your diary. Expo's handling of that service is covered by their own privacy policy: https://expo.dev/privacy

Barcode scanning

When you point the camera at a barcode, the app sends the number from the packet to the open Open Food Facts database (world.openfoodfacts.org) to look up what the product contains. The only other thing that reaches them is the IP address that any internet request carries.

The photograph itself goes nowhere. The camera image is decoded on your phone, and only the recognised number leaves it. Your conditions, body data and diary are not attached to this request.

Open Food Facts is a non-profit community that maintains an open food database. Their policy: https://world.openfoodfacts.org/privacy

Estimating a dish from a photo

You can photograph a plate with the camera or pick a picture you already have in your gallery. Either way that picture leaves the phone: it goes to our proxy on Cloudflare and on to an Anthropic model, which returns the name of the dish and a rough nutrition estimate.

The app does not read your gallery. When you pick a picture, the system picker shows it, and the app receives exactly one photo — the one you chose. It never sees the rest.

A random number identifying your device is sent with it. It serves exactly one purpose: counting how many estimates were made in a day, so that no one exhausts the allowance for everyone else. It does not come from your phone’s hardware, is not tied to you, and disappears with the app.

The picture is not stored anywhere — not by us, not in the proxy’s logs. It lives for the length of the request and is gone. Only the figures you confirm reach your diary.

Your name, health conditions, body data and diary are not attached to this request.

Anthropic’s handling is covered by their policy: https://www.anthropic.com/legal/privacy

None of this happens by itself. The camera turns on only when you open that screen, the gallery opens only when you tap “Choose from gallery”, and the picture goes further only after you press the button.

Your phone's own backup

Android and iOS both back up app data by themselves. On Android this is Auto Backup, which copies the app's data to your Google Drive; on iPhone it is part of your iCloud backup. It happens at the operating system's level, without the app asking for it, and the copy lands in your own account — not with us. We never see it and cannot read it.

We leave it switched on deliberately. A lost or broken phone is the likeliest way to lose months of records, and this is the one safety net that works without you having to remember anything.

You can turn it off. On Android it is in Settings → Google → Backup; on iPhone, in Settings → your name → iCloud. Turning it off means a new phone starts empty unless you have saved a file yourself.

Saving a file yourself

You can also save a backup file from within the app. The app writes the file and hands it to your phone's own sharing menu — you choose where it goes. From that moment the file is in your hands, not ours.

The file contains everything listed above, including your health conditions. Keep it somewhere private. A messenger or a shared drive is not a good home for it.

What the app does not do

Children

Yes Plate is not aimed at children under 13 and does not knowingly collect anything from them.

Your rights

Because your data never reaches us, there is nothing for us to hand over, correct or delete on your behalf. You control it directly:

Not medical advice

Yes Plate offers general ideas, not medical advice. Your restrictions are set by your doctor, and the nutrition figures are estimates. The full disclaimer is in the app.

Changes to this policy

If this policy changes, the date at the top changes with it.

Contact

hello@yesplate.app