One More NibblePrivacy policy
Last updated 13 November 2026
The short version
- We hold what you type into the app: your email address, a first name, a date of birth, any allergies or dietary needs you tell us about, and your answers about foods.
- We use it to suggest foods and to keep the wrong foods away from you. Nothing else.
- We do not sell it and we do not show adverts.
- When the app goes wrong it sends us a report so we can fix it. Reports can include a recording of the screen with every word and every picture blanked out, so we see where you tapped and never what you read or wrote.
- Your account and food records are stored in London. You can download all of it or delete all of it from the app at any time.
Who we are
One More Nibble is run by Thomas Chapman, an individual based in the United Kingdom. For UK data protection law, Thomas Chapman is the "controller" of your personal data, which means the person responsible for it.
For anything about your data, write to privacy@onemorenibble.com.
What we hold
| What | Where it comes from | Why we hold it |
|---|---|---|
| Email address | You type it in | To sign you in, to send the codes that confirm your address or reset your password, and to tell you about your account |
| Password | You choose it | To sign you in. We store a scrambled form (a hash). We cannot read your password and neither can anyone else |
| First name or nickname | You type it in | So the app can speak to you, or about the person you look after, by name |
| Date of birth | You type it in | To know whether the account is for someone under 18, who gets extra protection |
| Who the account is for | You choose: yourself, or someone you look after | So the wording in the app fits |
| Allergies and dietary needs, and how serious each is | You choose them | To keep conflicting foods from ever being shown |
| Your answers about foods | You tap them: already eat it, want to try, not interested, liked it, didn't like it | To suggest what to try next and to draw your food map |
| Notes you add to a food | You type them, if you want to | So you can remember how a try went |
| Consent records | Made when a parent or carer gives or withdraws consent | To show that consent was given, and to which wording |
| When you signed in and out | Made automatically | To keep your account secure and to let you sign out of other devices |
| Your internet (IP) address | Sent by your device with every request | To limit repeated sign-in attempts and stop abuse. It appears in short-lived technical logs and is not linked to your food records |
| Crash and error reports | Made automatically when something goes wrong in the app or the service | To find and fix faults. A report says what broke and where in our code, the app version, the make and model of the device and its version of Android or iOS, and the country and town your connection appears to come from. It does not contain your name, email address, IP address, or anything you typed |
| How the app performed | Made automatically, for about one visit in ten | To find slow screens and slow requests. It records which screens were opened and how long things took, not what was on them |
| Screen replays | Made automatically for about one visit in ten, and whenever an error happens | To see what led up to a fault. Before a replay leaves your device every word, everything typed and every picture is covered over, so it shows the layout and where taps landed, not your foods, notes, allergies or details |
| A random number for this copy of the app | Made by the app when it is installed | So we can tell whether one fault hit one device or many. It is not your account, it is not used for advertising, and a fresh one is made if you reinstall |
Allergies and dietary needs can say something about a person's health or beliefs. The law treats that kind of information as more sensitive, and so do we.
We do not collect your exact location, contacts, photos, device identifiers for advertising, or anything about how you use other apps.
What stays on your phone
The app keeps a locked (encrypted) copy of your food records on your device, so they can be put back if our copy is ever lost. The key to it is held in your phone's secure storage. This copy is removed when you delete your account from that device or uninstall the app.
Why we are allowed to use it
- To provide the app you asked for. We need your account details and your answers to make the app work at all (the legal term is "performance of a contract").
- Because you chose to tell us. Allergies and dietary needs are only used because you decided to give them to us for this purpose (the legal term is "explicit consent"). You can change or remove them at any time in the app.
- To keep the service safe and working. Limiting sign-in attempts, keeping technical logs, and collecting the reports, timings and blanked-out replays that let us find and fix faults are in our "legitimate interests" and yours. You can object to this at any time by writing to us.
Children and young people
- Anyone under 18 is treated as a child in the app.
- Before an account for someone under 18 is created, a parent or carer must read and agree to a plain statement of what will be stored. They can take that agreement back at any time in the app, and if they do, nothing more is recorded and everything is erased 30 days later unless they change their mind.
- Someone aged 13 to 17 may use the app themselves with that agreement. For a child under 13, the account must be run by a parent or carer.
- We take people at their word about age. We do not check identity documents.
- Accounts for under-18s are kept for a shorter time when unused (see below).
Who else handles it
We use four companies to run the service. Each handles your data only on our instructions.
| Company | What they do for us | Where |
|---|---|---|
| Google Cloud | Runs the service and stores the database | London, United Kingdom |
| Brevo | Delivers our emails. They see your email address and the message, which contains a short code and nothing about food | European Union |
| Cloudflare | Carries requests between the app and the service. They see your IP address in passing | Worldwide network |
| Sentry (Functional Software, Inc.) | Receives the crash and error reports, timings and blanked-out screen replays described above. They see your IP address in passing and are set not to keep it | United States |
Where one of these companies handles data outside the United Kingdom, it does so under the safeguards UK law requires, such as approved standard contract terms.
We do not sell your data or share it with advertisers. We would only give it to anyone else if the law required us to.
How long we keep it
- While you use the app: for as long as your account exists.
- If you delete your account: it is erased from the live service straight away.
- If you never confirm your email address: the account is removed after 30 days.
- If consent for a child's account is withdrawn: everything is erased after 30 days.
- If an account is not used: it is erased after 24 months, or after 12 months if it is for someone under 18.
- Reports, timings and replays: kept for up to 90 days, then deleted automatically. They are not tied to your account, so deleting your account does not remove them sooner, and we cannot pick out the ones that came from you.
- Backups: our database backups are kept for up to 7 days, so erased data can remain in a backup for that long before it is gone for good.
Your rights
Under UK data protection law you can:
- See your data. In the app: Profile, then Account, then "Download my data". You get a file to read or print and a file other apps can read.
- Correct it. Edit your details, dietary needs and food answers in the app.
- Delete it. In the app: Profile, then Account, then "Delete account". See how to delete your account.
- Take back consent for a child's account, in the app under Account, then Consent.
- Object to or restrict how we use it, or ask for it in a portable form.
If you cannot use the app, write to privacy@onemorenibble.com from the email address on the account and we will do it for you within one month.
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk.
Security
Data is encrypted on its way between the app and the service and where it is stored. Passwords are hashed. Access to the service is limited to the person who runs it. No system is perfectly secure, and if something went wrong that put you at risk we would tell you and the regulator as the law requires.
Adverts, payments and analytics
Today the app is free and has no adverts. The only tool in it that reports back to us is Sentry, which we use to find and fix faults as described above. We do not use it, or anything else, to build a profile of you, to follow you across other apps or websites, or for advertising. We may later offer a paid version, and a free version supported by adverts. If we do, we will update this policy first and tell you in the app before anything changes for you.
Changes to this policy
If we change this policy we will change the date at the top. If the change affects how your data is used, we will tell you in the app or by email before it takes effect.