Trueburn · iPhone
Trueburn Privacy Policy
Last updated: 5 September 2026
The short version
Trueburn has no account, no server of ours, and no analytics.
Everything you log stays on your iPhone and, if you have iCloud switched on, in your own iCloud account. We cannot see it, and there is nothing for us to lose.
The one time Trueburn talks to the internet is when you scan a barcode.
What we collect
Nothing. There is no sign-up, no email address, no password, no user identifier, no device identifier, no advertising identifier and no analytics. The app contains no analytics SDK, no crash reporter, no advertising SDK and no third-party code of any kind.
What Trueburn stores, and where
Everything you put into the app — your food diary, your weigh-ins, your custom foods, recipes and saved meals, your check-in history, and the details you enter about yourself (age, height, weight, sex, activity level and goal) — is stored on your device.
If iCloud is switched on for Trueburn, that data is also stored in your own iCloud account, in a private database that only your Apple Account can read. This is the same mechanism Apple's own Notes and Reminders apps use. We have no access to it. Apple's handling of your iCloud data is covered by Apple's privacy policy.
If iCloud is switched off, Trueburn works exactly the same, but the data exists only on that one device. The app says which of the two states you are in, in Settings.
The one network request
When you scan a barcode, Trueburn sends the barcode number to Open Food Facts, a free and open food database run by a French non-profit, and shows you what comes back.
That request contains:
- the barcode you scanned
- an identifier for the app itself, in the form
Trueburn/1.0 (support@utileau.com), which Open Food Facts asks every app to send so they can tell apps apart from bots
That request does not contain your name, an account, a user identifier, a device identifier, your location, or anything at all about you or what you eat. Open Food Facts receives your IP address, as any web server does when your phone connects to it; their handling of that is covered by their terms.
Scanned products are cached on your device so the same barcode works offline next time.
Everything else in the app — including searching the 13,348-food database — happens entirely on your phone, with no connection at all.
Health data
If you allow it, Trueburn can:
- write the calories and macronutrients you log to Apple Health, so your other apps can see them
- read your body mass from Apple Health, so a smart scale can fill in your weight trend without you typing it
Health data is used only inside the app, on your device. It is never sent anywhere, never used for advertising, and never shared with anyone. Declining these permissions does not limit the app in any other way.
Artificial intelligence
On iPhones that support Apple Intelligence, Trueburn can work out the items in a meal you describe in plain English. This runs entirely on your device, using Apple's on-device model. Nothing you type is sent to us or to anyone else. You can turn it off in Settings, and the app falls back to a simpler parser that also runs on your device.
Children
Trueburn does not collect data from anyone, of any age. There is no account to create and nothing to transmit.
Purchases
Trueburn is free. There is one optional in-app purchase — a voluntary tip — which unlocks nothing. Apple processes it; we never see your payment details, your name or your Apple Account. We cannot issue refunds, because we do not process the payment. Refund requests go to Apple.
Deleting your data
Delete the app and the on-device copy goes with it.
To also remove the iCloud copy, use Settings → Delete all data inside the app before deleting it. That wipes the local store and your iCloud private database. It offers you an export first, and it cannot be undone.
You can export everything at any time as JSON or CSV, from Settings.
Changes
If any of the above ever changes — if the app ever gains analytics, a crash reporter, ads or a server — this policy and the App Store privacy label will be updated in the same release that changes the behaviour, never afterwards.