Privacy policy — Nibblist

Last updated 30 September 2026

This policy explains what Nibblist ("the app"), published by Escape Plan Software Ltd, uses, where it goes, and the choices you have. It is specific to Nibblist and takes priority over the general company policy at escapeplan.software/privacy for anything the two disagree on.

Who we are

Escape Plan Software Ltd is a company registered in England and Wales, company number 17262078, with its registered office at Suite 10906, 5 Brayford Square, London E1 0SG, United Kingdom. We are the data controller for Nibblist. You can reach us at support@escapeplan.software.

The short version

Nibblist collects no personal data. Everything you enter (your child's name, the foods they try, dates, reaction notes and tags, photos and reminders) is stored only on your iPhone. The app has no account, no server of ours, no analytics, no advertising and no tracking, and it makes no network requests of its own. Nothing you enter is sent to us. A file leaves your iPhone only when you choose to share or save one (a report, a backup or your tastings for another parent's iPhone), and only to the place you choose.

What Nibblist uses, and where it stays

• Account: None. The app does not ask for your email, your name or any sign-in.
• Your child's name: optional, typed by you (one for each child, if you log for more than one), used to head the list, the report and the subscription screen. No birth date or age is asked for. Stored only on your device.
• Your log: the foods you tick or log, the day of each tasting (or "before the log" if you don't know the date), how it went (liked it, not sure, didn't like it), the tags you choose (for example "Spat it out" or "Rash"), your notes and, if you add them, the time it was eaten, when you noticed something, how much and in what form, and the other foods in the same meal. This can include information about your child's health, such as a reaction you noticed. It is stored only on your device, in the app's own folder. We never see it, and the app does not analyse or interpret it.
• Your own foods and hidden foods: foods you add and built-in foods you take off your list. Stored only on your device.
• Photos: if you add a photo to a tasting, you choose it with Apple's photo picker, so the app never gets access to your photo library, only to the photo you pick. A resized copy is stored in the app's own folder on your device. The app never uploads photos.
• Reminders: the reminders you set (a food or an allergen, and either a day and time or a number of days without a tasting and a time). If you turn on Renewal Reminders in Settings, the app also reminds you before a free trial ends or a yearly plan renews. They are scheduled as local notifications on your device; nothing is sent to a server. Notifications are asked for only when you save your first reminder or turn on Renewal Reminders.
• Reports and exports: when you tap Share PDF for the Doctor, Export CSV Spreadsheet or Back Up Now, the app makes the file on your device and opens Apple's share sheet. The file goes only where you send it (for example Files, AirDrop, email to your child's doctor). Once shared, it is handled by that app or person, not by us. The PDF and the spreadsheet are for one child; a backup contains the whole log for every child, including photos and reminders.
• Sending tastings to another iPhone: when you tap Send Tastings on the Share tab, the app makes a file with every tasting on this iPhone, for every child you log for: the children's names, the foods, days, tags, notes, times, amounts and meals, and your own foods they use, but no photos and no reminders. The line under the button names the children it includes. You send the file yourself (for example by AirDrop or Messages); the app sends nothing.
• Opening a backup or another iPhone's tastings: the app reads only the file you pick in Files or open in Nibblist, and changes nothing until you choose. Merge adds the tastings and details that aren't on this iPhone yet and removes or writes over nothing; for a backup, Replace puts it in place of everything here. Before a merge or a replace, the app keeps a copy of the log as it was, so you can undo it (Share → Undo Last Restore or Merge). That copy is deleted as soon as you change anything else, and only the last merge or restore can be undone. When another app (AirDrop, Messages or Files) hands the file over, iOS puts a copy in Nibblist's folder; the app deletes it as soon as it has read it.
• Settings: display choices and whether onboarding was completed, in the app's settings on your device.
• Purchases and subscriptions: Apple handles payment through the App Store. We never see your card details. The app checks Apple's signed record of your subscription on the device. Apple gives us sales reports that do not identify you.
• Age range: in regions where the law requires it, iOS may tell the app your age range (for example 18 or over). The app keeps this in memory only; it is not stored or sent anywhere, and it does not change what you can do in the app.
• Links: pages from official health organisations (such as the CDC, FDA, AAP, NHS, the Canadian Paediatric Society and ASCIA), this policy, the terms and our support page open in Safari's in-app view only when you tap them.
• Device backups: like other app data, your log and photos can be included in your own iCloud or computer backup of the device, which Apple and you control and we cannot access.
• Analytics or crash reporting: None. The app contains no analytics, advertising or crash-reporting code. If you have chosen in iOS to share analytics with app developers, Apple may send us anonymous crash reports under Apple's own terms.
• AI features: None.
• Support messages: if you email support@escapeplan.software, we keep the message and your email address to reply and keep a record. Please don't send us your child's name, notes, photos or a backup file unless we ask for something specific to fix a problem.

Why we use this data

• Your log, photos, reminders and settings on your device: to provide the checklist, allergen counts, journal, reminders and reports you asked for (performance of our contract with you). Health-related notes you choose to write stay on your device, are processed only by the app on your device at your request, and are never received by us.
• Support emails: to answer you (our legitimate interest in helping people who contact us).
• Purchase records from Apple: to meet accounting and tax obligations.

Who we share data with

Nibblist sends nothing to us or to anyone else. Apple distributes the app and processes payments under Apple's own privacy policy. If you email us, the message passes through Cloudflare (which routes mail for our domain) and our mailbox provider, as described in the company privacy policy. We do not sell personal data and do not share it with advertisers.

International transfers

The app itself transfers nothing. For support emails, Cloudflare, Inc. is based in the United States and certified under the UK Extension to the EU-U.S. Data Privacy Framework; our mailbox provider may store messages outside the UK, in which case we rely on the UK's adequacy regulations or the International Data Transfer Agreement or Addendum.

How long we keep data

Data in the app stays on your device until you delete it: delete a tasting, a food or a child in the app, or use Settings → Delete All Data to remove everything. When you delete something, the app also deletes the undo copy of a merge or restore and the last file it made for sharing. Deleting the app removes everything too. There is no copy on our side. Backups, reports and tastings files you saved or sent elsewhere stay there until you or the person you sent them to delete them. Support emails are kept for up to two years after the last message in the conversation, unless you ask us to delete them sooner.

Your rights

Under UK data protection law you can ask us to access, correct, or delete personal data we hold about you, to restrict or object to how we use it, or to receive a copy in a portable format. For Nibblist, the only personal data we could hold is a support email you sent us; everything else is on your device, where you can view, export and delete it yourself. Email support@escapeplan.software and we will respond within one month. If you are not satisfied with our response, you can complain to the Information Commission (the ICO) at ico.org.uk.

Children

Nibblist is an app for parents and carers. It is not directed at children, it is not in the App Store's Kids category, and it does not collect personal data from anyone, including the child whose foods you log. Information about your child that you enter stays on your device under your control. If you believe a child has sent us personal data by email, contact us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top of this page. If a change materially affects how we use your data, the app will tell you the next time you open it.