Burnin

1. Who we are

Burnin is a calorie and metabolism tracker made by Bein LTD ("Bein", "we", "us"). This policy explains what information the Burnin app processes, where it goes, and the choices you have. It applies to the Burnin app on iOS and Android. For the purposes of data protection law, Bein LTD is responsible for the processing described here. You can reach us at dan@bein.ltd.

2. What we process, at a glance

3. What stays on your device

Burnin has no backend. Everything you log (meals, foods, portions, meal photos, weight entries, goals and your profile) is stored only on your device. It is never uploaded to us, and we could not read it if we wanted to: we operate no server that receives it. Your metabolic rate is calculated on the device from your own logging and weight history.

On-device AI. Understanding a meal you describe, reading a photo of a plate, and interpreting speech all run on your device, using an AI model downloaded once from a public model host. That download is an ordinary web request, and the host may log standard technical data such as your IP address. If a device cannot run the model, those features are unavailable on it. They are never sent to a server instead.

Voice. Speech is recognised on the device. On phones that can't do that, voice input is turned off rather than sent anywhere.

Camera and photos. Burnin uses the camera, with your permission, to scan barcodes and photograph meals. Images are processed on the device. A scanned barcode number may be looked up as described in section 4.

Widgets and reminders. Home Screen and Lock Screen widgets read their figures from storage on your own device. Reminders are scheduled locally by the app. Nothing is transmitted to show either.

4. Food database lookups

To find a food's calories, Burnin first checks a food table built into the app. When a food isn't there, Burnin looks it up in two public databases: USDA FoodData Central and Open Food Facts. The request contains the food's name (what you typed, or what the AI read from your message) or a product's barcode, plus your country so that local products can be shown. It contains no account, no identifier and nothing from your log. Like any web request, it reveals your IP address to that service, which handles it under its own privacy policy.

5. Anonymous usage analytics

Burnin sends a small set of usage events to PostHog, an analytics service hosted in the European Union.

• No identity. Events carry a random identifier created when the app is installed. Burnin has no accounts, and we never collect your name, email or contacts.
• No content. Events never include food names, photos, weights, goals or any figure from your log. They are limited to feature names, counts, durations and outcomes, for example "a barcode scan succeeded".
• No location. Burnin does not use location services, and location lookup from your network address is turned off. As with any web request, events reach PostHog from your IP address.
• Crash reports. When the app crashes or hits an unexpected error, it sends a report to the same service: the error message, the place in the app's code where it happened, the app version and the phone's operating system. Reports carry the same random identifier and are used only to find and fix bugs.

We use this data in aggregate and make no attempt to identify anyone from it. Because it is not linked to you, we cannot pick out and delete one person's events.

6. Advertising

Burnin is free and is supported by a single banner ad, shown only on the profile tab. Ads never appear on the logging screens and never affect a calculation.

The banner is served by Google AdMob. To show and measure ads, Google may collect device information and advertising identifiers, and it processes them under Google's Privacy Policy. This is the one part of Burnin where a third party may receive an identifier tied to your device. Your food log, weight history and photos are never shared with it.

7. Legal bases

If you are in the European Economic Area, the United Kingdom or another place with similar law, we rely on our legitimate interests for the processing we control: understanding how the app is used and where it fails (section 5), and looking up nutrition data for foods you log (section 4). We keep that processing to the minimum described above. Processing by Google for advertising is governed by Google's own terms and policy.

8. Sharing and international transfers

We do not sell your information and we do not share your log with anyone. The only third parties involved are the ones named above:

• PostHog (EU hosting): anonymous analytics.
• Google AdMob: the profile-tab banner.
• USDA FoodData Central (United States) and Open Food Facts (France): food lookups.
• The AI model host: the one-time model download.
• Apple and Google: the app stores and operating systems Burnin runs on, under their own terms.

Some of these services operate outside your country, including in the United States. Where that happens, the transfer is limited to the information described for that service.

9. How long data is kept

Data on your device is kept until you delete it or uninstall the app. We hold no copy. Anonymous analytics events are kept only as long as they are useful for understanding how the app is used. Data received by Google, the food databases or the model host is kept under their own policies.

10. Your choices and rights

• Take your data with you. Burnin can export your whole log as a file in Onyx, an open format, saved wherever you choose.
• Delete it. Delete entries in the app, or uninstall Burnin to remove everything it stored on your device.
• Limit ad tracking. On Android, open Settings → Google → Ads to delete or reset your advertising ID. On iOS, turn off "Allow Apps to Request to Track" under Settings → Privacy & Security → Tracking.

Depending on where you live, you may have the right to access, correct, delete or object to the processing of personal data about you. Because we hold none of your log and our analytics are not linked to you, most requests can be met on your device. Write to dan@bein.ltd for anything else. You also have the right to complain to your local data protection authority.

11. Security

Your log is protected by your device's own security, including its lock screen and encryption. Everything Burnin sends over the network travels encrypted (HTTPS). No method of storage or transmission is completely secure, but keeping your data off servers removes the largest risk: there is no database of users to breach.

12. Children

Burnin is not directed at children under 13, and we do not knowingly collect information from them. Personal content stays on the device and analytics are anonymous, so no such data reaches us. If you believe a child has given us personal information through another channel, contact us and we will delete it.

13. Changes to this policy

If what Burnin does with data changes, we will update this page before the change ships and revise the effective date at the top.

14. Contact

Questions about this policy or about your data: dan@bein.ltd.