Your data stays on your phone.
Effective: July 20, 2026 · Last updated: July 20, 2026
The short version
- Bagged runs entirely on your device — no Bagged account, no Bagged server.
- Your staples, list, stores, settings, and usage log never leave your phone.
- Two things go over the network so the app works: your postal code and your search terms, sent to Flipp and OpenFoodFacts to fetch local deals and product info.
- We never receive any of your data. No tracking, no ads, no analytics SDKs, no GPS.
Who we are
Bagged (“the app”, “we”, “us”) is published by Timothy Joshua. You can reach us any time at hello@exwhyzedd.com.
Information stored on your device
The app stores the following locally on your device only, in the app’s private storage and system preferences. It is never transmitted to us:
- Your postal code and locale — so the app knows which region’s flyers to request.
- Your staples and shopping list — the items you track and add.
- Your store preferences — the stores you shop at or watch.
- App settings — appearance mode, onboarding progress, notification de-duplication state.
- A local usage log — an on-device diagnostic log written to the app’s own storage to help improve the app. It never leaves your device unless you explicitly export it using the share button in Settings → Developer.
Deleting the app removes all of this from your device.
Information sent over the network
For the app to show you real deals, two requests go to third-party services. These contain no name, no account, no device identifier, and no precise location — only what’s listed:
- Flipp (flyer & deals provider) — receives your postal code, locale, and the search term / item keyword you look up, so it can return the flyers and deals near you. Governed by Flipp’s privacy policy.
- OpenFoodFacts (open product catalogue) — receives the product name or barcode you search, to fetch product details and images. Governed by OpenFoodFacts’ privacy policy.
We do not control these third parties and do not receive a copy of what they receive. Your postal code is the most location-specific thing the app transmits — the app does not use GPS or your precise location.
What we do not collect
- No accounts or logins — you never create an account.
- No precise/GPS location — only the postal code you enter.
- No advertising or ad identifiers (no IDFA, no ad SDKs).
- No third-party analytics or tracking SDKs (no Firebase, Google Analytics, Facebook SDK, etc.).
- No cross-app or cross-site tracking of any kind.
- No selling or sharing of personal data — we never have your data to begin with.
Notifications
If you enable notifications, the app schedules local price-drop reminders on your device. These are generated on-device and are not sent through any push server or third party.
Data retention and deletion
Because all of your data lives on your device, you are in control of it. To delete everything, delete the app — iOS removes the app’s storage with it. To clear individual items, remove them inside the app. We hold no copy to retain or delete, because nothing is sent to us.
Children’s privacy
Bagged is a general-audience shopping utility and is not directed at children under 13. We do not knowingly collect personal information from children — we don’t collect personal information from anyone off-device.
Security
Network requests to Flipp and OpenFoodFacts are made over encrypted HTTPS connections. Your on-device data is protected by iOS’s standard app sandboxing and device security.
Changes to this policy
If we change how the app handles data, we’ll update this page and revise the “Last updated” date above. Material changes will be reflected in a future app update’s release notes.
Contact
Questions about this policy or your privacy? Email hello@exwhyzedd.com.