Privacy Policy
Last updated: 10 June 2026
TummyTally ("TummyTally", "we", "us") is a calorie and macro tracking app for iOS and Android. This policy explains what data the app handles, where it is stored, and the choices you have. TummyTally is local-first: by default your information stays on your device and is not sent to us.
1. Data stored on your device
Most of what you do in TummyTally — your food diary, logged meals and water, goals, profile details (such as height, weight, age, sex and activity level), and app settings — is stored locally on your device. If you never sign in, this data is not transmitted to us or anyone else, and we cannot see it.
2. Optional cloud sync (accounts)
If you choose to create an account and enable cloud sync, your diary and related app data are stored in our backend (hosted on Supabase) so you can access them across devices and back them up. To run accounts we process:
- your email address (and, if you use Sign in with Apple, the identifier Apple provides);
- the app data you choose to sync (diary entries, foods, goals, profile);
- basic technical data needed to operate the service (e.g. timestamps).
Cloud sync is optional. If you do not sign in, none of this applies.
3. Health & fitness data
With your explicit permission, TummyTally can integrate with Apple Health (iOS) or Android Health Connect. This lets the app read data such as weight, date of birth, sex and activity to set up your profile and goals, and write the meals, nutrition and water you log back to Health. This data is exchanged directly between the app and the platform's health store on your device under the permissions you grant, and is only included in cloud sync if you have enabled sync. You can revoke health permissions at any time in your device settings.
4. AI features
TummyTally offers optional AI features (for example, generating meals, recognising food photos, and parsing meals you type or speak). When you use an AI feature, the relevant input — such as the text you entered or the photo you captured — is sent to Anthropic (the provider of the Claude AI model) to produce a result. Depending on your settings this request is made either directly using your own API key, or via our secure backend. AI features are optional and only run when you trigger them.
5. Advertising
TummyTally may show ads to users on the free tier using Google AdMob. Premium users do not see ads. To serve ads, AdMob may process device identifiers and similar data. Where required (for example in the EEA, UK, and on iOS), you will be asked for consent through Google's consent prompt and, on iOS, Apple's App Tracking Transparency prompt; if you decline, non-personalised ads are shown instead. You can learn more in Google's policy on how it uses data from sites and apps that use its services.
6. Purchases
Premium subscriptions are sold through the Apple App Store and Google Play and managed using RevenueCat, which helps us validate purchases and manage entitlements. The app store and RevenueCat process the purchase information needed to provide and restore your subscription. We do not receive or store your full payment card details.
7. How we use data
- to provide the core tracking features;
- to sync and back up your data when you enable an account;
- to provide AI features you request;
- to operate premium subscriptions and (for free users) advertising;
- to maintain, secure and improve the app.
We do not sell your personal information.
8. Data retention & deletion
Local data remains until you delete it or uninstall the app. If you use an account, you can request deletion of your account and synced data by emailing us; we will delete it within a reasonable period, subject to any legal retention obligations. Removing data held by the app stores, Apple/Android Health, or third parties is governed by their own controls and policies.
9. Children
TummyTally is not directed to children and is not intended for use by anyone under the age required by their local law to consent to data processing (for example, under 13 in the US, or the relevant age in your country). We do not knowingly collect data from children.
10. Your rights
Depending on where you live (for example under the EU/UK GDPR or South Africa's POPIA), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.
11. Third-party services
This policy references third parties that may process data on our behalf or under their own policies:
- Supabase (cloud sync & backend)
- Anthropic (AI features)
- Google AdMob (advertising)
- RevenueCat (purchases)
- Apple / Google (app stores & health platforms)
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through an in-app notice.
13. Contact
Questions or requests about this policy or your data? Email support@tummytally.com.