Privacy policy

Last updated 9 September 2026. Tally is run by an individual developer; there is no advertising, no analytics SDK, and no data sale.

What Tally stores

• Account: your email address, a display name, a password hash if you set a password, and the identifiers Apple or Google give us if you sign in with them.
• Profile and goals: sex, birth date, height, weight, activity level, goal, weekly pace, units, timezone, and calorie and macro targets.
• Diary: foods and meals you log, custom foods and meals you create, favorites, weigh-ins, manual workouts, and food reports you send. Water records are stored on your device.
• Apple Health: active energy for a day is copied to your account only after you turn on "Share Health exercise with Tally". Turning it off deletes the copies. Everything else from Health stays on your device.
• Diagnostics: if you enable "Share diagnostics" in App preferences, a summary from Apple's MetricKit (counts, durations, app and OS version, top code frames) is sent so the bug can be fixed. It never contains diary content.
• Assistant connections: which assistant you connected, the scopes you granted, and when.

Why

To keep your diary in sync across your devices and the assistants you connect, to calculate your plan, and to fix bugs. Barcodes you scan may be sent to Open Food Facts when Tally's catalog has no match.

Who sees it

Your account data is available through the app, this website, and assistants you explicitly connect (each sees only what its scopes allow). The developer may access data to operate the service, investigate problems and respond to support requests. Infrastructure providers process data on Tally's behalf: Heroku (hosting and Postgres), Resend (account email), Apple and Google (sign-in), Open Food Facts (barcode lookups). Assistant conversations are governed by Anthropic's and OpenAI's own policies.

Retention and deletion

Data is kept while your account exists. Deleting your account from the app or the account page permanently removes your profile, goals, diary, foods, weights, workouts, Health copies, diagnostics, sessions and assistant grants, and asks Apple or Google to revoke their sign-in grant. Backup copies are separate from active account data and are removed as backups expire.

Security

Data is encrypted in transit and stored in a private database. On your device the diary is protected by iOS file protection and credentials live in the Keychain. Session and assistant tokens expire and can be revoked from the account page.

Your rights and contact

You can export your diary from the app, revoke assistant access, or delete everything at any time. For questions or requests, use "Send Beta Feedback" on Tally’s page in TestFlight.