Home

Privacy Policy

TOVA is a nutrition app with an AI assistant. This page explains, in plain English, what data the app handles, where it goes, and how you stay in control. The short version: your data exists to power your own coaching, and for nothing else. No ads, no selling, no third-party trackers.

What the app collects

• Your account: an email address and password, used to sign in and back up your data. About once a month we may also email you what changed in TOVA; every one of those has an unsubscribe link, and opting out never affects your account.
• What you log: foods, water, weight, exercise, goals, custom foods and recipes, and your preferences.
• Your conversations with Tova: recent chat messages, and the short notes Tova keeps so she can coach you over time (you can see and edit these under You, then "What Tova knows about you").
• Setup details you choose to share: things like age, height, activity level, and optional health notes from the setup quiz, used only to build your plan.
• Feedback you choose to send: your message and any screenshots you attach, delivered to us by email so we can reply and fix things.

Where your data lives

Your data is stored on your device and, when you're signed in, backed up to your private account in our database (hosted by Supabase) so it survives a new phone and syncs across your devices. Access is locked to your account: each user can only ever read their own data. Everything travels over encrypted connections.

Your conversations with Tova are backed up the same way, so she remembers you on a new phone. She keeps a rolling window of recent messages rather than a permanent transcript: older chat falls away, while the short notes she keeps about you (under You, then "What Tova knows about you") persist until you edit or delete them, because those are what let her coach you over time. If you sign out and use the app without an account, nothing leaves your phone at all. Deleting your account from inside the app removes the chat, the notes and the log together, and we keep no copy.

How the AI works

When you chat with Tova, your message, recent conversation, and a summary of your logged data are sent through our server to our AI provider (Anthropic's Claude) to generate her reply. The app asks for your permission before the first thing you send, and nothing is sent to the AI until you agree. Photos you send are processed to answer you and are not stored on our servers; Tova keeps only a short text note of what a photo showed (for example, the numbers on a nutrition label) so she can refer back to it for about a week. Anthropic processes this data only as our service provider, protects it to a standard equivalent to this policy, and does not use your data to train its models.

Talking instead of typing uses your phone's own speech recognition (Apple's on iPhone, Google's on Android). TOVA receives the text, never the recording.

Apple Health and Health Connect

If you choose to connect Apple Health, the app reads your weight, steps, active energy, and workouts to power features you can see: automatic weigh-in and workout import and activity-aware coaching. If you also turn on "Write my nutrition to Health" (off by default), the app writes the food you log to Apple Health as food entries with calories, protein, carbs, fat and fiber, plus your water, and keeps them in step with your diary; what is in Health stays yours, in Apple Health, even if you stop writing or delete the app. Apple Health data stays within the app, is never sold or shared, and is never used for advertising or analytics.

On Android, the same features use Health Connect, and only if you connect it. With your permission the app reads your weight, steps, active calories and exercise sessions for the features above, and, if you turn on "Write my nutrition to Health Connect" (off by default), writes the food you log as nutrition entries (calories, protein, carbs, fat and fiber) and your water as hydration entries, keeping them in step with your diary. You choose each permission in Health Connect and can withdraw it there at any time. Data from Health Connect is used only to provide these features: it is never sold, never shared with anyone, never used for advertising, analytics or AI training, and never used to decide eligibility for credit, insurance or anything else. Entries TOVA wrote stay yours in Health Connect even if you stop writing or delete the app.

Food and product lookups

Food searches and barcode scans query public databases (USDA FoodData Central, Open Food Facts, and Open Beauty Facts). Those queries contain the food name or barcode, not your identity.

Helping the food database get better: when you correct a food's nutrition numbers from its label, add a custom packaged food, or search or scan something our sources don't have, the app may save that food fact (the product's name and numbers, or the missing search term or barcode) to improve the shared food database for everyone. These records are about foods, never about you: they carry no account id and no link to your diary, and your recipes stay private to your account.

Sharing with a coach (optional)

You can choose to share your nutrition with a coach. It only happens if you create a share code in the app (You tab, then Your coach) and give it to your coach, who enters it on their TOVA Coach page, or if you enter a code your coach gave you in the same place. A coach you share with sees your food diary, calories and macros, and weigh ins. They never see your conversations with Tova or the notes Tova keeps about you. You can stop sharing at any time from the same screen, and the coach's access ends immediately. Coaches are bound by the same rules as us: no selling, no advertising, no sharing onward. A coach may pay for your access to Tova as part of their plan; that changes nothing about what they can see, and you can stop sharing at any time.

Subscriptions

The subscription unlocks talking to Tova. The tracker itself is free with no time limit, and nothing that is free today will move behind the subscription. TOVA Premium is purchased through Apple on iPhone or Google Play on Android. The store processes the payment; we never see your card details. We use RevenueCat, a subscription management service, to confirm your subscription status, which involves your user id and purchase history, nothing from your diary or chats. Manage or cancel anytime in your App Store settings on iPhone, or in Google Play under Payments and subscriptions on Android.

What happens to your data if you cancel. Nothing is deleted. Everything you have logged stays exactly where it is, and the tracker keeps working with no time limit: logging, search, barcode scanning, your saved foods and recipes, the diary, trends, weight, water, and Apple Health or Health Connect. What stops is talking to Tova. If you subscribe again later, your log and the notes Tova keeps are still there and she picks up where you left off. The only thing that deletes your data is you, from inside the app.

What we never do

• No advertising, in the app or anywhere else.
• No selling or sharing your data with data brokers, insurers, or anyone else.
• No third-party analytics or tracking SDKs. There is no tracker in this app.

What we do count: a few product events on our own servers, such as the app being opened, a message sent, or a subscription started, so we can tell what gets used and what needs work. These counts contain no food, message text, or personal details, are tied only to your account, and are deleted with it. They never leave our systems.

Children

TOVA is not directed at children under 13, and we do not knowingly collect data from them.

A note on health

Tova provides general wellness and nutrition information, not medical advice. For medical concerns, talk to a qualified professional.

Changes and contact

If this policy changes in a way that matters, we'll say so in the app. Questions, requests, or anything else: help@tova.coach.