Home

Privacy Policy

TOVA, by Agentic Verification Architecture · Effective September 9, 2026

TOVA is a nutrition app with an AI assistant. This page explains, in plain English, what data the app handles, where it goes, and how you stay in control. The short version: your data exists to power your own coaching, and for nothing else. No ads, no selling, no third-party trackers.

What the app collects

Where your data lives

Your data is stored on your device and, when you're signed in, backed up to your private account in our database (hosted by Supabase) so it survives a new phone and syncs across your devices. Access is locked to your account: each user can only ever read their own data. Everything travels over encrypted connections.

Your conversations with Tova are backed up the same way, so she remembers you on a new phone. She keeps a rolling window of recent messages rather than a permanent transcript: older chat falls away, while the short notes she keeps about you (under You, then "What Tova knows about you") persist until you edit or delete them, because those are what let her coach you over time. If you sign out and use the app without an account, nothing leaves your phone at all. Deleting your account from inside the app removes the chat, the notes and the log together, and we keep no copy.

How the AI works

When you chat with Tova, your message, recent conversation, and a summary of your logged data are sent through our server to our AI provider (Anthropic's Claude) to generate her reply. The app asks for your permission before the first thing you send, and nothing is sent to the AI until you agree. Photos you send are processed to answer you and are not stored on our servers; Tova keeps only a short text note of what a photo showed (for example, the numbers on a nutrition label) so she can refer back to it for about a week. Anthropic processes this data only as our service provider, protects it to a standard equivalent to this policy, and does not use your data to train its models.

Apple Health

If you choose to connect Apple Health, the app reads your weight, steps, active energy, and workouts to power features you can see: automatic weigh-in and workout import and activity-aware coaching. Apple Health data stays within the app, is never sold or shared, and is never used for advertising or analytics.

Food and product lookups

Food searches and barcode scans query public databases (USDA FoodData Central, Open Food Facts, and Open Beauty Facts). Those queries contain the food name or barcode, not your identity.

Helping the food database get better: when you correct a food's nutrition numbers from its label, add a custom packaged food, or search or scan something our sources don't have, the app may save that food fact (the product's name and numbers, or the missing search term or barcode) to improve the shared food database for everyone. These records are about foods, never about you: they carry no account id and no link to your diary, and your recipes stay private to your account.

Sharing with a coach (optional)

You can choose to share your nutrition with a coach. It only happens if you create a share code in the app (You tab, then Your coach) and give it to your coach, who enters it on their TOVA Coach page. A coach you share with sees your food diary, calories and macros, and weigh ins. They never see your conversations with Tova or the notes Tova keeps about you. You can stop sharing at any time from the same screen, and the coach's access ends immediately. Coaches are bound by the same rules as us: no selling, no advertising, no sharing onward.

Subscriptions

The subscription unlocks talking to Tova. The tracker itself is free with no time limit, and nothing that is free today will move behind the subscription. TOVA Premium is purchased through Apple. Apple processes the payment; we never see your card details. We use RevenueCat, a subscription management service, to confirm your subscription status, which involves your user id and purchase history, nothing from your diary or chats. Manage or cancel anytime in your device's App Store settings.

What happens to your data if you cancel. Nothing is deleted. Everything you have logged stays exactly where it is, and the tracker keeps working with no time limit: logging, search, barcode scanning, your saved foods and recipes, the diary, trends, weight, water and Apple Health. What stops is talking to Tova. If you subscribe again later, your log and the notes Tova keeps are still there and she picks up where you left off. The only thing that deletes your data is you, from inside the app.

What we never do

What we do count: a few product events on our own servers, such as the app being opened, a message sent, or a subscription started, so we can tell what gets used and what needs work. These counts contain no food, message text, or personal details, are tied only to your account, and are deleted with it. They never leave our systems.

Deleting everything. In the app: You tab, then Account, then "Delete my account." This permanently removes your account, your cloud backup, your logs, and Tova's memory of you. It cannot be undone, and we keep no copy. You can also email us and we'll do it for you.

Children

TOVA is not directed at children under 13, and we do not knowingly collect data from them.

A note on health

Tova provides general wellness and nutrition information, not medical advice. For medical concerns, talk to a qualified professional.

Changes and contact

If this policy changes in a way that matters, we'll say so in the app. Questions, requests, or anything else: help@tova.coach.