Privacy Policy

Who operates Tallify

Tallify is operated by Baran Öner under the SubSet App developer name. For privacy, support, or deletion requests, contact subsetapp@gmail.com.

How we collect information

We collect information when you enter it during onboarding, profile, progress, nutrition, routine, or chat interactions; when you sign in through Apple or Google; when app features record actions you take; when purchases are reported by Apple, Google, or RevenueCat; and when device and app services provide analytics, diagnostics, or security signals. Optional device permissions are requested before the related feature accesses permission-protected information.

Information we collect

Depending on the features you use, Tallify may collect or process:

• Account identifiers such as Firebase user ID and sign-in provider identifiers.
• Email address, name, or profile information provided through Apple or Google sign-in.
• Onboarding answers such as birth date or derived age range, gender, height, weight, target height, goals, posture concerns, sleep duration, sport preference, workout frequency, habits, and plan preferences.
• Wellness, fitness, nutrition, hydration, sleep, routine, streak, and progress data that you enter.
• Purchase and subscription status handled through the app stores and RevenueCat.
• App interaction, analytics, security, diagnostic, and basic performance data.
• AI coach messages, local chat history, recent conversation context, profile summaries, routine summaries, and reported AI responses when you use AI features.

AI coach and DeepSeek processing

The current iOS version does not include Tallify AI and does not send iOS user data to DeepSeek or another third-party AI provider. The remainder of this section applies only if you use an AI feature on a supported non-iOS platform.

The AI model is not embedded in the app binary. Tallify uses Firebase Cloud Functions hosted by Google Cloud in the europe-west1 region to provide AI coach features. When you choose to use Tallify AI and accept the AI data-use notice, the following information is sent through Tallify's backend to DeepSeek so the coach can generate a response:

• Your current message and up to the eight most recent user and assistant messages in the current conversation.
• The app language and an age range derived from the birth year: under 13, 13–17, or 18+.
• Current height, target height, main goal, posture concern, sleep duration, sport preference, and workout frequency, if provided.
• Seven-day totals for days with a logged workout and days on which hydration or nutrition goals were completed.

Tallify uses DeepSeek, operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., as an AI service provider for generating AI coach responses. This means the relevant request content is transferred from Tallify's backend to DeepSeek for processing. DeepSeek may process that information in the People's Republic of China or another jurisdiction where DeepSeek or its infrastructure providers operate. DeepSeek's processing is also subject to its Open Platform Terms of Service.

Tallify does not include your name, email address, Firebase user ID, exact birth date, Apple Health data, or HealthKit Step Count in the information sent to DeepSeek.

Tallify's backend does not persist normal AI chat messages. Chat history is stored locally on your device unless you clear it or delete app data. The backend stores AI consent status and a daily request-count record. If you report an AI response, Tallify stores the selected AI-generated response, reporter ID, conversation ID, app language, status, and timestamps for safety review. The user's question is not included in that report.

Before the first AI transfer, Tallify displays an in-app disclosure that identifies Google Firebase/Google Cloud and DeepSeek, lists the data categories above, explains the purpose, and asks you to choose either Allow and Send to DeepSeek or Don't Allow. Choosing Don't Allow prevents the AI request and does not restrict non-AI features. Tallify requires a new consent if this disclosed AI data use materially changes. You can withdraw permission for future AI transfers at any time from Settings → AI Data Sharing. Tallify AI will ask for permission again before another AI request.

How we use information

• To create and secure your account.
• To generate wellness, fitness, nutrition, routine, progress, and AI coach experiences.
• To keep subscription and entitlement status accurate.
• To provide support, account deletion, troubleshooting, safety review, and abuse prevention.
• To improve reliability, diagnose crashes, and maintain app security.

Sharing and service providers

Tallify may share information with service providers that help operate the app, including Firebase and Google Cloud for authentication, database synchronization, App Check, analytics, and server-side functions; DeepSeek for AI inference; RevenueCat for subscription entitlement and purchase-status management; Apple and Google for sign-in, app distribution, and purchases; USDA FoodData Central for natural-food search; and Open Food Facts for packaged-food and barcode lookup. Tallify does not sell personal information and does not use AI coach messages or health and fitness data for third-party advertising.

Tallify requires service providers that process personal information for Tallify to use it only for the disclosed service, protect it with privacy and security safeguards that are at least equivalent to the protections described in this policy and required by applicable law, and assist with valid privacy requests where required. Tallify will stop transferring personal information to a provider if the provider cannot provide the required protection.

Health Connect and Apple Health

On Android, Tallify may use Health Connect, with your permission, to read Steps data and display your daily step total, hourly activity, and progress toward your step goal.

Health Connect access is read-only. Steps data is not sent to DeepSeek, is not used by Tallify AI, and is not sold or used for advertising, marketing, data mining, or credit or insurance decisions.

Health Connect access is optional. You can deny or revoke permission and continue using other Tallify features. The current iOS version of Tallify does not access Apple Health, HealthKit, CareKit, or Motion & Fitness data.

Children and teens

Tallify is intended for users aged 13 and older. Users under the age of majority should use Tallify with parent or guardian involvement. Tallify does not knowingly collect data from children under 13. If you believe a child under 13 provided information to Tallify, contact us so we can delete it.

Retention and deletion

Account and app data is kept while your account is active or as needed for app functionality, legal, safety, security, purchase, and support purposes. You can request account and data deletion through the app or through the web support instructions at /support/#account-deletion. Limited fraud-prevention, safety-report, transaction, or legally required records may be retained when necessary and deleted or anonymized when no longer needed.

Your choices and rights

On platforms where AI is available, you can decline an AI transfer or withdraw AI data-sharing permission, clear local AI chat history, and report AI responses. You can also sign out and delete your account from the app. You can also contact us to request access, correction, deletion, or support with privacy questions. Some purchase, security, tax, or compliance records may be retained when required by law or platform rules.

Security

Tallify uses technical and organizational measures such as encrypted transport, Firebase Authentication, server-side validation, and restricted backend access. No online service can guarantee perfect security.

Changes

We may update this policy as Tallify changes. The effective date at the top of this page shows when this policy was last updated.