Privacy Policy

Who operates Tallify

Tallify is operated by Baran Öner under the SubSet App developer name. For privacy, support, or deletion requests, contact subsetapp@gmail.com.

Information we collect

Depending on the features you use, Tallify may collect or process:

• Account identifiers such as Firebase user ID and sign-in provider identifiers.
• Email address, name, or profile information provided through Apple or Google sign-in.
• Onboarding answers such as birth date or derived age range, gender, height, weight, target height, goals, posture concerns, sleep duration, sport preference, workout frequency, habits, and plan preferences.
• Wellness, fitness, nutrition, hydration, sleep, routine, streak, and progress data that you enter.
• With your permission on iOS, Apple Health Step Count data used only for the Steps feature described below.
• Purchase and subscription status handled through the app stores and RevenueCat.
• App interaction, analytics, security, diagnostic, and basic performance data.
• AI coach messages, local chat history, recent conversation context, profile summaries, routine summaries, and reported AI responses when you use AI features.

AI coach and DeepSeek processing

The AI model is not embedded in the app binary. Tallify uses Firebase Cloud Functions hosted by Google Cloud in the europe-west1 region to provide AI coach features. When you choose to use Tallify AI and accept the AI data-use notice, the following information is sent through Tallify's backend to DeepSeek so the coach can generate a response:

• Your current message and up to the eight most recent user and assistant messages in the current conversation.
• The app language and an age range derived from the birth year: under 13, 13–17, or 18+.
• Current height, target height, main goal, posture concern, sleep duration, sport preference, and workout frequency, if provided.
• Seven-day totals for days with a logged workout and days on which hydration or nutrition goals were completed.

Tallify uses DeepSeek as an AI service provider for generating AI coach responses. This means the relevant request content is transferred from Tallify's backend to DeepSeek for processing. DeepSeek may process that information in jurisdictions where DeepSeek or its infrastructure providers operate.

Tallify does not include your name, email address, Firebase user ID, exact birth date, Apple Health data, or HealthKit Step Count in the information sent to DeepSeek.

Tallify's backend does not persist normal AI chat messages. Chat history is stored locally on your device unless you clear it or delete app data. The backend stores AI consent status and a daily request-count record. If you report an AI response, Tallify stores the selected AI-generated response, reporter ID, conversation ID, app language, status, and timestamps for safety review. The user's question is not included in that report.

How we use information

• To create and secure your account.
• To generate wellness, fitness, nutrition, routine, progress, and AI coach experiences.
• To keep subscription and entitlement status accurate.
• To provide support, account deletion, troubleshooting, safety review, and abuse prevention.
• To improve reliability, diagnose crashes, and maintain app security.

Sharing and service providers

Tallify may share information with service providers that help operate the app, including Firebase and Google Cloud for authentication, database synchronization, App Check, analytics, and server-side functions; DeepSeek for AI inference; RevenueCat for subscription entitlement and purchase-status management; Apple and Google for sign-in, app distribution, and purchases; USDA FoodData Central for natural-food search; and Open Food Facts for packaged-food and barcode lookup. Tallify does not sell personal information and does not use AI coach messages or health and fitness data for third-party advertising.

Apple Health and HealthKit

On iOS, Tallify clearly identifies its Apple Health integration in the Steps area of the app. If you grant permission, Tallify uses HealthKit to read only Step Count data (HKQuantityTypeIdentifierStepCount) and display your daily step total, hourly activity chart, and progress toward your step goal.

HealthKit access is read-only. Tallify does not write data to Apple Health and does not use CareKit. Apple Health Step Count is processed on your device for the Steps feature. It is not sent to Tallify's servers or DeepSeek, is not used by Tallify AI, and is not sold or used for advertising, marketing, data mining, or credit or insurance decisions.

Apple Health access is optional. You can deny permission and continue using other Tallify features, or revoke access at any time in the Apple Health app or iOS Settings. On Android, the corresponding Steps feature may use Health Connect, with your permission, to read Steps data for the same on-device activity display and goal-progress purposes.

Children and teens

Tallify is intended for users aged 13 and older. Users under the age of majority should use Tallify with parent or guardian involvement. Tallify does not knowingly collect data from children under 13. If you believe a child under 13 provided information to Tallify, contact us so we can delete it.

Retention and deletion

Account and app data is kept while your account is active or as needed for app functionality, legal, safety, security, purchase, and support purposes. You can request account and data deletion through the app or through the web support instructions at /support/#account-deletion. Limited consent, usage-control, fraud-prevention, safety-report, transaction, or legally required records may be retained when necessary and deleted or anonymized when no longer needed.

Your choices and rights

You can sign out, clear local AI chat history, report AI responses, and delete your account from the app where available. You can also contact us to request access, correction, deletion, or support with privacy questions. Some purchase, security, tax, or compliance records may be retained when required by law or platform rules.

Security

Tallify uses technical and organizational measures such as encrypted transport, Firebase Authentication, server-side validation, and restricted backend access. No online service can guarantee perfect security.

Changes

We may update this policy as Tallify changes. The effective date at the top of this page shows when this policy was last updated.