Consumer Health Data Privacy Policy

Updated 28 October 2026

This policy is for residents of Washington and Nevada, and adds to our main Privacy Policy. Tholve is run by Khidmat Tech Sdn. Bhd. (202601002071 (1664168-K)), a company registered in Malaysia.

What we collect and why

With an account, we collect the health data in your log: meals, saved meals, targets, your calorie plan (with the age, height, sex and weight it’s calculated from), weight, workouts and sleep you enter. We use it to back up your log, sync it to your account and show you your progress. From when it syncs, never what it holds, we also count how many accounts use Tholve each day and come back, as totals that name no one. When you ask, we also use a meal photo, a scanned food label or a description to suggest what’s in the meal, or, to fix a meal the AI estimated, your correction and that meal’s foods. Our server’s request logs record who called it and when, never what you’ve logged.

Apple Health data, and what Sleep and phone sleep detection read and work out (your iPhone’s motion and step activity, sleep estimates, your Sleep Plan and its results, and the records kept by the sleep test tools in private test builds) stay on your iPhone, encrypted and excluded from backups. We never collect them, except the nights you share with Share Sleep Data in Settings › Sleep: what phone sleep detection estimated for each night and how (with your Sleep Plan’s bedtime and wake time when it used them), your corrections, your iPhone’s motion and step activity around the night and the Apple Health sleep that overlaps it, including recent nights already on your iPhone, but never the summaries Tholve makes from your iPhone’s accelerometer. The switch is your account’s, so every iPhone signed in to it with Sleep on shares its nights. We use them only to improve sleep detection and keep the 400 you shared most recently (about 13 months if you share every night), until you turn Share Sleep Data off, which deletes them all, or delete your account. Sleep is off until you turn it on; until then, and after you turn it off, Tholve reads no sleep from Apple Health or your iPhone’s motion.

Where it comes from

From you: what you enter in Tholve, and workouts you record on Apple Watch. If you turn on Share Sleep Data, also from Apple Health and your iPhone’s motion sensors, for the sleep nights you share.

Who we share it with

We don’t sell it. Supabase stores it for us. With your consent, a meal photo, a scanned food label or a description, or a correction with the meal’s foods, goes to OpenRouter, an AI gateway that may handle it outside the United States, which passes it to Google Cloud’s Vertex AI in the United States, only to suggest what’s in the meal. If you email us, Cloudflare forwards the email and Microsoft 365 stores it for us. If you choose Share in Tholve, PostHog, stored in the EU, records which screens and features you use, tied to your account ID, never what you eat or type, your body measurements or Health data; and Sentry, stored in the EU, receives crash reports, which include none of your health data and aren’t tied to your account. No third party collects it across other apps or websites.

Your rights

You can confirm whether we hold your health data, see it along with a list of everyone we’ve shared it with and how to contact them, withdraw your consent, and delete it. Export in Settings gives you a copy of your synced log and the sleep nights you shared; for the rest we hold, such as backed-up meal photos, email us. Delete Account deletes the nights with the rest. To withdraw your consent, delete your account, or use Delete Cloud Data and then sign out on every iPhone: while you’re signed in, Tholve backs up what you log. Delete Cloud Data doesn’t touch the sleep nights you shared: to withdraw consent to sharing and delete them, turn off Share Sleep Data in Settings › Sleep; removing Tholve’s access in the Health app doesn’t turn sharing off or delete them. Deleting a single log entry keeps it, marked as deleted, with its earlier versions, and each later workout keeps a copy of your sets from the last time you did its exercises, even once that earlier workout is changed or deleted; Delete Cloud Data and Delete Account delete all of it. Use Settings in Tholve or email privacy@tholve.com, or our data protection officer at dpo@tholve.com. We answer within 21 days. To appeal a decision, reply to our answer; we decide within 45 days. If we refuse your appeal, you can contact the Washington State Attorney General.

Changes

If this policy changes, we’ll update this page and the date above, and tell you in the app first.