Privacy Policy

Updated 23 September 2026

Tholve is built so that the most personal things stay on your iPhone. This policy explains what the app stores, where it goes and how you delete it.

The short version

• No advertising, no analytics tracking, no session replay.
• We don’t sell your data and don’t use it to train AI models.
• Apple Health data and progress photos never leave your iPhone.
• You can log meals by hand without an account, and export or delete your data at any time.

What Tholve stores

Your account. If you create an account, we store your email address or Sign in with Apple identity with our backend provider, Supabase. We keep it until you delete your account.

Your diary. Meals, saved meals, targets, plans, weight and waist, workouts, manual sleep and check-ins are stored in an encrypted database on your iPhone. With an account, they also sync to our Supabase backend as a backup.

Apple Health data. Steps, sleep, workouts and other Health data you allow Tholve to read are stored encrypted on your iPhone only. They are never uploaded, sent to AI or used for analytics.

Progress photos. Stored on your iPhone only, each encrypted with its own key and excluded from backups. They are never uploaded or sent to AI.

Subscriptions. Purchases go through Apple. We use RevenueCat to confirm your subscription and keep your plan status. Apple handles payment details; we never see them.

AI meal analysis

When you log a meal with a photo or a description, Tholve sends that photo or text to OpenRouter, which routes it to an AI model provider. You’re asked for consent before the first analysis, and you can withdraw it at any time in Settings. Manual logging works without it.

• The photo is deleted when the analysis finishes, and at the latest after 24 hours.
• An unconfirmed result expires after 24 hours.
• We request that providers don’t store or train on your data. That excludes providers that do, but we can’t guarantee zero retention by every provider.

AI output is only a suggestion. Nutrition values come from an approved food library, and nothing is added to your diary until you confirm it.

Where your data is processed

Supabase, OpenRouter and model providers may process data outside your country, including in the United States.

Export and deletion

In Settings you can:

• Export your synced diary as a ZIP of JSON and CSV files. Apple Health data has its own on-device export.
• Remove from This iPhone to delete the local copy of your data.
• Delete Cloud Data to erase your diary from our servers while keeping your account.
• Delete Account to erase your server data and storage, revoke Sign in with Apple and delete your account. Deleting your account doesn’t cancel an App Store subscription; manage that in your Apple ID settings.

Children

Tholve is for adults and isn’t directed at children under 18.

Changes

If this policy changes, we’ll update this page and the date above. Significant changes will be shown in the app.

Contact

Questions or requests: privacy@tholve.com.