Security

Updated 22 October 2026

Tholve holds people’s meals, training and body measurements, so we want to hear about any security problem in the app, its Apple Watch app, our servers or this site.

How to report

Email privacy@tholve.com with what you found, the steps to reproduce it and what it could expose. Write in English or Malay. We reply within 7 days, keep you updated while we fix it and tell you when it’s fixed.

What we ask

• Give us a reasonable time to fix the problem before you make it public, and agree the date with us.
• Use only your own accounts. Don’t view, change or delete anyone else’s data. If you reach some by accident, stop, tell us, and don’t keep or share it.
• Don’t disrupt the service for others: no denial of service, spam or automated sign-ups.
• Don’t try to trick people, us or our providers into giving you access.

Our promise

If you act in good faith and follow this page, we treat your research as authorised and won’t take legal action against you. If you’d like, we’ll thank you by name once the fix is out. We don’t pay rewards for reports.