T.T.A.A.A LLC

Privacy Policy

Last updated: October 31, 2026

T.T.A.A.A LLC operates TonedCore. This policy explains the current privacy practices for the TonedCore app and website. Available features may vary by app version, including beta versions.

Information stored on your device

TonedCore stores profile answers, workouts, meals, check-ins, and progress records locally on your device. Notes or conversations retained from earlier app versions also remain on the device. Current beta releases do not offer AI chat or upload that history.

Beginning with version 1.0.1 (build 52), TonedCore marks its local profile, health and progress records, including imported sleep, and saved Body Check-In photos as excluded from automatic device backups. Earlier app versions may have allowed this data in operating-system backups or device transfers. This update does not remove copies already present in existing backups.

TonedCore does not provide cloud sync or backup restoration for these records. Reinstalling the app or restoring a subscription does not recover this local history.

Food photo estimates and your food journal

When you allow photo estimates, the selected food photo, optional correction, previous estimate, and language are sent through TonedCore's Supabase service to DeepInfra. The app removes original photo metadata and does not include your Apple Health data, body photos, weight, or profile.

DeepInfra's processing and retention exceptions are described in its data privacy documentation and Privacy Policy. TonedCore does not store photo or nutrition content on its server; request identifiers, a private app identity, and timestamps are stored to enforce usage limits. Old request metadata is cleaned up in batches during subsequent requests, rather than expiring at an exact time.

Saved food photos, nutrition estimates, planned-meal confirmations, and corrections stay in a device-protected local journal excluded from backups. Removing a meal from your log stops counting it while retaining a recoverable local record. Calorie and portion estimates may be wrong; you can correct them.

Private body check-ins

Optional Body Check-In photos are stored separately on your device. They are not sent to the food-photo estimation service. The backup protection and recovery limits described above also apply to these photos.

Historical reminders and consent records

Next-step commitments and self-reported outcomes saved by earlier versions remain in a separate, device-protected local file excluded from backup. Current beta releases no longer offer the “Your next step” feature and remove its pending local reminders when you open the app. Those historical records are not sent to a server.

When you accept the Terms of Use during onboarding, the app stores the version, date, and language of that acceptance locally. Existing users are not treated as having accepted a new version without their consent.

Feedback and support

When you use Messages or food photo estimates, TonedCore creates a private app identity without requiring a username or email. Its sign-in credentials are stored in this device's Keychain. Messages you choose to send, replies, conversation status, language, and timestamps are stored with Supabase so support can respond. Conversations are not automatically restored on a new device.

If you enable reply notifications, TonedCore also stores an Apple push token and its delivery environment. Apple delivers generic reply alerts without your message body in the notification. You can disable notifications in iPhone Settings. Versions with account deletion let you delete the support conversation together with your private app identity, as explained below. For other data requests or older versions, contact support@tonedcore.com. Messaging does not automatically upload your workout, meal, or Health data.

If you enter your email during onboarding to help improve TonedCore, the app stores your name, email, opt-in, and submission status locally. When the customer-signal endpoint is configured, TonedCore may also receive your name, email, consent text/version, app version/build, iOS version, device model, language, and timestamp so the founder can ask product-improvement questions. TonedCore does not sell that email.

If you send feedback or contact support, TonedCore may receive your message, email address, app version/build, iOS version, device model, preferred language, and timestamp so support can understand the issue and reply if needed. Earlier app versions could include a preselected cancellation reason, existing contact email/name, and subscription/device context. New optional cancellation-intent feedback uses the limited fields and separate reply consent described below; it does not confirm a cancellation.

Health data

If you connect Health Data, TonedCore reads daily activity summaries from Apple Health, such as active energy, resting energy, and steps on your device to show daily context and calculate an on-device calorie baseline when enough recent full-day data is available. With permission, it can also import sleep summaries into your local sleep log. Apple Watch and supported apps may contribute data to Apple Health when you enable those connections. TonedCore does not write to Apple Health and does not include Health data, workouts, meals, weight, body measurements, medical flags, or coach chat history in feedback or customer-signal messages.

Subscriptions and paywall services

If subscriptions are enabled, Apple, Stripe, RevenueCat, and TonedCore's subscription partners may process the purchase information needed to show, manage, restore, and verify paid access.

TonedCore may share limited app details with the subscription provider, such as app version/build, onboarding completion, preferred language, coach name, unit system, subscription tier/provider, and local paid-access status.

Onboarding progress

In app versions that include onboarding measurement, TonedCore records when an attempt starts, which numbered screens are shown, and when onboarding finishes. These events include a random app/profile identifier also used with RevenueCat, a separate attempt identifier, flow version, app version/build, language, time, and test or production environment when known. They are pseudonymous, not anonymous. They do not contain your answers, name, contact details, body measurements, medical information, meals, workouts, photos, or Apple Health data. The progress events go to TonedCore's Supabase service for an aggregate report; they are not sent to advertising platforms.

Purchase-flow measurement and optional feedback

TonedCore records minimal purchase-flow events: viewing subscription options, starting a purchase, and its app-reported result, plus app version/build, language, time, product identifier, and a random app/profile identifier also used with RevenueCat. These app-reported events do not prove a charge occurred. Verified RevenueCat events can record trial, purchase, renewal-disabled, and expiration information. No advertising identifier or workout, meal, body, or Health data is included in this measurement.

Nonpurchase and cancellation-intent feedback is optional and has no preselected reason. Only a reason or note you explicitly submit is sent. A reply email is sent only if you separately allow contact about that feedback; it is not added to a marketing list. Managing or cancelling your subscription with Apple never requires feedback or waits for its network delivery.

Pending items are stored in a device-protected, backup-excluded delivery queue. Feedback delivery is retried for up to 24 hours; other pending measurement events expire after seven days. Successful items are removed after delivery, and expired items are removed when the app next processes its queue. These limits describe local retry eligibility, not server retention.

Onboarding and purchase-flow measurements and submitted feedback are stored with Supabase to improve onboarding and understand subscription problems. Server records currently have no automatic expiry. Contact support@tonedcore.com about your submitted feedback or data requests; the local delivery limits above do not delete already-delivered server records.

Deleting your account and app data

In versions that include account deletion, open Menu → Your data → Delete account and data. The same option is available from the subscription screen, including when paid access has expired. If your version does not show it, contact support@tonedcore.com.

This removes your private app identity and its server-linked support messages, replies, notification registrations, and food-photo request metadata. It also deletes the current device's TonedCore profile, plans, workouts, check-ins, saved photos and food journal, historical coach and reminder records, pending feedback and measurement queue, app credentials, preferences, and local notifications. An internet connection is needed to complete deletion of server-linked data. If it is interrupted, the app resumes the deletion process when you reopen it.

A non-identifying confirmation hash and anonymous aggregate food-photo request counts may remain to confirm completion and enforce usage limits. These do not contain an account identifier, photo, or nutrition result. Onboarding and purchase-flow measurements, previously submitted feedback, and contact requests stored separately from the private app identity are not automatically removed. Email support@tonedcore.com for help with data requests. Identifying and verifying the relevant records may be necessary; an email address alone may not identify pseudonymous onboarding events.

Account deletion does not cancel a subscription or erase records held by Apple or RevenueCat. Manage an Apple subscription in iPhone Settings → your name → Subscriptions. Original photos in your Photos library, records in Apple Health, and copies in operating-system backups are outside this deletion process.

No sale of personal information

TonedCore does not sell personal information.

Contact

Email support@tonedcore.com with privacy or support questions.