Privacy

Tallymeal is an ad-free food diary, operated from the United States. Questions about anything on this page go to support@tallymeal.com, and a person reads them.

Only what the app needs to work. There is no hidden collection.

What you tell us

• Your email address, so you can log in. There is no password to store.
• Your first name, if you give one. It is optional and only used to say hello.
• Age, sex, height, weight and your goal. These set your first calorie and protein numbers and nothing else. We ask for nothing we don’t use.
• What you log: foods and portions, meal times, weigh-ins, activity notes (a name and minutes), recipes and pinned foods.

What we work out from it

• Your daily calorie and macro targets, and how they adapt as your weight moves.
• Day and week totals, trends, and how many days you’ve logged.

What we collect automatically

• Your time zone, so a day ends at midnight where you are and not somewhere else.
• Ordinary server logs. No analytics product, no advertising pixel, no fingerprinting, no session recording, no third-party script of any kind.

Plus is billed by Stripe. Your card number, expiry and security code go to Stripe and are never sent to or stored by Tallymeal. We keep only an identifier for your Stripe customer and subscription, and the date your Plus access runs until.

A short list, and each one gets only what it needs to do its job. None of them are allowed to use your data for their own purposes.

• Anthropic — when you scan a meal photo or describe a meal in words, that photo or text is sent to Anthropic’s Claude model to be turned into food items. This is the one place a picture of your meal leaves Tallymeal.
• Stripe — payments, if you buy Plus.
• Our email provider — your address, to send login links and receipts.
• Google — only if you choose “Continue with Google”. Google tells us your email address, whether it is verified, and your first name. We request nothing else, and we never gain access to your Gmail, Drive, contacts or anything else in your Google account.
• Open Food Facts — when you scan a barcode, the barcode is looked up there. Nothing that identifies you is sent with it.
• Our hosting and database provider — where the app runs and your diary is stored.

• Sell your food log, your weight history or anything else about you.
• Show you ads, sponsored foods or brand deals in your diary.
• Hand your data to data brokers or advertising networks.
• Put a third-party tracker on this site.

These aren’t aspirations. They’re written into the rules the product is built against.

Two, both strictly necessary, neither used for tracking. There is no cookie banner because there is nothing here to consent to.

• tm_session — keeps you logged in. It holds your account identifier and when it was issued, signed so it can’t be tampered with. It lasts 30 days and renews each time you use Tallymeal, so you stay logged in as long as you keep coming back.
• tm_oauth — exists only during a Google sign-in, to confirm the login that comes back is the one you started. It lives ten minutes and is deleted the moment you land back on the site.

Settings → Export CSV gives you your full diary, every entry, free and any time. It is not a Plus feature and it never will be. The format is documented on the CSV spec page so you can take it to another app.

Settings → Delete account. We want you to know exactly what that does, because it is not the same at every service.

Straight away:

• You are signed out everywhere and can no longer reach your diary.
• Tallymeal stops using your data for anything at all.
• Your email address is released, so you can start a brand-new account with it whenever you like. That new account starts empty — it is not the old one restored.

After that:

• Your records — diary, weigh-ins, body details — are kept for 10 years, then permanently erased.
• During that time they sit in the database, retained and unused. They are not processed, not analysed and not shared.

We would rather state that plainly than describe it as an instant erasure, which it isn’t. If you want your data gone sooner than 10 years, email support@tallymeal.com and ask — we’ll do it.

• While your account is open: as long as you keep it, because it is your diary.
• After you delete: 10 years, then permanent erasure, as above.
• Login links: fifteen minutes, then they expire and are removed automatically.
• Billing records: kept as long as tax and accounting rules require, which is generally seven years.

Everything travels over HTTPS. Your login cookie is signed and marked HttpOnly, so scripts can’t read it. We store no passwords at all — there is nothing to leak, because logging in is a one-time emailed link or Google.

No system is perfect, and anyone who tells you otherwise is selling something. If we ever have a breach that affects you, we will tell you.

Tallymeal is not for children under 13, and we don’t knowingly collect anything from them. If you believe a child under 13 has an account, email us and we will remove it.

Tallymeal is run from the United States, and your data is stored there. It is meant for people in the United States. It is not aimed at people in the European Economic Area or the United Kingdom. If you use it from somewhere else, your data is still handled in the US, under this policy.

If this policy changes in a way that matters — what we collect, who sees it, how long we keep it — we’ll email you before it takes effect rather than quietly editing the page.