Tallmark Privacy Policy
Version 1.0
Effective date: 10 October 2026
Last updated 10 October 2026
The short version
Your height, weight, habits and everything else you log in Tallmark stays on your phone. We have no copy of it.
There are three exceptions, and each is off until you agree to it.
Chat with Tally. If you turn it on, each question you type to Tally on the Coach tab is sent, with a summary of your records (such as your age, heights and last week's sleep), to our server and on to an AI model (Anthropic's Claude, run for us by kie.ai, or by Anthropic itself if kie.ai is down) so the answer fits you. Our server keeps no messages. Anthropic keeps what it is sent for up to about 30 days; kie.ai does not say how long it keeps requests. Your name, birthday, parents' heights and notes are never sent, and questions that mention self-harm, suicide, an eating disorder, pain or medicine are answered on your phone and never sent — anything else you type is sent. Turn it off any time in Settings.
Photo analysis of a meal. If you turn it on, a photo of a meal (with its location data removed), or the words you type into Describe it, is sent through our server to the same AI model, which reads it and sends back its best guess at what you ate. That is all that is sent, apart from a portion value (currently always "all of it"), your units and a random id. No records. Our server keeps no photo. The same retention applies as for the chat. Turn it off any time in Settings; typing a meal in by hand never leaves your phone.
Community, a place for teens to post short notes about everyday habits. If you join, your nickname, an animal avatar and what you post are stored on a server in the United States so other members can read them. You join with a made-up nickname: no real name, no email, no photo. Nothing is sent until you agree to the Community guidelines.
Nothing from your records is ever sent to Community: not your height, weight, age or date of birth, logs or estimate. And nothing from Community goes to the chat or to photo analysis.
No analytics, no ads, no tracking, no crash reporting.
Your records are not included in iCloud or Google Drive backups. That keeps them private, but it also means if you lose or replace your phone, your records are gone unless you exported them first.
You can see your records (Export my records), fix anything (edit an entry) and delete everything (Reset all my data) yourself, in the app. Leave Community and delete my posts removes what you put in Community.
Tallmark is for ages 13 and over. It will not let anyone younger set it up.
Questions? Email tallmark.support@newversion.studio.
1. Who we are
Tallmark is made by New Version Ltd, a company registered in New Zealand ("we", "us"), based in New Zealand.
You can contact us at tallmark.support@newversion.studio. If you are writing about privacy, put "Privacy" in the subject line.
This policy covers the Tallmark app on iPhone and on Android phones, and the Tallmark web pages at sites.google.com/view/tallmark.
2. What we collect, and what we do not
Most privacy policies are long because the company collects a lot. We have tried to build an app where there is very little to say.
Your records. Almost everything in this policy is information that you type into the app, which the app saves on your own phone. We cannot see it and we do not receive it, so we could not hand it to anyone even if we were asked to.
Chat with Tally. If you turn on the chat, the questions you type to Tally on the Coach tab, and a summary of your records, pass through our server to an AI model so it can answer. Our server does not keep them; the AI provider keeps them for a limited time. That is described in section 5, under Chat with Tally.
Photo analysis of a meal. If you turn on photo analysis, a photo of a meal or the words you type into Describe it pass through our server to an AI model so it can read the meal. Our server does not keep them; the AI provider may keep them for a limited time. That is described in section 5, under Photo analysis of a meal.
Tallmark Plus. If you subscribe, the app tells our server which App Store or Google Play purchase your phone holds, together with the random id described in section 3, so the Coach can tell you have Plus. The server asks Apple or Google whether the subscription is active and keeps a coded link between that id and the subscription. That is described in section 5, under What Apple and Google handle.
Community. The other thing we collect is what you choose to put into Community, if you join: a made-up nickname, an animal avatar and what you post, reply, react, report or block. That is described in section 5. It never includes your records.
3. What the app stores on your phone
Tallmark saves what you enter so it can show it back to you. Items marked health information are about your body or wellbeing. Privacy laws treat this kind of information with extra care, and so do we.
Your profile. Examples: Date of birth, sex assigned at birth (growth charts are different for each), units you prefer. Health information?: Partly. Why the app keeps it: Picks the right growth chart and works out your age.
Growth answers. Examples: Your parents' heights, whether tall relatives run in the family, shoe size, how much you grew last year, a height you have in mind (optional, never scored). Health information?: Yes. Why the app keeps it: Some go into the estimate. Others are kept only because you gave them.
Puberty answers. Examples: Growth spurt, body hair, skin, voice or breast development, facial hair, whether your periods have started and at what age, and when you last answered. Health information?: Yes. Why the app keeps it: Helps estimate how much growing may be left. See section 11 for why these questions are asked.
Heights. Examples: Each height you log, the date, and an optional note. Health information?: Yes. Why the app keeps it: Your growth chart, and the next estimate.
Weights. Examples: Each weight you log, the date, and an optional note. Health information?: Yes. Why the app keeps it: One of the estimate methods uses weight. No BMI, no goal.
Estimates. Examples: Each approximate adult-height range the app worked out, the percentile, which methods ran, and which measurement it came from. Health information?: Yes. Why the app keeps it: Your estimate history and the result screen.
Sleep. Examples: Bedtime, wake time, hours, a quality rating, an optional note, and your time zone for that night. Health information?: Yes. Why the app keeps it: The sleep tracker. The time zone keeps nights correct across clock changes and travel.
Mood. Examples: A face for the day and an optional note. Health information?: Yes. Why the app keeps it: The mood tracker. Never scored or averaged.
Meals. Examples: What you ate, when, the type of meal, and any nutrient amounts you entered (such as protein or calcium). Calories only if you entered them. If you took or picked a photo of the meal, the photo too (a copy shrunk to a small size, with its location data removed, kept with the meal). Health information?: Yes. Why the app keeps it: The meals tracker. Meals are never graded. Calories are hidden unless you turn them on in Settings.
Water. Examples: Each drink you log, and the daily goal you picked. Health information?: Yes. Why the app keeps it: The water tracker.
Movement. Examples: Routines and exercises you played, sessions you logged by hand, how long, and how hard it felt. Health information?: Yes. Why the app keeps it: The movement tracker and your weekly minutes.
Habits you described at the start. Examples: Usual sleep, how active you are, sports you play, what your eating looks like, what you want from Tallmark. Health information?: Partly. Why the app keeps it: Shapes tips and quests.
Quests and rewards. Examples: Which quest tasks you finished each day, streak, streak freezes, XP, level, badges. Health information?: No. Why the app keeps it: The game side of the app.
Coach conversation. Examples: The Coach topics you tapped, the questions you typed to Tally in the chat, and the answers. Health information?: Possibly. Why the app keeps it: So your conversation is still there next time. Delete it from the Coach tab, or with Reset all my data.
Chat id. Examples: A random code made on your phone the first time you use Chat with Tally or photo analysis (see section 5). Health information?: No. Why the app keeps it: Lets our server count how many chat messages and meal analyses one phone sends in a day. Not linked to you, not included in backups, deleted by Reset all my data.
Chat consent. Examples: Whether you turned on Chat with Tally, when, and which version of the explanation you agreed to. Health information?: No. Why the app keeps it: So nothing is sent unless you agreed to exactly what is sent now.
Photo analysis consent. Examples: Whether you turned on photo analysis, when, and which version of the explanation you agreed to. Health information?: No. Why the app keeps it: The same.
Things you type in Tally's panel. Examples: Anything you type in the box that opens when you tap Tally (not the Coach tab). Health information?: Possibly. Why the app keeps it: Not saved, and never sent. It stays in the phone's memory until you close the app, then it is gone.
Reminders and settings. Examples: Reminder on or off, reminder time, evening nudge on or off, units, vibration, calories shown or hidden, where you placed Tally. Health information?: No. Why the app keeps it: Remembers your choices.
Community sign-in. Examples: Your Community nickname and avatar, and the sign-in for your anonymous Community account (see section 5). Health information?: No. Why the app keeps it: Keeps you signed in to Community. What you post is stored on our server as well; see section 5.
What we never ask for: your name, email, phone number, address, school, photos of you, contacts, location, or race or ethnicity. (The one photo the app can take is of a meal, only when you choose to, and it stays on your phone unless you turn on photo analysis.) There is no sign-up with a name or email. Community uses a made-up nickname (section 5).
4. How the app uses what you enter
On your phone, and only on your phone, the app uses your records to:
work out an approximate adult-height range and a percentile (see the Health disclaimer (https://sites.google.com/view/tallmark/medical-disclaimer));
draw your charts and history;
run the daily quest, streaks, XP and badges;
choose which tips, Coach answers and Tally lines to show;
if you turned on Chat with Tally, build the short summary that goes with each question you ask (section 5);
schedule the reminders you asked for;
show free helplines for your country, worked out from your phone's region setting (not your location — Tallmark never reads your location);
check a mood note, when you save it, for words that suggest you might be in danger or struggling with food, so it can offer those helplines. The check happens on your phone, the note is still saved, and nothing is recorded about the check.
It does not use your information to build a profile of you for anyone else, to show you ads, or to make decisions about you. There is no "automated decision-making" in the legal sense: nothing the app works out from your records affects you outside the app. The chat's answers are written by an AI, but they are suggestions in a conversation you started, not decisions about you.
What you post in Community is used to run Community: to show it to other members, to filter and moderate it (section 5), and to enforce the rate limits and strikes described there. It is not used for ads or profiling.
5. What leaves your phone
Your records: nothing, unless you turn on Chat with Tally — then a summary goes with each question you ask. Community: only what you choose to put there.
Everything in the section 3 table stays on your phone, apart from your Community sign-in and, if you use the chat, what is listed under Chat with Tally below. Tallmark sends things over the internet for exactly four features: Chat with Tally, photo analysis of a meal, Community and, if you subscribe, checking your Tallmark Plus subscription. On Android, the app asks for the internet permission for those and for nothing else.
Tallmark itself has:
no analytics or "usage tracking";
no advertising, and no advertising ID;
no crash-reporting tool;
no push-notification service;
no real-name account, no email sign-up and no password.
Nothing you type in Tally's panel (the box that opens when you tap him) is sent anywhere; only the Coach tab's chat is.
Chat with Tally
What it is. On the Coach tab, the quick questions are answered by the app itself, on your phone, from answers we wrote and reviewed. Chat with Tally lets you ask in your own words instead. Those answers are written by an AI model, not by a person and not by a doctor. In the chat, Tally will tell you he is an AI character if you ask. The answers can be wrong; see the Terms of Use (https://sites.google.com/view/tallmark/terms-of-use) section 10A and the Health disclaimer (https://sites.google.com/view/tallmark/medical-disclaimer).
Why your records go with the question. So the answer fits you — for example, so Tally can talk about last week's sleep, or quote the app's own estimate instead of guessing one. The AI is told never to make a height prediction of its own, and our server checks every answer for a height that is not in your records before you see it.
It is off until you turn it on. Nothing is sent until you read the Chat with Tally screen, which lists what is sent, what never goes and who handles it, and tap Turn on chat. That is the only way to turn it on. If we change what is sent, or who handles it, the app asks you again. If you are under 18, the screen asks you to check with a parent or guardian first. Without the chat, the Coach's quick questions keep working on your phone.
What is sent with each question:
your question, and the last few messages of the chat (up to ten);
your age in years (not your date of birth) and the sex you chose for the growth chart;
up to your six latest heights and your latest weight, with their dates;
the app's estimate, exactly as the app shows it, with the date of the measurement it came from;
today's quest, your streak, and which Train routines you can play (and whether you have Tallmark Plus);
for the last 7 days: your meals (the type, the name you gave it, the foods in it, and protein, calcium, vitamin D and zinc; calories only if you turned calories on), water and your water goal, sleep (hours, bed and wake time, quality), the mood face you picked, minutes of movement, and Train sessions;
your units (metric or imperial), and the random chat id (section 3).
What is never sent: your name; your date of birth; your parents' heights; the height you have in mind; your puberty answers, including periods; the percentile and the other numbers behind the estimate; any note you wrote, including mood notes; photos; anything from Community; your location or contacts.
Some questions stay on your phone. Questions that mention self-harm, suicide, an eating disorder, pain or medicine are recognised by words on your phone and answered there, with helplines for your country, and nothing is sent — not then, and not later as part of "the last few messages". The app recognises those words and nothing subtler: anything else you type, including how you are feeling in other words, is sent. If something serious is on your mind, tap Where to get help on the Coach screen.
Who handles it. Three companies process the chat for us, and only to answer you (the same three handle photo analysis, below):
Cloudflare (runs our Tallmark server). What they do: Receives the question, checks it contains only what is listed above, passes it on, and checks the answer. What they keep: No messages and no records. It keeps three counters: how many messages a phone has sent today (stored under a scrambled form of the chat id), how many came from one internet address today (stored under a scrambled form of the address), and a total for the day. A phone's counter is deleted after 30 days without a message. Its logs record that a message was answered and how long it was, never what it said.
kie.ai (NEXUSAI SERVICES LLC, United States). What they do: Runs Anthropic's Claude model for us and writes the answer. Our server tries it first. What they keep: It does not publish how long it keeps what it is sent, so we cannot tell you a number.
Anthropic (Claude). What they do: Writes the answer if kie.ai cannot — our server then sends the question straight to Anthropic. What they keep: What it was sent and what it wrote, for up to about 30 days, under its own policy — longer only if it is flagged for a safety review, or if the law requires it. Anthropic does not use it to train its models.
They process the chat in the United States (section 13). None of them receives your name or anything that identifies you, unless you type it into a question. Please do not type your name, school, address or anyone's contact details into the chat.
The legal basis for the chat is your consent, given on the Chat with Tally screen — and, because the summary includes health information, explicit consent.
Limits. To keep the chat available for everyone, our server limits how many messages one phone can send in a day. If you send a lot, Tally may say the server is busy and to try again in a minute, or to come back tomorrow. We do not count or keep your messages to do this — only the counters above.
Turning it off. Settings › Chat with Tally turns it off in one tap, and nothing more is sent from the next question on. Reset all my data also turns it off and deletes the chat conversation and the chat id. What Anthropic already received is deleted under its policy (above); we cannot delete it sooner, because we never had a copy.
Photo analysis of a meal
What it is. When you add a meal you can take a photo, pick one, type it in (Type it in) or describe it in words (Describe it). Type it in fills the meal in on your phone and never uses the internet. Taking or picking a photo, or tapping Describe it, can use photo analysis: an AI model reads the photo or your words and sends back its best guess at the foods and their nutrients, which you can change before you save. The numbers are estimates and can be wrong.
It is off until you turn it on. Nothing is sent until you read the Meal photos screen, which lists what is sent, what never goes and who handles it, and tap Turn it on. That is the only way to turn it on. If we change what is sent, or who handles it, the app asks you again. Without it, you can still log a meal by typing it in, and everything else in Tallmark carries on. If you do not turn it on, the photo you took stays on your phone with the meal and goes nowhere.
What is sent with each meal:
the photo, shrunk to a small size, with its location and other camera data removed on your phone before it is sent — or, if you tapped Describe it, the words you typed (one line, up to 300 characters) instead of or as well as the photo;
a portion value (the app currently always sends "all of it", because it has no way to pick a smaller portion yet);
your units (metric or imperial), and the random id from section 3.
What is never sent: your name; your date of birth; your location; your height, weight or any measurement; your estimate; your parents' heights; your puberty answers; any note; anything else you have logged; anything from Community. Please do not type your name, school, address or anyone's contact details into a description, and keep faces and documents out of the photo — what you describe or photograph is sent.
Who handles it. The same three companies as the chat (the table above), and only to read the meal for you: Cloudflare runs our server, which checks the request, passes it on and checks the answer — and keeps no photo, no description and no result, only the same counters (a separate count for meals); kie.ai runs Claude for us and is tried first, and keeps it for a period it does not publish; Anthropic reads it if kie.ai cannot, and keeps it for up to about 30 days under its own policy. They process it in the United States (section 13). Your photo is also kept on your phone with the meal, until you delete the meal.
The legal basis is your consent, given on the Meal photos screen.
Limits. To keep photo analysis available for everyone, our server limits how many meals one phone can have read in a day, and your phone has a cap of its own. If you reach one, the app says so and you can type the meal in. Only counters are kept to do this.
Turning it off. Settings › Meal photos › Read meals from photos turns it off in one tap, and nothing more is sent from the next meal on. Reset all my data also turns it off and deletes the random id. What Anthropic or kie.ai already received is deleted under their policies (above); we cannot delete it sooner, because we never had a copy.
Community
Community is a tab where teens can post short text notes about everyday habits, reply, react and report or block. It is optional: you only join if you tap Join Community and agree to the Community guidelines (https://sites.google.com/view/tallmark/community-guidelines) on the welcome sheet. Nothing is sent to our server before you do that.
What you can do. Write a post (a title of up to 80 characters and an optional body of up to 600) in one of seven topics (Questions, Habit wins, Move, Food, Sleep, Water, Chat); reply (up to 300 characters); react with Cheer, Helpful or Same (there are no downvotes); report; and block. There are no private messages, no photos and no links, and a filter rejects phone numbers and handles. Nothing in Community gives you XP, a streak or a reward.
Who you are. A made-up nickname such as "Sleepy Fox 42" and an animal avatar. No real name, no email, no password, no photo. Behind the scenes the app signs in to an anonymous account: the server gives it a random user ID, and there is no email or name attached.
What we store on our server for a member:
your nickname and avatar;
when you accepted the Community guidelines;
your anonymous user ID;
your posts, replies and reactions;
reports you have made, and who you have blocked;
moderation strikes, and whether your access is paused.
Who can see it. Your nickname, avatar, posts and replies are visible to any Community member, until you delete them or they are removed (see below). Tallmark does not verify age beyond the 13-and-over check at setup. A person working for us can read posts and replies that have been reported or held for review (see "Keeping Community safe").
What is never sent. Your date of birth, age, sex, height, weight, parents' heights, puberty answers, measurements, meal, sleep, water, mood and movement logs, your adult-height estimate, photos, location and contacts are never sent to Community or to its server. Community's code is built so that it cannot read them, and an automated test checks that. No height, weight or age is shown on a post.
Where it is stored. Community is hosted on Supabase, a hosted database service that processes the data on our behalf. Data is stored on servers in the United States. The Supabase project is shared with another app owned by New Version Ltd, but Tallmark's Community data sits in its own separate area, which can be reached only through Tallmark's own functions.
Keeping Community safe.
Every post and reply goes through an automatic filter. Phone numbers, email addresses, links, @handles, "add me on Snapchat / Instagram / Discord…" and profanity or slurs are rejected. Posts that mention supplements, hormones, surgery, claims about growing a number of centimetres or self-harm are held: only the author can see them until a person has reviewed them.
Any member can report a post or reply. It is hidden for the person who reported it straight away. When three different members report the same thing, it is hidden for everyone until a person has reviewed it. (Only reports from members whose account has existed for a couple of days count towards hiding something for everyone, so a batch of brand-new accounts cannot hide other people's posts.)
Being reported never penalises anyone by itself. Only a person at New Version Ltd decides that something breaks the guidelines; removing it counts as a strike, and repeated removals can pause that member's access to Community.
Any member can block any other member.
Rate limits apply: 5 posts and 30 replies a day.
A person at New Version Ltd reviews reported and held posts. We aim to do this within 24 hours.
If you type words that suggest you might be in danger into the post box, Tallmark shows a link to Where to get help on your phone. This check happens on your phone and is not recorded.
How long it is kept. Posts and replies older than 90 days are deleted automatically. Items that have been removed are deleted within 30 days. If nobody opens Community as you for a whole year, your nickname and everything you posted are deleted too. You can edit or delete your own posts, and delete your own replies, at any time. See section 9 for leaving Community and deleting everything.
Outside Community, a few things happen only when you tap them, and they hand over to another app on your phone:
Help & legal links open this website in your browser. Your browser works under its own privacy policy. The link does not include anything about you.
Contact support opens your email app with our address filled in. The subject line includes the Tallmark version number and whether you are on iPhone or Android, so we can help. Nothing else is added. Please do not put your measurements or health details in an email. We never need them.
Where to get help opens your phone's dialler with a helpline's number, or findahelpline.com in your browser. Tallmark does not make the call or know that you made it.
Export my records hands a file to your phone's share menu (see section 8). You choose where it goes.
What Apple and Google handle
Apple (App Store) and Google (Google Play) run the stores you download Tallmark from. They handle your download, updates, and any review you write, under their own privacy policies. We receive store reports from them, such as how many people downloaded the app in each country. We cannot link those reports to you.
If you buy Tallmark Plus, Apple or Google takes the payment. We do not receive your name, card or Apple ID / Google account. The app asks the store on your phone whether you have Plus and keeps one yes/no answer on the phone so it can unlock your predicted height, routines and charts quickly, even without a signal.
What our server learns about a subscription. So that the Coach, which costs money to run, is only answered for people who have Plus, the app tells our server a reference to your purchase (a transaction number from the App Store, or a purchase token from Google Play) and the random id from section 3. Our server asks Apple or Google, with its own credentials, whether the subscription is active, and keeps: the product (monthly or yearly), whether it is active and until when, whether it is a free trial or set to renew, and a coded link between your random id and the subscription (the id and the purchase reference are scrambled before they are stored). It keeps up to five phones' ids per subscription, so a family's phones or a reinstall work. It does not receive or keep your name, email, Apple ID, Google account, payment details, or anything you recorded. Apple and Google also tell our server when a subscription renews, ends or is refunded. We delete a subscription's record about 400 days after it ends, and a phone's link after 90 days without use. "Reset all my data" unlinks your phone straight away; cancelling is done in your Apple ID or Google Play settings. This is the one thing our server keeps about a phone, which is why the App Store privacy label lists Purchase history as linked.
If you allow notifications, a free trial schedules one reminder on your phone, two days before it ends.
Your phone may offer to share crash and diagnostic reports "with app developers" (on iPhone: Settings › Privacy & Security › Analytics & Improvements; on Android, a similar setting). That is your choice in your phone's settings. We do not ask for it, and Tallmark contains no code to collect it. If you have turned it on, Apple or Google may pass us technical crash reports. Those do not include your Tallmark records.
6. Notifications
If you turn on the daily reminder, your phone shows it at the time you choose. There is also an optional evening nudge at 8:30 pm, which you can turn off on its own.
These are local notifications. Your phone schedules them itself. They are not sent over the internet, and the wording is always general (for example "Quest time"). They never mention a measurement, a weight, a mood or anything else you recorded. Anyone who sees your lock screen will see the general wording only.
You can turn reminders off in Tallmark's Settings, or in your phone's notification settings.
7. Backups
Tallmark tells your phone not to include your records in:
iCloud and computer (Finder/iTunes) backups on iPhone;
Google Drive backups on Android;
Android's phone-to-phone transfer when you set up a new phone.
Why: your records include health information about a young person. Keeping them out of cloud backups means they exist in one place only: your phone.
The trade-off: if your phone is lost, broken, reset or replaced, your records cannot be restored. We do not have a copy either. If you want to keep them, use Export my records (see section 8) and save the file somewhere you trust.
This section is about your records on your phone. What you have posted in Community is stored on our server (section 5), so it is not affected by your phone's backups, and a new phone does not bring it back.
On iPhone, a few simple settings (such as your units, reminder time, water goal and whether calories are shown) are stored in iOS's own settings store, which normal backups include. They contain none of your measurements or logs. Answers you give part-way through setup are kept outside backups until you finish, and then move into your records.
8. Exporting and sharing your records
Settings › Your data › Export my records makes a single .zip file on your phone. Inside it:
records.json, with all your records in one file; and
one spreadsheet file (CSV) for each tracker.
The app then opens your phone's share menu. You choose where the file goes: Files, a computer, email, a message to a parent, and so on. Once it leaves Tallmark, it is looked after by whatever app or service you sent it to, under their terms. It is not encrypted, so treat it like any other private document.
The export covers your Tallmark records on your phone. It does not include what you have posted in Community.
We never see the export. The copy Tallmark makes for the share menu is kept out of backups and deleted afterwards — straight away on iPhone, and on Android the next time you open Tallmark or export again (Android needs the file to still be there while the app you chose reads it).
There is no import yet, so you cannot load an export into Tallmark on a new phone. The export is for your own records, or to show a parent or doctor.
9. How long things are kept, and deleting them
Your records stay on your phone until you delete them. What you put in Community stays on our server until you delete it, you leave, or it reaches the limits in section 5 (posts and replies are deleted after 90 days).
One entry: Open it in its tracker and choose Delete. You can also edit an entry to fix it
One Community post or reply: Edit or delete your own post, or delete your own reply, in Community at any time
Everything you put in Community: Settings › Community › Leave Community and delete my posts. This removes your nickname, posts, replies and reactions, and your anonymous account, from our server. Your Tallmark records are not affected
The chat: Settings › Chat with Tally turns it off. Delete the conversation from the Coach tab. Anthropic deletes what it was sent within about 30 days (section 5); kie.ai does not say
Photo analysis: Settings › Meal photos › Read meals from photos turns it off. Delete a meal, and its photo on your phone, from the meal. Anthropic deletes what it was sent within about 30 days; kie.ai does not say (section 5)
Everything: Settings › Reset all my data. This deletes every record, estimate, streak, badge, reminder, the Coach conversation, the chat id and all your settings (so the chat and photo analysis are turned off), unlinks your phone from any Plus subscription on our server, and removes you from Community (your member record, all your content and your anonymous account on the server), then takes you back to the start
Everything, including the app: Delete Tallmark from your phone. The records on the phone are deleted with it. Deleting the app does not remove your Community posts. Use Leave Community and delete my posts first, or email us
If your phone cannot reach the server when you tap Reset all my data, the app asks whether to try again later or reset anyway. If you reset anyway, your Community posts remain on the server until they are deleted automatically (up to 90 days) and the phone forgets its Community sign-in, so you can no longer delete them yourself. You can email us to have them removed.
A reset cannot be undone, because there is no other copy of your records to restore from. If anything could not be deleted, the app tells you what, so you can try again or delete the app.
10. Your privacy rights
Privacy laws around the world give you rights over information about you. With Tallmark you can use most of them yourself, straight away, in the app:
See what is held about you (access). In Tallmark: Every record is visible in the app. Export my records gives you a full copy. What you posted in Community is visible in Community. Your chat is visible on the Coach tab; our server keeps none of it. Where it comes from (examples): NZ Privacy Act 2020, IPP 6 · GDPR / UK GDPR Art. 15 · CCPA/CPRA "right to know" · Australian Privacy Principle 12.
Take a copy with you (portability). In Tallmark: Export my records (JSON and CSV). Where it comes from (examples): GDPR / UK GDPR Art. 20 · CCPA/CPRA.
Fix something wrong (correction). In Tallmark: Edit the entry, or your profile. In Community, change your nickname in Settings, edit your own post, or delete a post or reply. Where it comes from (examples): NZ IPP 7 · GDPR / UK GDPR Art. 16 · CPRA · APP 13.
Delete it (erasure). In Tallmark: Delete an entry, a Community post or reply, Leave Community and delete my posts, or Reset all my data. Where it comes from (examples): GDPR / UK GDPR Art. 17 · CCPA/CPRA "right to delete".
Limit or object to use. In Tallmark: Your records are used only to show them back to you, and — if you turned the chat on — to answer your chat questions and to read a meal you chose to send. Community content is used only to run and moderate Community. You can turn off the chat or reminders, leave Community and delete anything.
Withdraw consent. In Tallmark: Settings › Chat with Tally turns the chat off, and Settings › Meal photos › Read meals from photos turns photo analysis off, each as easily as it was turned on. Where it comes from (examples): GDPR / UK GDPR Art. 7(3) · NZ Privacy Act.
Not be sold or shared for ads. In Tallmark: We never sell your information or use it for ads or tracking. The hosting provider processes Community data on our behalf, and the AI processors (section 5) process chat messages and meals to answer them, not for their own advertising. There is nothing to opt out of. Where it comes from (examples): CCPA/CPRA.
Not be subject to automated decisions. In Tallmark: None are made. Where it comes from (examples): GDPR / UK GDPR Art. 22.
Asking us. You can email us about any of these, and we will reply.
Your records: because we hold no copy of them — the chat and meal photos pass through our server without being kept — we cannot look anything up, send you a copy or delete anything for you. We will explain how to do it yourself in the app. We will never ask you to send us your records to prove who you are.
Community: we do hold your Community content. If you can no longer reach it in the app (for example you reset your phone), or a parent or guardian asks, email us and we will have your Community content removed.
11. Children and teenagers
Tallmark is for people aged 13 and over. When you set it up, the app asks for your date of birth. If you are under 13, it stops and does not go any further. New journals can be started from age 13 to 19.
Why the puberty questions are asked. How much growing someone has left depends a lot on how far through puberty they are, not only on their age. So the app asks five short questions, based on a self-report questionnaire used in research, the Pubertal Development Scale. One of them, for people who pick female as the growth chart, is whether periods have started. Every answer stays on your phone. They are used only to estimate the growth window and are never shown to anyone else.
Community and age. Community is part of the same app, so it is for people aged 13 and over. Tallmark does not verify age beyond the date-of-birth question at setup, which refuses anyone under 13. Any member can see any public post. Community is built for teens: no private messages, no photos, no links, no phone numbers or handles, and no height, weight or age is ever shown or sent.
Chat with Tally and age. The chat is for the same 13-and-over readers. It is off until the reader turns it on, and the screen that turns it on asks anyone under 18 to check with a parent or guardian first. It does not verify that they did. The AI is told it is talking to a teenager, to stay on growth, sleep, food, movement and wellbeing, never to discuss dieting or weight loss, and to send anything worrying to a doctor or a trusted adult.
United States (COPPA). The app refuses to be set up by anyone under 13, so we do not knowingly collect personal information from children under 13. What we handle is what a member puts into Community and, for a reader who turns it on, the chat and photo analysis (section 5).
United Kingdom (Age Appropriate Design Code) and similar rules. We have tried to build Tallmark the way these rules ask:
High privacy by default. Your records stay on the phone unless you turn on Chat with Tally, which is off until you do and says exactly what it sends first. Nothing is sent to Community until you agree to the Community guidelines. You join with a made-up nickname and an animal, not your name or photo.
No profiling. No profile of you is built for any purpose except showing you your own records.
No ads, and no data sharing.
No nudging to give up privacy. Community, the chat and photo analysis are optional. Nothing in the app rewards posting or chatting: no XP, no streak, no badge. The Coach offers the chat once, with Not now beside Turn on chat, and the quick questions work either way. There are no prompts to connect accounts.
No location and no contacts. Community has no private messages, no photos and no links, and a filter blocks phone numbers and handles.
Honest health information. No guaranteed growth, no body-based rewards. See the Health disclaimer (https://sites.google.com/view/tallmark/medical-disclaimer).
Parents and guardians can read For parents and guardians (https://sites.google.com/view/tallmark/parent-and-guardians) for more, including how to look through the records together.
12. Security
Your records are protected by your phone's own security:
Modern iPhones and Android phones encrypt their storage when a passcode, fingerprint or face unlock is set. Please use one.
Other apps on your phone cannot read Tallmark's records.
There is no server holding your records, because we do not have one. The chat's server passes a summary through and keeps none of it (section 5).
Anyone who can unlock your phone can open Tallmark and see your records. If that matters to you, keep your phone locked. If you export your records, the export file is not encrypted, so keep it somewhere private.
Community. What you post is sent to our server over an encrypted connection, and Tallmark's Community data is kept in its own separate area of the hosting project, reachable only through Tallmark's own functions. No system is perfectly secure. Because your records are never sent to Community, a problem on its server could not reveal your height, weight, age or logs.
Chat with Tally and photo analysis. Questions and meals go to our server and on to kie.ai and Anthropic over encrypted connections. Our server checks every request against the list in section 5 and refuses anything else, so the app cannot send more than that list even by mistake.
13. International transfers
Your records stay on your phone, wherever you are in the world. We do not transfer them anywhere — except the summary that goes with each chat question, if you turned the chat on, and a meal photo or description if you turned photo analysis on, which are processed by Cloudflare, kie.ai and Anthropic in the United States (section 5).
Community content is stored on servers in the United States (section 5), and we, New Version Ltd, are in New Zealand. If you use Community, what you post is therefore sent to and stored in the United States.
14. If we ever add more online features
Chat with Tally, photo analysis of a meal and Community are the only online features in this version. If a future version adds another one, or sends the chat or meal photos to a different AI provider, we promise that:
it will be off by default;
the app will explain what would be sent, to whom and why, and ask you first;
you will be able to say no and keep using everything else;
we will update this policy before the feature is released, and tell you in the app.
15. Changes to this policy
If we change this policy, we will update the version number and date at the top. If a change affects what happens to your information, we will also tell you inside the app before it applies. Earlier versions are available if you email us.
1.0. Date: 10 October 2026. What changed: First version. Includes Community and Chat with Tally (section 5).
16. Contact and complaints
Us first. Email tallmark.support@newversion.studio (subject: "Privacy"). We aim to reply within 20 working days.
If you are not happy with our answer, you can complain to a privacy regulator:
New Zealand: Office of the Privacy Commissioner — privacy.org.nz
Australia: Office of the Australian Information Commissioner — oaic.gov.au
United Kingdom: Information Commissioner's Office — ico.org.uk
European Union / EEA: Your country's data protection authority — the list is at edpb.europa.eu
California: California Privacy Protection Agency — cppa.ca.gov
Elsewhere: Your local data protection or consumer authority