Effective date: 12 July 2026
Talva ("we", "us", the "app") helps you track your weight and understand why it changes day to day. This policy explains what data we collect, why, who we share it with, and the choices you have. We are the data controller for your data.
Contact: richardilleskosmala@gmail.com
INFORMATION WE COLLECT
- Account information — your email address (via email/password, Google Sign-In, or Sign in with Apple). With Sign in with Apple you may choose to hide your email, in which case Apple provides a private relay address. If you use the app anonymously, no personal account information is collected until you sign in.
- Health and fitness data — the weight, height, and BMI (calculated from these) and target weight you log.
- Lifestyle notes you choose to enter — optional free text about sleep, hydration, exercise, food and drink, and notes. These may contain health-related information if you choose to write it. You control what you enter.
- Display preferences — your chosen units (kg/lbs, cm/ft).
- Subscription information — if you subscribe to Talva Premium, we receive your subscription status and a purchase identifier from the app store. Payment is handled by Apple or Google; we never receive or store your payment card details.
We do not collect precise location, contacts, photos, or advertising identifiers, and we do not use third-party advertising.
HOW WE USE YOUR INFORMATION
- To provide the core app: store your entries and show trends, BMI, and goal progress.
- To generate AI insights that explain your weight changes, when you request them.
- To create and secure your account and let you delete it.
- To provide and manage your Premium subscription, if you choose to subscribe.
We do not sell your personal data and do not use it for advertising.
HOW YOUR DATA IS STORED AND SHARED
Your data is stored using Google Firebase (Authentication, Cloud Firestore, Cloud Functions) on Google Cloud infrastructure on our behalf. Data is encrypted in transit and at rest, and access is isolated per user.
When you request an AI insight, the relevant entry data (your weight and that day's lifestyle notes) is sent to Anthropic, PBC (the Claude API) to generate the explanation. Anthropic processes this data only to return the insight and, under its commercial API terms, does not use it to train its models. We send this data only after you agree to it in the app, and Anthropic is contractually required to safeguard it to a standard at least equivalent to this policy.
Our sub-processors are Google Firebase / Google Cloud (account, database, and backend), Anthropic (generating AI insights), and RevenueCat, Inc. (managing subscription status). Payments are processed by Apple (App Store) or Google (Google Play). We share data only with these providers to operate the app, or where required by law.
INTERNATIONAL TRANSFERS
Our providers (Google, Anthropic) may process data on servers in the United States. Where required, transfers rely on appropriate safeguards such as the Standard Contractual Clauses.
DATA RETENTION
We keep your data for as long as your account exists. When you delete your account, your profile and all entries are permanently removed. Anthropic may retain insight request data for a limited period for safety purposes before deletion.
YOUR RIGHTS AND CHOICES
- Delete your account and data — in the app: Settings, then Account, then Delete account. This permanently deletes your profile and all entries and removes your sign-in account.
- Access or export — request a copy of your data by emailing us.
- EEA/UK rights — if you are in the EEA or UK, you have rights under the GDPR / UK GDPR: access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority. Our lawful basis for processing health-related data is your consent, given by choosing to log data and request insights. You can withdraw it by deleting your data.
To exercise any right, contact us at the email above.
CHILDREN'S PRIVACY
Talva is not directed to children. We do not knowingly collect data from children under the age required by local law (for example 13 in the US, 16 in much of the EEA). If you believe a child has provided us data, contact us and we will delete it.
CHANGES TO THIS POLICY
We may update this policy from time to time. We will revise the Effective date above and, for material changes, provide notice in the app.
CONTACT
Questions or requests: richardilleskosmala@gmail.com