Tare privacy policy

Updated October 16, 2026.

Tare helps you reach a body goal: you log what you eat, and a coach built on an AI model helps with the rest. This page says what Tare keeps, who else sees it, and how to have it deleted. For your health data in particular, as Washington, Nevada and Connecticut define it, see the consumer health data privacy policy.

What Tare keeps

• Your account: from Sign in with Apple, an identifier, your name and your email (or Apple's private relay address, if you chose to hide it).
• What you log: meal photos, notes, and the nutrition estimates made from them; weight and waist measurements; the supplements you take; your targets and settings; conversations with the coach; the pieces written for you in Learn; and the memories the coach saves about you, which you can change or delete in the app. A memory or a day note you delete is gone from the app and from what the coach sees straight away; a copy marked deleted is kept, so a mistake can be undone, until you delete your account.
• Progress pictures, only if you take them: photos of your body (front, side and back) and the day of each. They're for you alone: they're never sent to the AI model, never shown to the people in your circles, never in a public link, and never read by an app you connect. On the iPhone, opening them asks for Face ID or your passcode; on the web they stay hidden until you choose to show them. Delete any photo or a whole day's set in the app and it's deleted.
• Feature requests you send from the app, coach replies you report (the reply and what you said about it) and people you report in your circles, with your name; and who you've blocked, until you unblock them.
• Your subscription, if you buy one: Apple's identifiers for the purchase (its transaction ids), which subscription it is, whether it's on, in its free week or ended, and when it renews or ends, from Apple, so Tare knows whether the coach is on for you. Apple takes the payment: Tare never sees your card or any payment details. If Tare is free for your account, it keeps that too.
• Apple Health, only if you allow it: weight and body fat, steps, active and resting energy, sleep, workouts, heart rate variability and resting heart rate. Tare doesn't write to Apple Health.
• Oura, only if you connect it: daily activity, sleep, readiness and workouts, with the access Oura grants (kept encrypted). Disconnecting it deletes what came from Oura.

Before a photo leaves your phone, Tare removes its metadata, including its location. It keeps only the time the photo was taken.

Who else sees it

• The people in your circles, only if you make or join a circle (by its link) and only what you switch on for that circle: your weight trend, waist, daily calories and protein, meals with their photos, activity and sleep, or day notes. Everything starts off, you can change it any time, and leaving a circle stops it at once. A meal you send to a circle or a member can be logged by them as their own copy. Your name is shown to the people in your circles. Nobody can find you in Tare by your name or email. You can report or block anyone in your circles from their page: a report (who, the meal if it was about one, and what you wrote) is read by the people who make Tare, and blocking someone means neither of you sees what the other shares in any circle.
• Anyone with a public link you make, only if you make one: Share publicly, on a meal or a piece in Learn, makes a page that anyone with its link can open, and they can pass it on. It shows a copy of the meal (its name, what's in it and the numbers, and only the photos you choose, with their metadata removed) or of the piece, as it was when you made the link. It never shows your name, the day, your notes or the coach's words. Search engines are asked not to list it. Settings, Public links lists yours; stopping one, or deleting the meal, the piece or your account, deletes the copy and the link stops working at once.
• Apps you connect, only if you connect one: an app like Claude can be let into your Tare through Settings, Connected apps (it asks, you sign in, and you say yes on a page that says what it will see). It can then read what you've logged, what Apple Health and Oura recorded, and your targets, memories and plan, and, only if you tick it, log and change things as the coach can. What it reads goes to that app and the AI model it uses, under their own terms, not this policy. Disconnecting it in Settings stops its access at once.
• Anthropic runs the AI model. Your meal photos, notes, measurements and conversations, and what Apple Health and Oura recorded if you connected them, are sent to it to estimate meals and to write the coach's replies; your progress pictures never are. The app asks for your permission before anything is sent. When the coach looks something up on the web, the search is run by Anthropic too, and the coach is told to leave anything personal out of it. Anthropic doesn't use data sent through its API to train its models, and deletes it from its systems within 30 days, unless it needs to keep it longer to enforce its usage policy or the law.
• Apple delivers notifications to your phone, if you allow them: the text of each one (a meal someone sent you, someone joining your circle, a meal's numbers) passes through Apple's push service. Apple also sells the subscription and takes its payment; it tells Tare when yours starts, renews, ends or is refunded, with an identifier Tare made for your account (not your name or email).
• Unsplash supplies some of the photos on the pieces in Learn. Those photos load from Unsplash's servers, so Unsplash sees that a device asked for a photo (its address on the internet, as any website does), and nothing about you or what you've logged. A photo is looked up by the piece's subject ("tempeh"), never by anything of yours.
• Railway hosts Tare's server, database and photo storage in the United States.
• Cloudflare serves the web app and holds Tare's backup copy (below), privately, in North America.
• USDA FoodData Central and Open Food Facts: when a photo shows a barcode, or you ask about a food, the barcode number or food name is looked up there. Nothing about you is sent with it.

Photos are stored privately and reach your phone only through short-lived links made for your account. Tare's developer, who runs it, can reach its storage and database to keep it working, and doesn't look at your photos; there's no screen in Tare for anyone else's. Tare has no ads and no analytics, and your data is never sold or shared for advertising. Data from Apple Health and Oura is used only to coach you.

Getting a copy of your data

In the app, Settings → Download my data gives you a zip of everything Tare keeps for your account: what you've logged, your photos and progress pictures, your conversations and memories (deleted ones too, marked deleted), your settings and what you share. It's made for you alone, once an hour, and leaves out other people's data and the keys that keep your account safe.

Deleting your data

In the app, Settings → Delete account deletes your account, everything you've logged and your photos straight away. Or email elliot.bonneville@gmail.com from the address on your account, or tell us which name you signed in with, and we'll do it within 30 days.

Backups: every night the database is copied (each copy kept 14 days), and the database and photos are copied to Cloudflare, so nothing is lost if one provider fails. A progress picture you delete, or that goes with your account, is removed from that copy within a day. Meal photos are only added to it for now, so a deleted meal photo stays there, privately, until that's changed.

Using Tare is covered by its terms of service.

Questions

elliot.bonneville@gmail.com