PRIVACY POLICY

Introduction

Welcome to Tallawa. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide when using Tallawa, including:

• Account Information: Name, email address, password
• Profile Data: Age, gender, height, weight, fitness goals
• Health & Fitness Data: Workout logs (exercises, sets, reps, weights), nutrition logs (food intake, calories, macros), body measurements, weight tracking data
• Preferences: Dietary preferences (vegan, halal, etc.), cuisine preferences (Jamaican, Ugandan, Chinese, etc.), activity level
• User-Generated Content: Photos of food, notes on workouts, conversations with AI Buddy

Automatically Collected Information

When you use Tallawa, we may automatically collect:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App features used, time spent in app, interactions with AI Buddy
• Log Data: IP address, access times, error logs

How We Use Your Information

We use your information to:

• Provide Core Services: Calculate personalized calorie and macro targets, track nutrition and workouts, monitor progress
• AI Personalization: Power AI Buddy to provide personalized recommendations, motivation, and insights based on your complete data
• Improve User Experience: Analyze usage patterns to enhance app features and user interface
• Food Recognition: Process food photos with AI to identify and estimate nutritional content
• Communication: Send app notifications, updates, and respond to your inquiries
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with applicable laws and regulations

Third-Party Services

Tallawa integrates with third-party services to provide functionality:

• Supabase: Backend database and authentication (data stored securely)
• OpenAI: AI-powered insights, food recognition, and conversational AI Buddy (your data is processed to generate personalized responses)

These services have their own privacy policies. We recommend reviewing their policies to understand how they handle your data.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly consent to share information
• Service Providers: Third-party vendors who perform services on our behalf (database hosting, AI processing)
• Legal Requirements: When required by law, court order, or government request
• Safety & Protection: To protect rights, property, or safety of Tallawa, users, or the public
• Business Transfers: In connection with a merger, sale, or acquisition (users will be notified)

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication with Supabase
• Row-level security (RLS) policies on database tables
• Regular security audits and updates
• Access controls limiting who can access your data

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to:

• Provide you with Tallawa services
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain certain data.

Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, please contact us at privacy@tallawa.com. We will respond within 30 days.

Children's Privacy

Tallawa is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country, where data protection laws may differ. By using Tallawa, you consent to the transfer of your information to these locations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the app and updating the "Last updated" date. Continued use of Tallawa after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: