Privacy Policy

Who we are

Tone is made by Tone Labs, LLC (“Tone”, “we”). This policy covers the Tone app for iPhone and this website.

The short version

• Your voice is turned into text on your iPhone. The recording is never uploaded or kept.
• Meal photos are read to work out what's in them, and then they're gone.
• What you say to Tone is stored encrypted, with a key of your own.
• We don't sell your data, and Tone has no ads.
• You can export everything you've logged, and delete your account and your data in the app at any time.

What we collect

When you use Tone, we keep:

• Your account: Tone uses Sign in with Apple, so we receive an identifier from Apple, and your email address if you choose to share it (Apple can hide it behind a relay address).
• Your profile and plan: your sex, date of birth, height, weight, activity, goal and pace, your targets, and the answers you give during setup, like why you want to reach your goal and how you heard about Tone.
• What you log: the foods, amounts and times of your meals and drinks, and your weigh-ins and body fat if you add them.
• What you said: the text of what you told Tone, so a meal can be shown and corrected later. It's encrypted with a key that belongs to your account.
• Products you add: if you add a product Tone doesn't know, the photos of its label and front, and what you entered, so a person at Tone can check it before others can use it.
• Feedback: bug reports and feature requests you send from the app, with any photos or video you attach, and your app and iPhone version. These are encrypted with your account's key.

From Apple Health, if you allow it, Tone reads your weight and body fat percentage. Tone doesn't write anything to Apple Health.

Progress photos from your weekly check-ins stay on your iPhone. They're never uploaded.

Your voice and photos

Speech is turned into text on your iPhone using Apple's on-device speech recognition. The audio never leaves your phone and isn't kept.

To understand a meal, Tone sends the words you said, or the meal photo you took, to an AI model. Photos of meals aren't stored by Tone: they're read and then discarded.

How we use your information

• To work out what you ate and its nutrition, and to show you your day.
• To set and update your calorie, macro, water and caffeine targets.
• To send the reminders you've turned on.
• To check products people add before they're available to everyone.
• To fix problems you report and to improve Tone.

Usage analytics

We record how Tone is used, so we can see what works and what doesn't: things like which screens of setup people reach, whether the microphone and notifications were allowed, how a meal was logged (by voice, photo, barcode or search) and how long it took.

These records never include what you said, the names of foods you ate, your weight or your targets. Before you create an account, setup is recorded against a random ID made for your install (not your advertising identifier), and records that are never linked to an account are deleted after 180 days.

Who we share it with

We don't sell your information or share it for advertising. We use a small number of service providers to run Tone, and they process data only to provide their service to us:

• Railway, which hosts Tone's servers and database.
• Google Cloud, whose key management service holds the master key that protects each account's encryption key.
• OpenRouter and the AI model providers it routes to, which read the words or photo of a meal to work out what's in it. Tone requests only providers that don't store requests or use them for training.
• PostHog, which stores the usage analytics described above.
• Apple, for Sign in with Apple and Apple Health.

We may also disclose information if the law requires it.

How we protect it

Everything is encrypted in transit. What you said to Tone and the feedback you send are also encrypted with a key that belongs only to your account, and that key is itself protected by a master key held in Google Cloud's key management service. Access to each person's data in our database is limited to their own account.

How long we keep it

We keep your account data until you delete your account. Products you add that are approved become part of Tone's food database for everyone, without your name.

Your choices

• Export: Settings › Export Logged Data gives you a spreadsheet of everything you've logged.
• Delete: Settings › Data & Privacy › Delete account removes everything you've logged, your plan, your weigh-ins, what you said to Tone, and your account's encryption key, straight away. It can't be undone. Progress photos on your phone are deleted too.
• Usage analytics linked to your account aren't yet removed automatically when you delete it. Email us and we'll remove them.
• Apple Health, the microphone, the camera and notifications can each be turned off in your iPhone's Settings.
• Depending on where you live, you may have other rights, such as asking what we hold about you or asking us to correct it. Email us and we'll help.

Creator applications

If you apply to be a Tone creator on this website, we keep what you send us (your name, email, country, handles, follower range, links and answers) to review your application and reply to you. Email us to have it deleted at any time.

Age

Tone is for people 18 and over. We don't knowingly collect information from anyone younger.

Changes

If we change this policy, we'll update the date at the top, and tell you in the app if the change is significant.

Contact

Questions, or a request about your data: support@trytone.app.