Thali

Privacy Policy

Updated 13 October 2026

Thali ("we") is a calorie and nutrition tracker operated by Allen Joseph. This policy explains what we collect, why, and the choices you have. We don't sell your data and we don't show ads.

What we collect

Account: your email address, used to sign you in with a one-time code.

Profile: sex, age, height, weight, goal weight, activity level, diet and food preferences. This is health-related information; we use it only to calculate your targets.

Logs: meals you log (names, portions, nutrition), meal photos you choose to save, and weight entries.

Purchases: whether you have an active subscription, provided by Apple through RevenueCat. We never see your card details.

Usage limits: a daily count of AI requests per account, to keep the service affordable and prevent abuse.

We do not collect your location, contacts or advertising identifier, and we do not track you across other apps or websites.

How we use it

To calculate your calorie and macro targets, estimate the nutrition of meals, sync your data across your devices, send the sign-in codes you request, and provide support.

Meal reminders are scheduled on your phone; we do not send marketing notifications.

AI processing

When you scan a meal or menu, describe a meal, or search a new food, the photo or text is sent to OpenAI to produce a nutrition estimate. Under OpenAI’s API terms, this data is not used to train their models and may be kept for up to 30 days for abuse monitoring.

When you scan a barcode, only the barcode number is sent to Open Food Facts.

Food names and their estimated nutrition (never your identity) are stored in a shared cache so repeated searches are faster.

Where it’s stored

Your data is stored with Supabase on servers in Mumbai, India, encrypted in transit and at rest. Meal photos are kept in a private storage area that only your account can access.

Service providers that process data for us: Supabase (database, sign-in, storage), OpenAI (AI estimates), Resend (sign-in emails), RevenueCat and Apple (subscriptions), Expo (app updates). Each may only use the data to provide its service to us.

How long we keep it

We keep your data while your account exists. You can delete individual meals and weights at any time.

Delete your account in the app (Profile → Delete account). This removes your profile, logs and photos immediately; copies in routine backups are removed within 30 days.

Your rights

You can view and correct your information in the app, export it by contacting us, and delete it at any time. These rights apply under India’s Digital Personal Data Protection Act, 2023, and, where applicable, the GDPR.

Grievance contact: Allen Joseph, allenjosephquery@gmail.com. We reply within 7 days.

Children

Thali is meant for adults (18+). We don’t knowingly collect data from children. If you believe a child has used Thali, contact us and we will delete the account.

Changes

If we change this policy in a meaningful way, we’ll tell you in the app before it takes effect.