Privacy Policy
In short: your data is seen only by your squad (at most 15 friends). Your weight and body stats are private. Health data is never sold, used for ads, or shared for marketing. You can delete your account at any time.
1. Who we are
toliv ("the app", formerly Healthy Together) is an iPhone app run by Inderpreet Singh, based in Toronto, Canada. It's currently in a friends-only beta.
Person responsible for your personal information (privacy officer): Inderpreet Singh, owner. Contact: toliv.support@gmail.com.
2. What we collect
| Data | Why | Who can see it |
|---|---|---|
| Name and email (from an email code, Sign in with Apple or Sign in with Google) | Your account | Your squad sees your name |
| Goal, targets, meals per day | Your Daily 5 | Your squad sees your progress |
| Sex, birth year, height, weight, goal weight | Calculating safe daily targets | Only you |
| Weigh-ins | Your private progress chart | Only you; your squad sees % to goal unless you turn it off |
| Meal photos (taken in the app), foods, calories, macros, edits and notes | Logging meals and keeping the game fair | The squads you share it with (all your squads unless you untick some in Share to) |
| Steps, workouts, active energy (from Apple Health) | Steps and workout goals | Your squad sees your step total, your verified step total for the week in the squad quest, and each workout's type, length and calories (as a feed post) |
| Squad talk: notes, messages, replies and stat cards you post; reports you make; people you block | Talking with your squad and keeping it safe | Your squad sees your notes and cards (not people who blocked you). An @mention or reply notifies that squad-mate, and @All notifies everyone in the squad, with the first 100 characters in the push. Reports are seen by the squad head and us; blocks are seen by no one but you |
| Workout photos or 5-second clips (taken in the app, no sound), the workout type, minutes, intensity and note | Logging a workout without a fitness tracker | The squads you share it with (all your squads unless you untick some in Share to) |
| Squad activity: cheers, nudges, flags, votes; your weekly race place and points, your weekly rival, the preset jabs you send, squad quest progress and season tier | The social features and the weekly race | The squad they happen in (flags show who raised them, and stay in the squad where they were raised). A jab is seen only by you and your rival. People who sit out the race aren't ranked or announced |
| The squad head's weekly race stake (one friendly line, up to 80 characters), and challenges: title, stake, who's invited and who joined | Weekly race and squad challenges | Your squad. Stakes and challenge titles are checked for insults, money and links before they're saved. Any member can invite selected squad-mates to a challenge; who said no is shown only to the person who asked |
| App usage: which screens and features you use, for how long, app errors and crashes, and the app version. Never your photos or anything you type | Seeing where the app is confusing or broken, and fixing it; and, during the beta, so the developer can check in with you personally if you get stuck setting up or stop using the app | Only us. Stored in our own database; no analytics company |
App usage. On by default, except on phones set to French in Canada, where it's off unless you turn it on. The app shows a notice before anything is sent, and you can turn it off at any time in Profile → Privacy and safety → Share app usage; anything not yet sent is then deleted. It's linked to your account so we can see where someone got stuck and, during the beta, check in with them personally; only the app's developer can see it.
We don't use advertising or tracking tools, and no analytics company receives your data. We don't collect your location or contacts. Meal and workout photos can only be taken inside the app. The one exception is your profile picture: you can choose that from your photo library, and the app only receives the photo you pick. A replaced or removed picture is deleted, and only your squads (and the head of a squad you've asked to join) can see it. There are no public profiles.
3. Apple Health
We read steps, workouts and active energy only with your permission, which you can change at any time in the Health app. We don't write to Apple Health. Health data is never used for advertising, sold, or shared with data brokers or marketers. Steps or workouts you typed in by hand are shown but don't earn points. When Apple Health records a workout of 10 minutes or more, the app posts its type, length and calories to your squad's feed; workouts you typed into Health by hand are not posted. Workouts you log with a photo or clip are never written to Apple Health.
4. AI food recognition and food lookups
When you use the AI estimate, the meal photo is sent to the Google Gemini API to identify the foods and portions. During the beta we use Gemini's free tier, under which Google may use submitted photos to improve its products. We'll move to Google's paid tier, which doesn't allow that, and update this policy when we do.
Meals logged from search, a saved meal, Ask AI or typed in still have their photo sent to Gemini to check it shows food. Only meals logged without a photo (up to 4 a week) send nothing. With that check, the names of the foods you logged are sent too, to see that the photo roughly matches; your squad sees a note if it doesn't.
If you tap Ask AI in food search, only the text you typed (e.g. "medium iced capp") is sent to Gemini to estimate it. When you log a workout with a photo or 5-second clip (no sound), that photo or clip, the details you typed and your current weight are sent to Gemini to check it looks like a workout and estimate the calories.
Calories and macros come from our own nutrition table. When a food isn't in it, only the food's name (never your photo or anything about you) is looked up in the public USDA FoodData Central and Open Food Facts databases. If you scan a barcode, only the barcode number is looked up in Open Food Facts. Indian recipe values come from the Indian Nutrient Databank, stored on our server.
A photo taken in Label or Barcode mode is your meal photo: it's kept and your squad sees it, like any meal photo. If you scan an extra label from the review screen, that photo is sent to Gemini to read the numbers and kept privately; it's never shown to your squad.
Most meals are logged with a photo taken in the app. You can log up to 4 meals a week without a photo, and any meal picked from search or your saved meals while you have no squad-mates. If you're in a squad, it sees a "No photo" note on those meals.
Your usual portions. When you change the AI's portion of the same food the same way several times, your next scan of that food starts at your usual portion, says so, and offers Undo. This is learned only from your own edits, is private to you, and only changes your own estimates.
Your usual items. At a restaurant chain, a scan that can't tell which menu item it is may pick the item you usually log there; it says "Your usual" and offers Undo. This uses only your own meals from the last 90 days, is private to you, and only changes your own estimates.
Improving food recognition (opt-in). With Help improve food recognition switched on (Settings → Your photos; off by default), your meal photos and corrections may be used to improve our own food recognition, and your corrected numbers for a food (never your photo, name or anything else about you) may count toward a shared correction that improves everyone's estimate of it. A shared correction needs several people from different squads to agree, and is applied only after the developer approves it; it shows as "Corrected by N people" with Undo. To make sure each photo is named correctly, someone on our team may look at the photo and check the food's name. After you've corrected a couple of AI estimates, the app asks you once whether to switch this on; nothing changes unless you say yes. You can switch it off at any time; photos and corrections from while it was off are never used. Switching it off also deletes the checked names for your photos.
5. Sign-in and notifications
If you sign in with Apple or Google, we receive your name and email address from them (Apple may give us a private relay address instead). If you turn on notifications, we store your device's push token (deleted when you sign out) and send notifications through Apple's push service as things happen (race alerts and jabs never between 9 pm and 8 am). Each type can be switched off in the app.
If you pin the race to your Lock Screen (Live Activity), it shows your place and one squad-mate's name on your phone only, is never sent anywhere, and ends when you sign out. You can sit out the race (Profile): no lane, no rival and no race alerts; you stay in the squad quest.
6. Beta website and Android waiting list
The beta invite page (toliv.pages.dev/beta) is hosted by Cloudflare. It has no cookies or ads. To see how many people the page helps, we count visits and button taps anonymously: Cloudflare Web Analytics counts visits without cookies, and the page adds 1 to a daily total when someone plays the video or taps a button (with the kind of device and where the link was shared). Nothing that identifies you is stored, not even your IP address. It remembers which join steps you've finished only in your own browser, and its fonts come from Google Fonts, so Google sees that your browser loaded them.
If you join the Android waiting list, we keep only your email address and the date you added it, in a Cloudflare database. We use it for one thing: to email you when toliv is on Android. It's never shared, sold or used for anything else. To be taken off the list, email toliv.support@gmail.com.
7. Where data is stored
On Supabase (database, file storage and server functions), hosted in Canada (AWS ca-central-1). Photos are kept in private storage and shown through links that expire after an hour.
Some data leaves Canada. Photos, clips and text sent for an AI estimate or check are processed by Google (Gemini API) in the United States. If you sign in with Apple or Google, they handle your sign-in, and notifications go through Apple's push service. The Android waiting list is stored by Cloudflare in eastern North America, which may be the United States. Data processed outside Canada is covered by the laws of that country, and its courts and authorities may be able to access it.
8. How long we keep it
While your account is active. This includes every photo you take in the app, also ones you retake, don't log, or whose meal you delete; those are private to you and never shown to your squad. If you delete your account, your photos and app usage are deleted immediately and everything else 7 days later, in case you change your mind. App usage is kept for 180 days, then only as daily totals with no name attached. Android waiting list emails are deleted once we've sent the "toliv is on Android" email, or sooner if you ask.
9. Your choices and rights
- See and correct your data in the app (Profile and Settings).
- Hide calorie numbers from yourself, or hide your progress from your squad.
- Leave your squad at any time.
- Delete your account: Profile → Your data → Delete account.
- Export a copy of your data any time in Settings → Your data, ask us to correct it, or ask any question: toliv.support@gmail.com. We answer within 30 days.
- Withdraw your consent at any time: turn off Apple Health access, notifications or Share app usage, log meals without the AI estimate, or delete your account.
- You can also complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d'accès à l'information.
10. Security and breaches
Access to your data is limited to your squad by database rules, and photos are only reachable through short-lived links. If a breach of your data creates a real risk of significant harm, we'll tell you and the Privacy Commissioner as soon as we can, and keep a record of every breach.
11. Children
The app is for people 14 and over. We ask for your birth year when you sign up and don't let younger people create an account. If we learn that someone under 14 has an account, we'll delete it.
12. Changes
We'll tell you in the app before any change that affects how your data is used.