Privacy Policy

Tallow is a food app that helps you see what is inside the products you buy and how clean the restaurants around you are. We built it with the assumption that your scan history is your business. This page explains what we collect, why, and how to delete it.

What we collect

• Your email address, used only to sign you in. If you sign in with Apple, we store the private relay email Apple gives us — we never receive your real address.
• The barcodes you scan and the products you save, so we can show your history across devices and rebuild a product page instantly the next time you scan it.
• Photos captured while you scan a product. We upload and store these images so we can show other Tallow users what the product looks like on the product page — your scan photo may appear as the display image for that barcode for everyone who scans it later. Photos are tied to the product, not to your account or identity, and we never publish your name alongside them.
• Your approximate location, only while the restaurant map is open, so we can center it on where you are and show nearby places. We use it in the moment to draw the map — we do not store a location history or track you in the background.
• Restaurant ratings and reviews you submit. These are public: they appear to other Tallow users on the restaurant page and feed its community score, shown next to the username you choose.
• A username, and a profile photo if you add one. Both are public — they appear on the weekly leaderboard and on any restaurant reviews you post. You can change them anytime in Settings.
• Diagnostic crash and error reports, when you opt in. We never link them to you.

What we do NOT do

• No advertising. No third-party trackers. No data sold or shared.
• No background location tracking. We request location only while the restaurant map is open, only to center it on you — never in the background, and we never keep a record of where you go.
• Camera frames are only captured at the moment you scan a product, and only to decode the barcode and produce a product display image — we do not stream, record, or retain camera footage outside of that.

Where data lives

Your account, scan history, and the restaurant ratings and reviews you submit are stored on Supabase infrastructure (Postgres, hosted in the United States). Product data we look up on Open Food Facts is publicly licensed and re-published under their ODbL terms. Tier-2 product enrichment may call OpenAI; the only thing we send OpenAI is the barcode and product name — never your identity.

Deleting your account

In the mobile app, go to Settings → Delete account. Your account, scan history, saved products, and the restaurant ratings and reviews you posted are permanently removed immediately. There is no soft-delete and no recovery period; the row is gone before the next request lands. If you have trouble, email support@tallow.app and we will purge your data within 7 days.

Children

Tallow is not directed at children under 13. We do not knowingly collect data from minors. If you believe a child has signed up, email us and we will delete their data.

Changes

If we materially change this policy, we will surface the new policy in-app the next time you open Tallow and ask you to acknowledge it.

Contact

Questions, requests, or data deletion concerns: support@tallow.app.