TallPlan
Get the app

Last updated

Privacy Policy

This policy explains what data the TallPlan app for iPhone and Android and the tallplan.app website (together, “TallPlan”) collect, why, who else receives it, and the choices you have. TallPlan is run by North Pattern LLC (“we”, “us”, “our”), which is responsible for your data.

The short version

  • Your body data stays on your phone. Measurements, answers about your body and puberty, your parents’ heights, sleep and meal logs are stored on your device. We don’t receive them, and neither does any analytics or advertising company.
  • No sign-in account. The app uses a random identifier instead of your name or email.
  • Meal photos and descriptions go to OpenAI, only when you choose to analyze a meal and only after you say yes. Our server passes them on and doesn’t store them.
  • We use analytics and crash reports to understand how the app is used and to fix bugs. They get your sex and an age band, never your birth date, measurements or anything worked out from them.
  • No ads in the app, no tracking across other companies’ apps and websites, and we don’t sell your data. To see which of our own ad campaigns work, we use install attribution without the advertising identifier.

Who is responsible

North Pattern LLC, 5830 E 2nd St, Ste 7000 #27324, Casper, WY 82609, USA, is the controller of the personal data described here. You can reach us at [email protected].

What stays on your device

When you set up and use TallPlan, you enter your birth date, sex, height, weight, your parents’ and relatives’ heights, answers about puberty (including questions about periods, where they apply), and logs of your height, sleep and meals. The app uses them to estimate your adult height and build your plan.

All of this is stored only on your device. TallPlan doesn’t sync it to our servers or send it to analytics, crash reporting or subscription services; they receive only the limited details described under Analytics, such as your sex and an age band. On iPhone it can be included in your own iCloud or computer backups, which Apple and you control; on Android, in your device’s backup to your Google account, which Google and you control.

Meal photos are deleted from the app after analysis; only the result is kept.

The app asks for camera access to photograph meals, and opens your photo library only to pick a photo you choose. It doesn’t read your contacts, location, Apple Health or Health Connect data.

You can erase it all at any time with Delete data in the app’s Settings, or by deleting the app. Delete data also turns meal analysis off until you agree to it again, and clears the profile details, such as your role, sex and age band, that our analytics and subscription providers hold for you. It keeps the app’s random identifier, because your subscription is linked to it, and it doesn’t erase what those providers have already received, such as past usage, crash reports and purchase history. To have that deleted too, ask us (see Your rights and choices).

The random identifier is kept in your phone’s secure storage, and can be synced or backed up through your Apple or Google account, so it usually stays the same when you reinstall TallPlan or move to a new phone. That is what lets your subscription be found again.

What we collect and why

Meal analysis

When you log a meal and choose to analyze it, the app sends the photo or the text you typed to our server, which forwards it to OpenAI to estimate protein, calcium and calories. Along with it, we send the app’s random identifier, your device language, and a one-time token from Apple or Google that proves the request comes from the genuine app.

  • Before sending, the app shrinks the photo and removes its location and other metadata.
  • We don’t send your age, weight, height, measurements or answers about your body.
  • Consent: the app asks before the first meal is sent, and if you’re under 16, it asks you to confirm that a parent or guardian agrees. You can withdraw consent at any time in the app’s Settings.
  • Our server doesn’t store photos or descriptions. It keeps the analysis result for up to 24 hours, so that a retried request isn’t analyzed twice, and uses the identifier to apply fair-use limits. Like any server, it sees your IP address when the app connects, and uses it to deliver the response and protect the service.
  • OpenAI processes the content to return the estimate. Under its API terms, it doesn’t use the content to train its models and may keep it for up to 30 days to detect abuse, unless the law requires it to keep it longer. It also receives a pseudonymous code derived from the app’s identifier, so it can stop misuse by one person without blocking everyone.

Please don’t send photos that show people, faces, documents or anything else personal.

Subscriptions

Payments are handled by Apple on iPhone and by Google Play on Android. We never see your name, card, Apple ID or Google account. The store tells our subscription provider, Adapty, whether you have an active subscription, which plan, and your purchase history. Adapty also receives the app’s random identifier and your role (teen or parent), so parents and teens can be shown offers that suit them. Like other services the app connects to, it also receives device information and identifiers, and your IP address. It passes your subscription events on to our analytics and to Singular, so we can count purchases and see which of our ad campaigns lead to them (see Install attribution).

Analytics

We use Amplitude and Google Firebase Analytics to understand which features people use and where the app is confusing. They receive:

  • the app’s random identifier and each service’s own device identifier (never the advertising identifier: IDFA on iPhone, the Android advertising ID on Android);
  • which screens you open and what you do in the app, such as logging a meal or finishing setup, how far you got in setup, and counts of logs and meal analyses;
  • your role (teen or parent), sex, an age band, and whether setup was handed to a parent at the age check, never your birth date, height or other measurements, or anything worked out from them. In parent mode, these describe the child;
  • whether you have a subscription, and which plan, as Adapty reports it;
  • device and app information, such as model, operating system version, app version and language.

They may use your IP address to work out an approximate location (country or region), but not to identify you.

Install attribution

To see which of our own ad campaigns bring people to TallPlan, and which of them lead to subscriptions, we use Singular. It receives the app’s random identifier, device identifiers (never the advertising identifier), your IP address and device information, when the app was installed and opened, and how the install was attributed through Apple’s and Google’s own attribution systems. Adapty also sends Singular your subscription events, such as trials, purchases, renewals and refunds, with the plan and price. Singular is set not to pass this data to ad networks at the level of individual users. The campaign that brought an install (network, campaign, ad group and creative, or that it came without one) is also added to our analytics and to Adapty.

Crash and performance reports

When the app crashes or something goes wrong, Sentry and Firebase Crashlytics receive a report with technical details, the app’s random identifier and device information. Sentry also receives data on how stable and fast the app is. We use these reports only to find and fix problems.

Support

If you email us or use the form on our support page, we receive your email address, your message and anything you attach. Emails sent from the app’s Contact support button also include your app identifier and app version, so we can find your case. The form on our website is delivered to our inbox by Resend and protected from spam by Cloudflare Turnstile, which checks your browser and IP address.

Our website

tallplan.app is hosted on Cloudflare, which processes your IP address and browser details to deliver the site and protect it from attacks. The site has no advertising and doesn’t set cookies of its own.

To count visits, we use Cloudflare Web Analytics. It doesn’t use cookies or local storage and doesn’t follow you across websites. It records page views, the page you came from, your browser, device type and country, and shows them to us only as totals. If you use the support form, Cloudflare Turnstile runs a spam check as described above.

  • Consent: meal analysis. Because meals can reveal something about your health, we ask for your explicit consent first. You can withdraw it at any time; this doesn’t affect analysis that already happened.
  • Contract: providing the app and the subscription you bought, restoring purchases, and answering support requests.
  • Legitimate interests: analytics to improve the app and count website visits, measuring our own ad campaigns, showing parents and teens the offers that suit them, crash reports to fix bugs, and security measures such as app-integrity checks, fair-use limits and spam checks. We use bands and a random identifier instead of direct identifiers to keep the impact on you low. You can object at any time by emailing us.
  • Legal obligation: keeping purchase records and responding to lawful requests.

We don’t make decisions about you by automated means that have legal or similarly significant effects. The height estimate is calculated on your device.

Who receives data

We don’t sell your personal data, and we don’t share it for cross-context behavioral advertising. We share it only with these service providers. Apple and Google handle payments and app-integrity checks as independent companies under their own terms; the others process data on our behalf:

  • OpenAI (USA): meal analysis.
  • DigitalOcean (USA): hosting our meal-analysis server.
  • Adapty (USA): subscription status and paywalls.
  • Apple (USA): payments on iPhone, and app-integrity checks. Apple’s own privacy policy applies to your Apple ID and purchases.
  • Google (USA): payments on Android through Google Play, and app-integrity checks. Google’s own privacy policy applies to your Google account and purchases.
  • Amplitude (USA): product analytics.
  • Google Firebase (USA): analytics, crash reports and app-integrity checks.
  • Sentry (USA): error and performance monitoring.
  • Singular (USA): measuring which of our ad campaigns bring installs and subscriptions.
  • Cloudflare (USA): hosting the website and carrying the app’s connections to our meal-analysis server, visit statistics and spam protection.
  • Resend (USA): delivering support-form messages.

We may also disclose data if the law requires it, to protect people’s safety or our rights, or as part of a merger, acquisition or sale of TallPlan, in which case this policy continues to apply to your data.

International transfers

We are based in the United States, and most of our providers process data there. When we transfer personal data from the EU, UK or Switzerland, we rely on the EU–US Data Privacy Framework and its UK and Swiss extensions where the provider is certified, or on the European Commission’s Standard Contractual Clauses and their UK equivalent.

How long we keep data

  • Meal photos and descriptions: not stored on our server. The analysis result stays in a retry cache for up to 24 hours. OpenAI may keep the content for up to 30 days, as described above.
  • Analytics data: in Firebase, up to 14 months after you last use the app; in Amplitude, for as long as we use it to understand how the app is used, or until you ask us to delete it.
  • Install attribution data: kept by Singular while we use it to measure our ad campaigns, or until you ask us to delete your data or we stop using Singular.
  • Crash and performance reports: up to 90 days.
  • Subscription and purchase records: while your subscription is active and afterwards for as long as tax, accounting and consumer law require.
  • Support messages: as long as needed to help you, and then up to 2 years in case you get back in touch.
  • Data on your device: until you delete it with Delete data, or delete the app.

Children and teens

TallPlan is for people who are still growing, including teenagers.

  • Under 13: a child can’t use TallPlan on their own. The app asks a parent or guardian to set it up, and from then on the parent is the user. The child’s details stay on the device: our providers get the child’s age band and sex, as described above, and never a name, birth date or measurements.
  • 13 and older: you can use TallPlan yourself. If you’re under 16, the app asks you to confirm that a parent or guardian agrees before meal analysis is turned on.

We don’t knowingly collect personal data from a child under 13 without a parent’s involvement. If you believe we have, email us and we’ll delete it.

Your rights and choices

  • In the app: turn meal analysis off in Settings, erase everything on your device with Delete data, and manage your subscription through your Apple ID or Google Play account.
  • By email: depending on where you live (for example, under the GDPR, UK GDPR or California and other US state laws), you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, or to withdraw consent.

Because TallPlan has no accounts, we can only find your data by the app’s random identifier. To make a request, email [email protected] from the app’s Contact support button, which adds the identifier for you. We’ll reply within the time the law sets, usually one month. If you ask us to delete your data, we’ll delete what we hold and ask the providers that hold data linked to your identifier to delete it too. Some of it, such as crash reports, is deleted on its own after a short time, and purchase records may have to be kept for legal reasons. We won’t treat you differently for using your rights. A parent can make these requests for their child.

If you’re in the EU or UK, you can also complain to your local data protection authority.

Security

Data travels over encrypted connections, and our server checks that meal-analysis requests come from the genuine app. On your phone, TallPlan’s data is protected by the device’s own encryption and your passcode. No system is completely secure, but we limit what we collect so that there is less to protect.

Changes to this policy

When we change this policy, we’ll update the date at the top of this page. If a change is significant, for example a new use of your data or a new kind of recipient, we’ll tell you before it takes effect, in an app update or on this page, and, where the law requires it, ask for your consent again.

Contact

North Pattern LLC
5830 E 2nd St, Ste 7000 #27324
Casper, WY 82609, USA
[email protected] · Support page