Privacy

Last updated 7 September 2026

The short version: your food photos stay on your phone, we do not sell anything to anyone, and you can delete the lot from inside the app.

What stays on your phone

Your photos. A scan is sent to a vision model to be read and is not stored on our servers afterwards. The image file itself is written to your phone and indexed there. Deleting the app deletes them.

What we hold

Your account. Email address and a Firebase user id. Passwords are handled by Google Firebase Authentication; we never see them.
What you logged. Foods, portions, times and meals — the record the app exists to keep.
Your profile. Height, weight, date of birth, sex, activity level, dietary preferences and allergens. Every one of these is an input to the calorie and macro calculation; none is optional decoration.
Weigh-ins, so a trend can be drawn.
Diagnostics. Which model read a scan, how long it took, whether it failed. No photograph and no food name.

Who else sees it

Google Firebase — authentication only.
OpenRouter — routes a scan to the vision model that reads it. Sent as an image, not tied to your account.
RevenueCat and the app stores — subscription state. They tell us whether you are paid; we never see your card.
Apple Health / Health Connect — only if you connect it, only what you allow, and only ever read unless you ask otherwise.

Nobody buys this data from us. There is no advertising SDK in Tab and no third-party analytics that follows you between apps.

Getting rid of it

Settings → Delete account removes your account and everything attached to it. It is immediate and it is not recoverable. You can also export everything you have logged as a CSV first, from Settings → Export.

Children

Tab is for adults. We ask for a date of birth during setup and refuse to create an account under 18 — at the server, not only in the interface.

Where it lives

Data is held on servers in the United States. If you are in the UK or EU you have the right to access, correct, export or erase what we hold: the in-app export and delete cover all four, and hello@igotthetab.com reaches a person.

Changes

If this notice changes in a way that affects what we collect or who sees it, the app will tell you before it takes effect.