Privacy Policy

Privacy summary

Totopo is a private food journal and nutrition tracker. "Private" means your journal is not public to other users. Totopo and carefully selected service providers still process information when needed to operate the app, as explained below.

Information Totopo collects

Account and profile information may include your account identifier; contact information made available by your sign-in method, such as a name, email address, or phone number; and profile or goal information such as age, sex, height, weight, activity level, unit preference, dietary settings, and nutrition targets.

Journal information may include food entries, saved meals, nutrition estimates, corrections, manual step and weight entries, chat messages, chat responses, and the relevant journal context used to answer a request. When you use scanning, Totopo may also collect the barcode or nutrition-label photos you choose to submit. Totopo does not currently collect audio recordings or voice transcripts.

Totopo also processes subscription and purchase status needed to unlock paid features and restore purchases. Sign-in and service delivery may involve account and device identifiers, contact information made available by your sign-in method, IP-derived approximate region, and limited authentication or usage data. If you voluntarily enable Apple Health, Totopo collects the activity information described below.

How Totopo uses information

Totopo uses information to create and sync your journal, estimate nutrition, show progress, process subscriptions, restore purchases, delete accounts, prevent abuse, debug issues, and improve app reliability. Subscription expiration information may also be used on your device to schedule an optional reminder before a free trial ends.

External AI processing

Totopo uses external AI and search services to estimate nutrition, interpret scans, and provide chat features. We send only information reasonably needed for the feature you use, which may include food text, photos or scan context, relevant journal history, profile and goal information, recent conversation, and optional Apple Health activity when enabled.

Service providers may process this information only as needed to provide, secure, and support their services for Totopo. We do not sell personal information or permit providers to use it for their own advertising or unrelated purposes.

Categories of recipients

Totopo shares information only when needed with these categories of recipients:

• Account authentication providers.
• Cloud hosting, database, storage, and synchronization providers.
• Subscription and purchase-status processors.
• Barcode product-information services.
• External AI and search services used for nutrition estimation and chat.
• Product analytics and diagnostics providers.
• Authorities or other recipients when disclosure is required by law or needed to protect Totopo, its users, or the public.

We require service providers that process personal data for Totopo to protect it consistently with this policy and use it only to provide their services to Totopo. We do not sell personal data.

Product analytics

Totopo automatically collects limited usage, device, and diagnostics data—including product interactions and app performance—to understand account creation, onboarding, subscriptions, feature use, and reliability. After sign-in, these records may be associated with an account identifier. We use this information to operate, secure, diagnose, and improve Totopo, not for advertising or tracking across apps or websites.

Product analytics does not include food or journal text, chat messages, photos, audio, nutrition values, profile or goal values, or Apple Health data. Totopo does not use session replay or automatic screen or touch recording.

Apple Health

Apple Health is optional. When you enable it, Totopo reads daily step count, active energy, and basal energy and may sync up to 30 recent days with your account to personalize progress and chat. Totopo never writes data to Apple Health and does not use Health data for advertising, marketing, tracking, or product analytics.

Turning Apple Health off stops future reads and sync and deletes synced Health data from Totopo. It does not change permissions managed by iOS or remove information already included in chat responses; you can manage permissions in the Health app or iOS Settings and delete chat history or your account in Totopo.

Security

Totopo uses reasonable technical and organizational safeguards designed to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Local notifications

With your permission, Totopo can schedule up to three local meal reminders at times you choose and a local reminder 24 hours before an eligible free trial expires. You can change reminder settings in Totopo and manage notification permission in iOS Settings.

Retention and deletion

Totopo keeps information while your account is active or as reasonably needed to provide, secure, and support the app. Scan media is kept only as long as needed for the feature, your journal, or support. Some information may be retained longer when required for billing, legal, security, fraud-prevention, dispute-resolution, or backup purposes.

You can delete your account from app settings. Account deletion removes your account and associated app data from Totopo, including synced Apple Health data and account-linked analytics, subject to the limited exceptions above. Deleting your Totopo account does not cancel an active App Store subscription.

Your choices

• Edit or delete food entries in the app.
• Choose whether to initiate an AI-powered request with text, label photos, or journal context.
• Delete chat threads or delete your account to remove stored chat history from Totopo.
• Choose whether to grant camera access for scanning.
• Choose whether Totopo reads Apple Health for local Stats and account-syncs daily aggregates for chat.
• Review or revoke Apple Health permissions in the Health app or iOS Settings.
• Choose whether to enable meal reminders and manage notification permission in iOS Settings.
• Request access to, correction of, or deletion of your personal data by contacting us.
• Initiate account deletion from app settings.
• Manage or cancel App Store subscriptions through your Apple account.

International processing

Totopo and its service providers may process information in countries other than where you live. We use safeguards designed to protect that information consistently with this policy and applicable law.

Children

Totopo is intended for people age 13 and older and does not knowingly collect personal data from children under 13. If we learn that we did, we will take steps to delete it.

Changes to this policy

We may update this policy as Totopo changes. We will post the updated policy here, change the last-updated date, and provide any additional notice required by applicable law for material changes.

Contact

Questions or privacy requests: rodrigomerinodlp@icloud.com.