Privacy Policy
Effective October 6, 2026
The short version: most of what you enter in TallPro stays on your phone, including your name. We only send data to our servers when it's needed for a feature you use (like asking Apex or scanning a meal). We don't show ads, we don't sell your data, and you can delete everything anytime in the app. For children under 13, nothing personal leaves the phone at all (see Children and parents).
- Who we are
- What we collect and why
- AI features
- Who we share data with
- What we never do
- Children and parents
- How long we keep data
- Deleting your data
- Your rights
- Where data is processed
- Security
- Changes and contact
1. Who we are
TallPro: Height Predictor ("TallPro", "we", "us") is an iPhone and Android app for people aged 9 and older. A child can use it on their own, or a parent can set it up for them. TallPro is operated from Virginia, USA, and is responsible for your data (the "controller" under European data laws). You can reach us at [email protected]; we'll share our full legal details on request.
2. What we collect and why
Stays on your phone only
These are stored on your device and are not sent to us:
- Your first name, if you choose to add one in the app (used to greet you; it never leaves your phone).
- Your onboarding answers: whether you or a parent is filling them in, date of birth, sex, height, weight, shoe size, parents' heights, sports, sleep, diet, allergies and growth questions.
- Your height check-ins, prediction, habits, streak, points, badges, training history, sleep logs, water and dairy counts, meals you mark as eaten, posture checks and reminder settings.
- Your chats with Apex (the last 20 chats are kept on your phone).
Sent to our servers
| Data | Why | Kept |
|---|---|---|
| A random anonymous account ID (no name, email or phone) | To connect your phone to the AI features securely | Until you delete your data |
| How many AI requests you made each day, and their size | Fair-use limits and keeping costs under control | Until you delete your data |
We do not create a profile of you on our servers, and we do not store your meal photos, descriptions or chats there.
Purchases
Subscriptions and purchases are handled by Apple (App Store) or Google (Google Play). We use RevenueCat to check whether you have an active subscription. RevenueCat receives an anonymous app user ID and your purchase history from Apple or Google, only to know whether the subscription is active. We never see your card details.
Feedback on the website
On tallpro.app, if you leave the Height Plan page without buying, we may ask one quick question about why. Your answer and your country (from your connection, not your exact location) are saved. If you choose to add your email to enter our weekly free-plan draw (13+ only), we keep it only to contact you if you're picked, and delete it after the draw. Email [email protected] any time to have it removed sooner.
Camera, photos and notifications
TallPro asks for the camera or your photos only when you choose to scan a meal, and for notifications only for the reminders you turn on. Reminders are scheduled on your phone. You can change these permissions anytime in your phone's settings.
3. AI features
Two features use AI. They only run when you use them, and they are turned off for users under 13:
- Apex (AI coach): when you send a question, we send your question, the recent conversation and a short summary of your tracking (for example age, sex, height and prediction, sleep, meals eaten today, training and posture results) to our AI provider to write the answer. Your name is never included.
- Food scanner: when you scan or describe a meal, the photo or text is sent to our AI provider to estimate its nutrition.
Some of this is health-related information. It is sent only because you chose to use these features, and you can stop at any time by not using them. Our AI provider is Anthropic. Under its commercial terms, Anthropic does not use this content to train its models and keeps it only for a limited time under its own policies. AI answers can be wrong and are not medical advice.
4. Who we share data with
We share data only with the service providers that run TallPro, and only what each needs:
- Supabase (servers and anonymous accounts, hosted in the European Union).
- Anthropic (AI for Apex and the food scanner, in the United States).
- RevenueCat (subscription status).
- Apple and Google (app store payments and notifications).
We may also disclose data if the law requires it, or to protect the safety of our users.
5. What we never do
- We don't show ads or use advertising trackers.
- We don't sell or "share" your personal information for advertising.
- We don't track you across other apps or websites.
6. Children and parents
TallPro is for people aged 9 and older. We take extra care with children under 13, in line with the US Children's Online Privacy Protection Act (COPPA) and similar laws.
Kids Mode (under 13)
When the date of birth entered in TallPro is under 13, the app runs in Kids Mode:
- Everything the child enters and tracks stays on their phone. We do not collect personal information from them on our servers.
- The features that send data to our servers are turned off: Apex (the AI coach) and the AI food scanner. Kids can still read Apex's ready-made answers to common questions, which work on the phone.
- No anonymous account is created on our servers.
- Purchases go through the child's app store account, which for children is managed by a parent (for example Apple's Family Sharing and Ask to Buy, or Google Family Link). RevenueCat receives only the anonymous app user ID and purchase status needed to unlock the subscription.
When the child turns 13, the AI features become available, and they run only when the user chooses to use them.
For parents
A parent can fill in the setup questions for their child; those answers stay on the phone too. To see or delete what TallPro stored, open the app on your child's phone, or use Delete my data. If you believe we hold personal information about a child under 13, email [email protected] and we will delete it. If you're under 18, we encourage you to use TallPro with a parent or guardian, and to talk to a doctor about any concerns about growth or health.
7. How long we keep data
Data on your phone stays until you delete it in the app or delete the app. Your anonymous account and AI usage counts stay on our servers until you use "Delete my data". Purchase records are kept by Apple, Google and RevenueCat as required for billing and the law.
8. Deleting your data
In the app, open Me and tap Delete my data. This permanently deletes your anonymous account and its data from our servers, and everything TallPro stored on your phone. It does not cancel a subscription. Apple or Google manage that in your phone's settings. You can also email [email protected] to ask us to delete your data. See Delete your data for details.
9. Your rights
Depending on where you live (for example the European Union, the United Kingdom, Canada or US states like California), you may have the right to:
- access the personal data we hold about you, and get a copy;
- correct it, or delete it;
- object to or restrict how we use it, and withdraw consent at any time;
- complain to your local data protection authority.
Because most of your data never leaves your phone, the quickest way to see or delete it is in the app. For anything else, email us and we'll reply within 30 days. We won't treat you differently for using your rights.
Legal bases (EU/UK): we process data to provide the app you asked for (contract), to keep it secure and enforce fair-use limits (legitimate interests), and, for health-related information used by the AI features, camera and notifications, with your consent, which you can withdraw anytime.
10. Where data is processed
Our servers are in the European Union. Our AI provider processes requests in the United States. When data moves between countries, we rely on our providers' legal safeguards, such as the European Commission's Standard Contractual Clauses.
11. Security
Data sent between the app and our servers is encrypted in transit. Server access is limited, and our database only lets each anonymous account read its own data. No system is perfectly secure, but we work to protect your information.
12. Changes and contact
If we change this policy, we'll update the date above and, for important changes, tell you in the app. Questions or requests: [email protected].