Privacy policy
What Taaco keeps, and why
Effective 10 September 2026. Applies to the Tacoo AI Android app and asktaaco.com.
Taaco is a fitness companion. You tell it what you ate, how you trained and what you weigh, by typing, speaking or taking a photo, and it keeps your log and answers questions about it. This page says exactly what data that involves, where it goes, and how to get rid of it.
Who is responsible
Tacoo AI is built and operated by an individual developer. Contact for anything on this page: stambhalabs@gmail.com. This is the same address shown on the Play Store listing.
What we collect, and why
| Data | Why | Required? |
|---|---|---|
| Email address and a password | To create and sign in to your account. The password is stored only as an argon2 hash; we cannot read it. | Yes |
| Profile: sex, height, diet preference | To work out your calorie and protein targets. | Yes |
| Goal: type, target weight, calorie and protein targets | To measure your day against something. | Yes |
| Weight entries | To show your trend on the Progress screen. | If you log them |
| Food log entries and their nutrition estimates | The core of the app. | If you log them |
| Workouts and sets | Same. | If you log them |
| Chat messages you send, and Taaco's replies | So the conversation has context, and so you can scroll back. | If you chat |
| Voice notes (audio) | Transcribed to text so the meal or workout can be logged. The audio is not stored after transcription; the transcript is kept as a chat message. | Optional |
| Meal photos | Described by a vision model so the meal can be logged. The photo is not stored after it has been described; the description is kept as a chat message. | Optional |
| Assistant run records: your message, which tools ran, token counts, timing, errors | To debug Taaco when it gets something wrong. | Automatic |
| Audit events: a record of each change to your log and why | So a wrong entry can be traced and corrected. | Automatic |
We do not collect location, contacts, device identifiers, advertising identifiers, crash logs or usage analytics. There are no advertising or analytics SDKs. Microphone and camera are used only at the moment you tap the voice or photo button, and only with your permission.
Where it goes
- Our server, hosted on Railway in Singapore. Everything above is sent there over HTTPS and stored in a PostgreSQL database hosted by Supabase, also in Singapore. The database is not reachable from the internet except through our server.
- Groq, which runs the language, speech-to-text and vision models. Each chat turn sends Groq your message, recent conversation, and a structured summary of your profile, goal and today's log. Voice notes send the audio; photos send the image. Groq processes these on our behalf and, under its API terms, does not use them to train models. See Groq's privacy policy for their retention.
Nothing is sold, and nothing is shared with anyone else.
How long we keep it
For as long as your account exists. Sessions expire after 90 days. Audio and images are discarded as soon as they have been transcribed or described. When you delete your account, everything is deleted at once.
Deleting your account
In the app or on this site: Progress → Delete my account, then confirm. This removes your account and every row attached to it, including chat history, logs, audit events and assistant run records, immediately and permanently. There is no backup copy to restore from. Details, and what to do if you cannot sign in, are on the account deletion page.
Security
All traffic uses HTTPS. Passwords are hashed with argon2. Session tokens are random, stored only as SHA-256 hashes on the server, and revoked when you sign out. The database has row-level security enabled and grants no access to any role except the server's own. On Android the session token is kept in the system's encrypted storage; on the web it is an httpOnly cookie.
Children
Taaco is for adults. It sets calorie targets and weight goals, which is not appropriate for anyone under 18, and we do not knowingly create accounts for them. If you believe a child has an account, email us and it will be deleted.
Not medical advice
Taaco is a logging and coaching tool, not a medical device or a clinician. Its targets and replies are general guidance generated by a language model and can be wrong. Talk to a doctor before changing your diet or training if you have a health condition, are pregnant, or have a history of disordered eating.
Your rights
You can see everything Taaco holds about you in the app itself, export it by asking us, correct any entry through the app, and delete all of it at any time. If you are in the EU, UK or another jurisdiction with data protection law, the rights it gives you apply and the address above is how you exercise them.
Changes
If this policy changes in a way that matters, the effective date at the top changes and the app will say so. The current version always lives at this address.