TafraPrivacy policy
Effective 2026-10-20 · Version 1.0
Tafra («طفرة») is a training and nutrition app. This policy explains what personal data we collect, why, who helps us process it, how long we keep it and what you can do about it. We wrote it in plain language; nothing here is hidden in other documents.
The short version
- Most of your data stays on your phone. You can use the training log, food log and history without an account.
- An account is optional. With an account, a backup of your training and food data is stored on our server in Germany.
- Health data is sensitive, and we treat it that way. We never sell it, never use it for advertising and never share it with data brokers. Data from Apple Health or Health Connect stays on your phone.
- AI features need your separate permission and send only what each feature needs to Anthropic, our AI provider.
- No ad tracking. We do not use advertising SDKs or track you across other companies' apps and websites.
- You can export or delete everything, in the app or on our account deletion page. Deletion on our server is immediate.
Contents
- Who we are
- What we collect and why
- Data that stays on your phone
- Health data
- AI features
- Who processes data for us
- Where data is stored and transfers
- How long we keep data
- Your rights and choices
- Adults only (18+)
- Security
- Changes and contact
1. Who we are
The controller responsible for your personal data is Ahmad Tawfik, 77 Dr lashin street, Faisal, Giza Governorate, Egypt ("we", "us"). Contact for privacy questions and requests: [email protected]. General support: [email protected].
2. What we collect and why
We collect data in four situations. If you never create an account and never turn on AI, analytics or friends features, almost nothing reaches us.
| Data | When | Purpose | Legal basis |
|---|---|---|---|
| Account: email address, password (stored only as a salted hash), language, sign-in sessions | You create an account | Sign-in, sign-in and password-reset emails, security | Contract (providing the service) |
| Cloud backup: first name, height, country, time zone, training goals and program settings (these can include injury or pain areas you asked the app to avoid and Care-mode areas), equipment, workouts and sets, food logs, saved foods and recipes, bodyweight and body measurements, nutrition targets, supplements | You sign in and keep backup on | Back up and restore your data, sync between devices, build your plan | Your explicit consent for health-related data; contract for the rest |
| Subscription and trial: an app user ID, a random install ID, the store's purchase and renewal records, trial start, entitlement status | You start a trial or subscribe | Give you access, prevent repeated free trials, handle renewals and refunds | Contract; legal obligations (tax/accounting) |
| AI requests: your question to the coach and the training/food context it needs; food or label photos; physique or form-check photos or video frames; the AI's answer; usage counts and cost | Only after you turn on AI for that feature | Answer you, keep AI within fair-use limits, prevent abuse | Your explicit consent (withdraw any time in Account → AI data sharing) |
| Friends and coaching: username, display name, friend list, invites, challenges, shared workout summaries; summaries you choose to share with a human coach, dietitian or Care helper | You use Friends or link a coach or helper | Social features you asked for | Contract; consent for any health summary you share |
| Push token (a random device address for notifications) | You allow notifications for friends features | Deliver friend and challenge notifications | Consent |
| Usage statistics: which screens and features are used, app version, language, platform, a random install ID | Only if you turn on "Help improve Tafra" (off by default) | Understand what works and fix what doesn't | Consent |
| Crash reports: error type, stack trace, device model and OS version. No names, emails, notes or messages | On by default; turn off in Settings → Privacy & data | Find and fix crashes | Legitimate interest in a working app |
| Technical data: IP address and request metadata | Whenever the app talks to our server or media CDN | Deliver content, rate limiting, security | Legitimate interest |
| Support messages | You email us | Answer you | Legitimate interest / contract |
We do not collect your precise location, contacts, microphone audio or advertising identifier. Country is chosen from your phone's region settings and your own choice, never GPS.
3. Data that stays on your phone
These are stored only on your device and are not sent to us: progress photos, physique check-in photos and results, Care-mode pain check-ins, pelvic-floor practice, cycle check-ins, data imported from Apple Health or Health Connect, and your food-photo history. Everything on the phone is erased when you uninstall the app or use Settings → Reset on-device data. Android backups of app data are turned off so this data is not copied to Google's cloud.
4. Health data
Training, bodyweight, nutrition, pain or injury areas and similar details are health data, a sensitive category under Egyptian law. We process them only with your explicit consent, only to run the features you use, and we:
- never sell health data or use it for advertising or marketing;
- never share it with data brokers, insurers or employers;
- use Apple HealthKit and Google Health Connect data only on your phone to adjust your plan, never store it on our server, and never use it for advertising or share it with third parties;
- write workouts to Apple Health or Health Connect only if you turn that on, and then only the type, start and end time.
Tafra is not a medical device and does not diagnose or treat any condition. See the Terms.
5. AI features
Smart Coach Sami, food-photo and label estimates, physique check-ins and form checks use Anthropic's Claude models through our server. The AI key lives only on our server; your phone never talks to Anthropic directly.
- Nothing is sent before you give consent for that feature, and you can withdraw consent at any time.
- Photos are re-encoded without location or camera metadata before they are sent, are sent once, and are not stored on our server. We keep only the structured result (for example, the estimated foods), so you can see it again and so limits can be counted.
- Anthropic processes this data on our behalf under its commercial terms, which do not allow it to train its models on our API data. Anthropic may keep inputs and outputs for a limited period (currently up to 30 days, longer only if flagged for a policy violation) for safety and abuse monitoring. [Lawyer: confirm current Anthropic retention terms and our DPA.]
- AI answers can be wrong. Always check estimates and advice before you rely on them.
6. Who processes data for us
We use these service providers ("processors"). Each may use the data only to provide its service to us.
| Provider | What they do | Data involved | Location |
|---|---|---|---|
| Oracle Corporation and affiliates (Oracle Cloud Infrastructure) | Server hosting, database, local backups | All server-side data above | Frankfurt, Germany (EU) |
| Cloudflare, Inc. | Domain name system, content delivery, R2 exercise media, encrypted off-site backups, website protection and support email forwarding | IP address and request data, encrypted database backups, support emails | Global network; company in the USA |
| Anthropic, PBC | AI processing (only with your consent) | AI requests described in section 5 | USA |
| RevenueCat, Inc. | Subscription management | App user ID, purchase and renewal records | USA |
| Apple and Google | App stores, payments, refunds; Apple Health / Health Connect on your phone | Their own purchase records. They act under their own privacy policies | USA / worldwide |
| Resend, Inc. | Sends sign-in, verification and password-reset emails | Email address, the email content, delivery logs | United States |
| 650 Industries, Inc. (Expo) | Delivers push notifications for friends features | Push token and the notification text | USA |
| Open Food Facts (non-profit) | Product database for barcode and food search | The barcode or search words only. No account data | France (EU) |
| Functional Software, Inc. (Sentry) | Crash reports (if turned on) | Crash data described above | USA or EU region |
| PostHog, Inc. | Usage statistics (only with your opt-in, if we enable it) | Usage statistics described above, linked to a random ID | EU cloud |
We do not sell personal data and do not share it for cross-context behavioural advertising. We may disclose data if the law requires it, to protect people's safety, or as part of a transfer of the business, in which case this policy continues to apply.
7. Where data is stored and transfers
Our server and database are in Frankfurt, Germany (Oracle Cloud Infrastructure). Encrypted backup copies are stored separately with Cloudflare R2. If you live in Egypt, using an account transfers your personal data, including health data, outside Egypt. Some providers in section 6 process data in the USA or other countries, including Anthropic for AI features and RevenueCat for subscriptions. [Lawyer: confirm the applicable cross-border transfer basis, processor agreements and any permissions required by the Personal Data Protection Center before store publication.]
8. How long we keep data
| Data | How long |
|---|---|
| Account and cloud backup | Until you delete the account. Deletion removes it from the live database immediately. |
| Server backups | Encrypted copies are overwritten within 30 days, so deleted data disappears from backups within 30 days of deletion. |
| AI results and usage counts | With your account, until you delete it. Photos are never stored. |
| Usage statistics (if you opted in) | 90 days, then deleted automatically. Turning the option off erases what this install sent. |
| Crash reports | Up to 90 days. |
| Server security logs | Up to 14 days. |
| Sign-in emails at the email provider | According to the provider's delivery-log retention (typically up to 30 days). |
| Free-trial fingerprint | After you delete your account we keep only a one-way coded fingerprint (HMAC) of your email address and install ID, with no other data, so the free trial cannot be claimed again. It cannot be turned back into your email. |
| Store transaction records | As long as tax and accounting law requires, without a link to your deleted account. |
| Data on your phone | Until you delete it, reset the app or uninstall it. |
9. Your rights and choices
Under Egypt's Personal Data Protection Law (and the GDPR, where it applies) you can:
- know and access the data we hold about you: Account → Export account data gives you a full copy (JSON) at any time; Settings → Privacy & data → Export on-device data does the same for the phone;
- correct it: edit it in the app, or contact us;
- delete it: Me → Account & backup → Careful → Delete my account, or our web deletion page;
- withdraw consent for AI, usage statistics, crash reports, notifications or health access at any time, in the app or in your phone's settings, without affecting earlier processing;
- object to or restrict processing, and be told about a personal data breach that affects you;
- complain to the Personal Data Protection Center in Egypt (or your local data-protection authority in the EU).
Email [email protected] from your account's email address for any request. We answer within 30 days, free of charge.
Subscriptions: deleting your account does not cancel a store subscription. Cancel it in your Apple ID or Google Play subscription settings.
10. Adults only (18+)
Tafra is for people aged 18 and over. The app asks you to confirm your age during setup. We do not knowingly collect data from anyone under 18; if you believe a minor has created an account, contact us and we will delete it.
11. Security
Connections use HTTPS. Passwords are stored as salted scrypt hashes. The AI key and other secrets stay on the server. Sensitive actions such as export and deletion require you to re-enter your password. Server access is restricted to the operator by SSH key. No system is perfectly secure, so please use a unique password.
12. Changes and contact
We will post any change here with a new effective date, and tell you in the app before a significant change takes effect. Questions: [email protected].