Last updated · August 2026
Privacy.
Plain version: we collect the minimum we need to run the app, store it in Europe, and never sell it. Full version below.
Who we are
Tanin is operated by Mathwares B.V., registered in Utrecht, the Netherlands. For any privacy question, write to privacy@gettanin.app. We respond within 30 days, as GDPR requires.
What we collect — and why
Account data. Email address (always), display name (if you set one), and Apple Sign-In identifier (if you use it). We need this to give you an account and let you log back in. Legal basis: contract.
Profile data. The macro targets, allergens, and dietary preferences you set yourself. The planner needs this to build your week. Legal basis: contract.
Meals and meal plans. The meals you add to your library, the plans the engine generates, and the meals you mark as consumed. We store these so the app works across devices. Legal basis: contract.
Apple Health data (optional, read-only). If — and only if — you grant permission, Tanin reads four values from Apple Health to pre-fill onboarding so you don't have to type them: date of birth, biological sex, height, and body weight. Tanin does not write anything to Apple Health, and does not read your workouts, heart rate, medical records, or any other health category. These values are used solely to calculate your personal calorie and macro targets. We never use Apple Health data for advertising or marketing, never sell it, and never share it with any third party — including Anthropic, whose requests contain only meal names and ingredient text. You can refuse the permission (the app asks you for the same values directly instead) or revoke it at any time in the iOS Health app; revoking stops all future reads. Legal basis: consent.
Subscription data. If you subscribe, Apple — not Tanin — processes your payment. We never see or store your card details. Apple gives us a transaction identifier and your subscription status (which plan, whether it renews, when the period ends, and whether a trial or refund applied), which we store to unlock the features you paid for. Legal basis: contract.
Waitlist email. If you join the waitlist on this site, we send your email to our newsletter provider (Beehiiv, see below) so we can email you when early access opens. Legal basis: consent — you opt in by submitting the form.
Anonymous analytics. We use Plausible to count page views and where they come from. No cookies, no cross-site tracking, no IP storage. The cookie banner asks you anyway because EU law requires the choice. Legal basis: consent.
What we don't collect. No advertising identifiers. No behavioural profiles. No third-party trackers. No location data. No health data beyond what you type into the app yourself.
Where it lives
All app data lives in PostgreSQL on Railway, EU region (Frankfurt). Backups are encrypted at rest in the same region. We do not move your data outside the EU.
Who else touches your data (data processors)
We use a small number of vendors to run the service. Each one has a signed Data Processing Agreement and (where relevant) Standard Contractual Clauses for any transfer outside the EEA.
- Railway — application hosting and database, EU region.
- Beehiiv — waitlist newsletter (US-based; SCCs in place). Only your email address and the UTM campaign tag are shared.
- Plausible — anonymous analytics (EU-based, Germany).
- Anthropic — used to extract ingredients and nutrition values when you add a new meal. We send only the meal name and the ingredient text you type. We do not send your email, profile, or any identifier. Per Anthropic's enterprise terms, inputs are not used to train their models.
- Apple — Apple Sign-In and App Store payments follow Apple's standard developer terms. If you request a refund from Apple, we may share a minimal, bucketed summary of your account with Apple (account age bracket, subscription and refund history brackets, and whether your subscription was delivered) to help Apple decide your request; we never share your meals, health data, or any other content.
Every processor above is bound by a written data-processing agreement that requires them to protect your data to the same or a higher standard than this policy describes, to process it only on our documented instructions, and never to sell it or use it for their own advertising. We share your data with no one else. If we ever add a processor, this page is updated before the change takes effect.
How long we keep it
Account, profile, meals, plans. For as long as your account is active. When you delete your account in the app, everything is removed within 30 days. The 30-day window is a grace period in case the deletion was accidental — email us during that window to restore.
Waitlist email. Until you unsubscribe (one click in every email).
Anonymous analytics. Aggregated counts only — no individual records to expire.
Backups. Rolling 30-day window in EU region, then deleted.
Your rights
Under GDPR you have the right to access, correct, export, restrict, object to, or delete the data we hold on you. You can also withdraw any consent you've given at any time, without affecting the validity of processing that happened before.
Email privacy@gettanin.app and we'll respond within 30 days. For data export, the app also provides a one-tap CSV export from your library and plan history.
If you believe we've mishandled your data and we can't resolve it, you have the right to lodge a complaint with the Dutch DPA (Autoriteit Persoonsgegevens) or your local supervisory authority.
Cookies
The website uses one functional cookie to remember your cookie- banner choice itself (`tanin-consent-v1`). Plausible analytics loads only after you accept analytics — it is cookie-less. No marketing or third-party trackers are loaded at any time.
Children
Tanin is not intended for users under 16. If we learn we have collected data from a child under 16 without a parent's consent, we will delete it.
Changes to this policy
If we change anything material, we will email everyone on the waitlist and every active user at least 30 days before the new policy takes effect.