Privacy Policy
Last updated: 3 August 2026
Toro ("we", "us") is a fitness tracking app. This policy explains what we collect, why, and what control you have. The short version: your data exists to run your account and show your progress, it is only shared with friends you add, and you can delete all of it in the app at any time.
What we collect
- Account details: email address, name, and an optional profile photo.
- Fitness and body data: weight, height, age, sex, goals, workouts, sets and weights lifted, logged meals and their nutrition estimates, and optional body progress photos with AI body-fat estimates.
- Photos you choose to submit: meal photos, nutrition label photos, and progress photos.
- Friends and profile content: your display name, username, and avatar, and the friend requests you send and accept. These are visible to friends you have added and on friends leaderboards.
- Basic technical data: timestamps and timezone, used for streaks and daily targets.
- Push notification token: if you enable notifications, we store your device's push token to deliver friend-request and activity notifications. It is deleted with your account.
How AI features work
When you scan a meal, a nutrition label, or take a body scan, when you type a food description for an AI estimate, and when you generate a workout, the relevant photo, text, or training history is sent to Anthropic's Claude API to produce the analysis. Anthropic processes this data as a service provider and does not use API data to train its models. AI outputs (calorie counts, body-fat estimates, workout suggestions) are estimates for fitness tracking, not medical advice or medical measurements.
Where your data lives
Data is stored with Supabase (database, authentication, and photo storage). Photos are kept in private storage and served through short-lived signed links. We do not sell your data, show ads, or share your data with data brokers.
Who can see what
- Your display name, username, and avatar are visible to friends you have accepted.
- Body scans, progress photos, meals, and workouts are private to your account.
- Leaderboards show your name, avatar, rank, and XP to friends.
Your controls
- Delete your account any time in Profile → Settings → Delete account. This permanently removes your account, workouts, meals, photos, and XP from our systems.
- Report and block: you can report or block any user from the Friends list or the Friend Requests screen in the app.
- Data requests: email us for a copy or correction of your data.
Retention
Data is kept while your account exists. Deleting your account removes it permanently. Reports you file may be retained in anonymised form for moderation records.
Children
Toro requires users to be at least 17 years old (date of birth is checked at signup), and we do not knowingly collect data from children.
Contact
Questions or data requests: support@usetoro.app
We may update this policy as the app evolves; material changes will be announced in the app.