Tabula

Tabula Privacy Policy

Last updated: October 2, 2026

Tabula ("Tabula," "we," "us") is a fitness, nutrition, and training-log app. This policy explains what information we collect when you use Tabula, why we collect it, who we share it with, and what control you have over it.

By creating a Tabula account, you agree to this Privacy Policy and our Terms of Service.

1. Information We Collect

Account information

Health and fitness data

This is the core of what Tabula does, and it is the most sensitive data we handle:

Content you provide for AI features

Tabula uses Claude, an AI model made by Anthropic, to read and extract information from things you submit — a photo of a whiteboard workout, a body-composition report, a food photo, a recipe, or typed/dictated text describing a workout or meal. When you use one of these features, the photo or text you submit is sent to Anthropic's API for processing and the result is returned to you to review before anything is saved. Submitted content is not used by Anthropic or Tabula to train AI models.

If you use voice dictation, your recording is sent to Google Cloud's Speech-to-Text service to be transcribed to text; the audio itself is not retained by Tabula after transcription.

If you import workout history from a CSV export, the contents of that file are sent to Anthropic's API to classify and match it against Tabula's exercise library, the same way other AI features work — you review every row before anything is saved.

Social features

If you join or create a group, message another user, or compete against another group, we store that content (messages, group membership, challenge results) so it can be displayed to the relevant people. Other members of a group you're in can see your name, photo, and the workouts you post to that group's activity feed.

Technical and usage information

2. How We Use Your Information

3. Who We Share Information With

We share information only with the service providers that help us run Tabula, each limited to what they need to do their job:

Who What they receive Why
Anthropic (Claude) Photos/text you submit to an AI feature To read and extract the information you asked for
Google Cloud (Speech-to-Text) Voice recordings, when you dictate To transcribe speech to text
Google Firebase All account and app data Hosts our database, authentication, file storage, and backend functions
Expo Push notification tokens To deliver push notifications via Apple/Google's push services
Sentry Crash/error reports To help us find and fix bugs

Other Tabula users you interact with (a group you join, a person you message) can see the content you share with them directly — names, photos, messages, and workouts posted to a shared group feed.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We may disclose information if required by law, or to protect the rights, safety, or property of Tabula or our users.

4. Data Retention and Deletion

You can delete your account at any time from Profile → Delete Account. Deleting your account permanently removes your profile, workout and food logs, programs, body measurements, meal plans, and other account data. A few things are deliberately kept so other people aren't affected by your deletion: group chats and direct messages stay visible to the other participant (your name on past messages shows as no longer active), and if you're the sole owner of a group with other members in it, ownership passes to the longest-standing member instead of deleting the group out from under them.

There is no undo once an account is deleted.

5. Your Rights and Choices

If you're in a region with additional statutory rights (e.g. GDPR, CCPA) and want to exercise them beyond what's available in-app, contact us at the address below.

6. Children's Privacy

Tabula is not directed at children, and we do not knowingly collect information from anyone under 13 (or 16, where applicable law requires it). If you believe a child has created an account, contact us and we will delete it.

7. Security

We use industry-standard practices to protect your data, including encryption in transit and access controls enforced server-side (Firestore security rules) so that, for example, only you can read your own private account information and only members of a group can see that group's content. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Changes to This Policy

We'll update the "Last updated" date above when this policy changes, and post the updated policy at the same URL. Material changes will be communicated in-app.

9. Contact Us

Questions about this policy or your data: info@tabulafitness.com