Tabula Privacy Policy
Last updated: October 2, 2026
Tabula ("Tabula," "we," "us") is a fitness, nutrition, and training-log app. This policy explains what information we collect when you use Tabula, why we collect it, who we share it with, and what control you have over it.
By creating a Tabula account, you agree to this Privacy Policy and our Terms of Service.
1. Information We Collect
Account information
- Email address and password, when you create an account. Your password is never stored by Tabula — Firebase Authentication (our authentication provider) stores only a one-way cryptographic hash we cannot reverse.
- Name, profile photo, and bio, if you choose to add them.
Health and fitness data
This is the core of what Tabula does, and it is the most sensitive data we handle:
- Workouts you log — exercises, sets, weights, reps, and scored/timed workout results.
- Body measurements and weigh-ins you log, and any photos you submit of a body-composition report for us to read the numbers off of.
- Food you log, macro and nutrition targets, meal plans, and any food or recipe photos you submit.
- Programs you build, follow, or generate, and your progress through them.
Content you provide for AI features
Tabula uses Claude, an AI model made by Anthropic, to read and extract information from things you submit — a photo of a whiteboard workout, a body-composition report, a food photo, a recipe, or typed/dictated text describing a workout or meal. When you use one of these features, the photo or text you submit is sent to Anthropic's API for processing and the result is returned to you to review before anything is saved. Submitted content is not used by Anthropic or Tabula to train AI models.
If you use voice dictation, your recording is sent to Google Cloud's Speech-to-Text service to be transcribed to text; the audio itself is not retained by Tabula after transcription.
If you import workout history from a CSV export, the contents of that file are sent to Anthropic's API to classify and match it against Tabula's exercise library, the same way other AI features work — you review every row before anything is saved.
Social features
If you join or create a group, message another user, or compete against another group, we store that content (messages, group membership, challenge results) so it can be displayed to the relevant people. Other members of a group you're in can see your name, photo, and the workouts you post to that group's activity feed.
Technical and usage information
- Push notification tokens, so we can deliver notifications (a message, a group update, an import finishing) to your device via Expo's push notification service, which relays to Apple's (APNs) or Google's (FCM) push infrastructure.
- Crash and error reports, collected automatically via Sentry when the app encounters an unexpected error, so we can fix it. This can include device model, OS version, and the state of the app when the error happened — not your workout or food content.
- Basic usage data needed to operate the service (e.g., how much AI processing your account has used, to enforce fair-use limits).
2. How We Use Your Information
- To provide the core features of the app — logging, programs, progress tracking, meal planning, and the AI features described above.
- To let you participate in groups, messaging, and competitions with other Tabula users you choose to interact with.
- To send you notifications you've enabled (push notifications).
- To diagnose and fix bugs and crashes.
- To enforce usage limits and prevent abuse.
- We do not use your data for advertising, and we do not sell your data.
3. Who We Share Information With
We share information only with the service providers that help us run Tabula, each limited to what they need to do their job:
| Who | What they receive | Why |
|---|---|---|
| Anthropic (Claude) | Photos/text you submit to an AI feature | To read and extract the information you asked for |
| Google Cloud (Speech-to-Text) | Voice recordings, when you dictate | To transcribe speech to text |
| Google Firebase | All account and app data | Hosts our database, authentication, file storage, and backend functions |
| Expo | Push notification tokens | To deliver push notifications via Apple/Google's push services |
| Sentry | Crash/error reports | To help us find and fix bugs |
Other Tabula users you interact with (a group you join, a person you message) can see the content you share with them directly — names, photos, messages, and workouts posted to a shared group feed.
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
We may disclose information if required by law, or to protect the rights, safety, or property of Tabula or our users.
4. Data Retention and Deletion
You can delete your account at any time from Profile → Delete Account. Deleting your account permanently removes your profile, workout and food logs, programs, body measurements, meal plans, and other account data. A few things are deliberately kept so other people aren't affected by your deletion: group chats and direct messages stay visible to the other participant (your name on past messages shows as no longer active), and if you're the sole owner of a group with other members in it, ownership passes to the longest-standing member instead of deleting the group out from under them.
There is no undo once an account is deleted.
5. Your Rights and Choices
- Access and correction: most of your data is directly viewable and editable in the app (Profile, History, Progress, etc.).
- Deletion: see Section 4.
- Notifications: you can disable push notifications in your device's system settings at any time.
- Search visibility: you can opt out of appearing in other users' friend search from Profile → Edit Profile.
If you're in a region with additional statutory rights (e.g. GDPR, CCPA) and want to exercise them beyond what's available in-app, contact us at the address below.
6. Children's Privacy
Tabula is not directed at children, and we do not knowingly collect information from anyone under 13 (or 16, where applicable law requires it). If you believe a child has created an account, contact us and we will delete it.
7. Security
We use industry-standard practices to protect your data, including encryption in transit and access controls enforced server-side (Firestore security rules) so that, for example, only you can read your own private account information and only members of a group can see that group's content. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
8. Changes to This Policy
We'll update the "Last updated" date above when this policy changes, and post the updated policy at the same URL. Material changes will be communicated in-app.
9. Contact Us
Questions about this policy or your data: info@tabulafitness.com