The instrument, not the theater. This page states what the server keeps and what it never sees.
Tally keeps its records on the phone. The app works fully offline, signed out, indefinitely. An account is optional.
With an account, private data — log entries, days, meal templates, foods — syncs to the operator's server so a second device can carry the same tape. It is never shared. It is never sold. Nothing about what you ate, weighed, or wrote leaves your rows.
A product you verify against its package joins a shared base as an anonymous food fact — name, brand, values per 100 g. The fact carries no person; only the package's numbers travel.
Cross-check sends product facts — never personal data — to xAI, once per barcode, ever. The model advises; the package decides.
Delete the account in Settings. Everything private is erased. Contributed food facts are withdrawn. The phone keeps its own tape.
Contact: martin@uncondetional.com