Last updated: May 21, 2026
Tolera is designed with privacy as a foundational principle. This policy explains what data Tolera handles and how.
Tolera does not require an account. We do not collect personal information such as your name, email, or phone number.
The app stores the following data locally on your device:
In this version, Tolera data stays on the device where it is entered. Cross-device sync is not available yet.
When you ask Tolera to analyze a meal photo or text description, that content is sent to a Cloudflare Worker that we operate. The Worker forwards the request to Anthropic's Claude API for analysis and returns the results to your device. We do not log, store, or retain meal photos or descriptions on our servers.
A randomly generated per-device identifier (UUID) is included with each request solely for rate limiting. This identifier is not linked to any account, name, or other personal information. It is stored in the iOS Keychain on your device and persists across reinstalls so we can enforce rate limits fairly. It is not shared with any third party.
When you scan a barcode, Tolera queries Open Food Facts and the USDA FoodData Central API through our Cloudflare Worker. Only the barcode itself is sent — no personal data.
If you grant HealthKit permission, Tolera reads health data on-device only. This data is never transmitted to our servers or any third party. You can revoke HealthKit access at any time in iOS Settings.
Tolera does not use third-party analytics or tracking SDKs. We do not collect device fingerprints, advertising identifiers, or behavioral data.
We do not sell, rent, or share your data with anyone.
You can delete all Tolera meal, symptom, and protocol data at any time from inside the app via Profile → Data → Clear All Data, or by uninstalling the app. The randomly generated device identifier described above is stored in the iOS Keychain and is not linked to your identity.
Questions? Email support@tolera.app or open an issue at github.com/HughKantsime/tolera/issues.