Tonefi is a personal training app. It asks for things most apps don't: photos of your body, your weight, what you eat and how you sleep. This policy explains what we collect, where it goes, and how to delete it. The short version: your photos are private to you, we never sell your data, and some of it is processed by our AI provider so the app can coach you, which you can limit.
Photo rules
- Photos must be of you, wearing gym or beach clothing (shorts, a sports bra or swimwear), with intimate areas covered.
- Nude, sexual or explicit photos aren't allowed. Each photo is checked on your device before upload, and explicit photos are blocked without being uploaded.
- No photos of other people, and never of children. You must be 18 or older to use Tonefi.
- If you add an optional goal photo, only use an image you have the right to use.
What we collect
- Account: name, email address and a securely hashed password (we never store your password itself).
- Profile: sex, age, height, weight, goals, experience, training schedule, meal times and time zone.
- Photos: your starting photo, optional goal photo, daily check-in photos and meal photos, plus body landmark points used to line up your timelapse.
- Activity: workouts and sets, food logs, sleep, water, steps, habits and messages you send to the coach.
- Technical: sign-in session, push-notification subscription for your device, and a hashed step-sync token if you connect Apple Health.
What happens on your device
Some processing never leaves your phone: pose detection for camera alignment and rep counting, the body outline guide, and the check that blocks explicit photos. These run in your browser using open-source models. Your timelapse video is also created on your device.
Who processes your data
- Cloudflare hosts Tonefi and stores your data and photos in encrypted storage, and delivers our reminder emails.
- Anthropic (the company behind the Claude AI) processes data to generate coaching: your profile and, if AI photo analysis is on, your starting, target and daily photos, to write your plan and daily notes; meal photos and descriptions, to estimate calories; and coach chat messages with your recent activity. You can turn off AI photo analysis in Settings at any time; your plan is then built from your numbers only. See Anthropic's privacy policy.
- Apple, Google and Mozilla push services deliver notifications to your device if you turn them on. Notification contents are encrypted.
- Your browser downloads app components (exercise images, fonts and on-device models) from jsDelivr, Google and Unsplash. Like any website request, these share your IP address, but none of your personal data or photos.
We don't sell your data, share it with advertisers, or use it for advertising.
Who can see your photos
Only you, while signed in. Photos are never public and have no shareable link. They are processed by Anthropic only as described above. We don't view your photos except where required to investigate a report of abuse or to comply with the law.
How long we keep it
We keep your data while your account exists. Delete any photo from Progress, or delete your whole account in You › Settings › Delete Account, which removes your account, logs and every photo from our database and storage immediately. Copies may remain in our hosting provider's encrypted backups for up to 30 days before they're overwritten.
Your choices and rights
- Turn AI photo analysis, email reminders and notifications on or off in Settings.
- Delete individual photos, food entries and workouts, or your whole account.
- Ask us for a copy of your data, or to correct it, by emailing us.
Health information
Tonefi gives general fitness guidance, not medical advice. Body-fat and calorie figures are estimates. Talk to a doctor before a big change in diet or training, and stop if you feel pain.
Contact
Questions or requests: privacy@tonefi.app. If this policy changes in a way that affects your photos, we'll ask you to review it again in the app.