Privacy
Last updated September 30, 2026.
What we collect
- Your account: name, email address and a hashed password.
- Your organisation's records: the weights, notes, cart names and device names your iPads send, and your settings.
- An audit trail: who exported data, and when entries were corrected or deleted — so your organisation can see it.
- Technical logs: IP addresses and request times, kept for 14 days to keep the service secure.
The iPad app sends no personal information: no names, no location, no advertising identifiers.
What we do with it
Run the service, send the emails you've turned on, and answer you when you write to us. Nothing else. No advertising, no selling, no training models on it.
Who else sees it
Only the processors needed to run Tonny — our hosting provider and our email-sending provider — under contracts that forbid them using it for anything else. If you connect a Google Sheet, Tonny writes your weights to it, because you asked it to.
Deleting it
An owner can close the account from Settings; everything is deleted at once, and from backups within 30 days. To delete just your own login, email us.