TotiWaitlistPrivacy Policy
Your body, your data. Here's exactly what Toti stores, who we send it to and how to delete it. We don't sell your information or use it for advertising.
Last updated: Effective:
This policy explains how JotaTech handles your information when you use the Toti app and this website. Toti helps you log what you eat, your water and your weight, and calculates a calorie and macro plan. Some of that data is health data, so we treat it as sensitive data. If anything is unclear, write to support@jotatech.org.
JotaTech is the data controller: it decides what data is processed and why.
- Controller: JotaTech — Colombia
- Privacy and support email: support@jotatech.org
- App: Toti, for iPhone (App Store) and, once available, Android (Google Play)
- Who handles your requests: JotaTech support, at support@jotatech.org
2.1 Session and account
- The first time you open Toti we create a guest session: a random identifier, with no name or email. We use it to store what you log on our servers so you don't lose it.
- If you sign in with Apple or Google, we receive your email (or Apple's private relay email, if you choose it), your name and, with Google, your profile photo. We never see your password.
2.2 Your profile (health data)
Age, sex, height, weight, body fat percentage (optional), activity level, goal (lose, maintain or gain), weekly pace and target weight. We use them to calculate your calorie and macro plan.
2.3 What you log
- Meals: what you ate, amount, time and meal slot
- Water and weigh-ins
- Recipes, foods you create and saved meals
- Streaks, progress and preferences (language, appearance, daily meals, reminders)
2.4 What you send to the AI, only when you use it
- Text: what you type in "Search with AI" or in a meal list.
- Photo: the photo of the dish or label you take or pick. Only that photo; Toti has no access to the rest of your library.
- Voice: what you dictate. See section 5.
- Along with the text, photo or voice we send the names of the foods in your catalog so the AI can recognize them.
2.5 Purchases
If you buy Toti Pro, we receive from the store and RevenueCat your plan, purchase, renewal or expiry dates and the transaction ID. Apple or Google charge you: we never see your card. If you redeem a promo code, we store the redemption.
2.6 Technical data
- Monthly AI usage counter.
- Server logs (date, user ID and details of each request).
- Crash reports (Sentry): the error, phone model, OS and app version, and the first 8 characters of your ID. No email, no IP, no screenshots.
2.7 On your phone
Toti stores your information in the app's storage, a safety copy before syncing and any backup files you export. Streak reminders are local notifications: they are scheduled on your phone and don't go through our servers.
2.8 What we do NOT collect
- Your location
- Your contacts
- Your photo library (only the single photo you pick)
- Apple Health / Google Health Connect data
- Your advertising identifier (IDFA / AAID). The Toti app has no ads and doesn't track you
- Your browsing history outside the app
Important: your age, sex, height, weight, body fat, goal, meals and weigh-ins are sensitive data because they relate to your health (Colombian Law 1581 of 2012, art. 5).
- We process them only with your express consent.
- You don't have to give it. Without this data we can't calculate your plan.
- We use them only for the purposes in section 4. Never for advertising, selling, or decisions about you outside the app (insurance, employment, credit).
- You can withdraw consent at any time by deleting your account (or, as a guest, as described in section 9) or by writing to us.
- Running Toti: calculating your plan and showing your logs, streaks and progress.
- Storing and syncing: keeping your information in the cloud so you can recover it if you change phones or reinstall, and making the backups you request or the weekly automatic one.
- AI: turning your text, photo or voice into a log entry, and fine-tuning your plan (section 5).
- Improving Toti's AI: reviewing searches the AI couldn't resolve and the corrections you make to its results, to improve our catalog and the instructions we give the model. They are not used to train third-party models.
- Account and Pro: identifying you, recognizing your subscription and applying your AI quota.
- Security and stability: preventing AI abuse and fixing crashes.
- Support: answering your messages and requests.
Note: We don't sell your data, share it with advertisers or build ad profiles from what you eat or weigh.
AI features are optional. If you don't use them, none of this is sent.
| Feature | What is sent | To whom |
|---|---|---|
| Search with AI and lists | The text and the names in your catalog | Google Gemini; if it fails, OpenAI |
| Dish or label photo | The photo and the names in your catalog | Google Gemini; if it fails, OpenAI |
| Dictate | First Apple's speech recognition, on your iPhone when supported (otherwise Apple processes it on its servers). If it can't understand, the audio (max 60 s) goes to OpenAI Whisper | Apple; OpenAI |
| Plan fine-tuning (when creating or rebalancing your plan) | Sex, age, height, weight, body fat, activity, goal, pace and target weight, plus the calculated plan | Google Gemini; if it fails, OpenAI |
- Everything goes through our functions on Supabase. We don't send the AI your name, email or full history. Providers receive the content of the request; they don't know who you are.
- Photos and audio are not stored: they are processed to give you the result and discarded. On your phone, the temporary audio is deleted when done.
- What we store is the entry you confirm. We also store, linked to your account, the text of searches the AI couldn't resolve and the corrections you make to its results (section 4).
- Training: we use Google (Gemini API) and OpenAI (API) as paying customers, and under their terms they don't use these requests to train their models. They may keep them for a limited time to detect abuse (OpenAI, up to 30 days).
- AI results are estimates and can be wrong. Review them before saving.
They process data on our behalf, with access only to what they need and under their data protection terms.
- Supabase — database, sign-in, server functions and cloud backups. Policy
- Google (Gemini API) — text, photo and plan AI. Terms
- OpenAI — fallback AI and voice transcription (Whisper). Policy
- Apple — sign-in, speech recognition, App Store and payments. Policy
- Google — sign-in and, on Android, Google Play and payments. Policy
- RevenueCat — your Pro subscription status. Receives your Toti ID and purchase data, never your logs. Policy
- Sentry — crash reports, no email or IP. Policy
- Vercel — hosts this website. Policy
Note: None of them may use your data for advertising, profiling or resale.
Our providers process data outside Colombia (for example, Google and OpenAI in the United States). We only work with providers that offer an adequate level of protection or equivalent safeguards in their terms. By consenting to the processing of your health data you also accept this transfer (Law 1581, art. 26).
If you are in the European Union, the United Kingdom, Brazil (LGPD) or California (CCPA), you also have the rights those laws give you. We don't sell or "share" personal information as the CCPA defines those terms.
- Your account and logs: as long as the account exists. If you delete your account, they are removed from our database immediately.
- Guests: guest sessions that stop being used are deleted automatically, with their data, after a period of inactivity.
- Cloud backups: kept for a limited time, and you can delete them sooner from the app. Files you export stay wherever you save them.
- Failed AI searches and corrections: as long as the account exists.
- Server logs: deleted automatically within a few days.
- Crash reports (Sentry): up to 90 days.
- Purchases: purchase history and the record that you deleted your account are kept for as long as accounting rules require and to handle claims. Apple and Google keep their receipts under their own policies.
- Support emails: up to 2 years.
- Provider backups: Supabase keeps full database backups for a few days; deleted data disappears from them as they rotate.
Under Law 1581 of 2012 (art. 8) you can:
- Know what data we hold and how we use it.
- Update and correct it: almost everything is editable in the app (Profile).
- Request proof of the consent you gave us.
- Delete your data and withdraw consent: Profile → Danger zone → Delete account, or by email (account deletion guide).
- Take your data with you: Profile → Backup & restore → Export backup (JSON file).
- File a complaint with Colombia's Superintendence of Industry and Commerce (SIC), after first making your request to us.
How: email support@jotatech.org with the subject "Personal data request", your account email (or, if you're a guest, how we can identify you) and what you want. We may ask you to verify your identity.
- Inquiries (knowing your data): answered within 10 business days; if we can't, we'll tell you and answer within 5 more business days (art. 14).
- Claims (correct, delete, withdraw): answered within 15 business days; if we can't, we'll tell you and answer within 8 more business days (art. 15).
If you're a guest: since you have no account, "Delete account" doesn't appear. To delete your cloud data, sign in with Apple or Google from Profile (your data moves to that account) and then delete it, or write to us. If you stop using the app, it's also deleted automatically after a period of inactivity.
- All communication between the app and the server is encrypted (HTTPS/TLS).
- The database is encrypted at rest by the provider and protected with Row Level Security: each account can only read its own data.
- We don't store passwords: Apple or Google handle sign-in.
- Backups carry a SHA-256 checksum to detect damaged files (an integrity check, not encryption).
- Data on your phone is protected by the system's encryption, which depends on your phone's lock. Keep it on.
No system is infallible. If an incident affects your data, we'll notify you and report it to the SIC as the law requires. If you find a vulnerability, write to support@jotatech.org.
Toti is only for people 18 and older. It isn't meant for children or teenagers and we don't knowingly collect their data. If you are a parent or guardian and believe a minor gave us their data, write to support@jotatech.org and we'll delete it.
- Email: support@jotatech.org
- Suggested subject: "Personal data request — access / correct / delete / withdraw"
Changes and effective date
If we change this policy in a meaningful way (for example, a new provider or a new purpose), we'll let you know in the app before it applies and, for a new purpose, ask for your consent again. This version is effective as of November 10, 2026. Your data is kept while your account exists, with the periods in section 8.