01Controller and scope
Tarsis LLC is the controller of the personal information described in this policy. It applies to tarsis.pro, app.tarsis.pro and the Tarsis iOS app. For privacy questions or requests about your information, contact support@tarsis.pro.
02Information used by Tarsis
- Account: email, user identifier, information needed to sign in and your name when you provide it. If you choose Sign in with Apple, we receive the information you authorize Apple to share, which may include an Apple private relay email address.
- Personal tracking: measurements and information you enter, such as temperature, pulse, food, energy, sleep, activity, profile information, goals and notes. These records are stored locally; section 3 explains what changes when you use AI.
- Subscriptions: plan, status, expiry, provider, customer or transaction identifiers and event history needed to verify and manage access. Apple or Stripe handles payment information; Tarsis does not store your full card details.
- AI, if you authorize it: messages, selected images and documents including PDFs, together with your name, profile, goals and relevant health or nutrition context, depending on the feature.
- Operation and security: technical request information such as IP address, browser or device, errors and access activity. AI request counts associated with your account are also recorded to apply usage limits.
- Referrals and collaborators: the code used, visit identifier, date, source, platform, country where available and attributed signup or subscription activity. If you are a collaborator, your contact details and commission and payment records are also managed.
- Support: your contact address, message content and any information you choose to send to help resolve a request.
03Local tracking and optional AI
Your journal and other tracking information are saved in the browser or app storage on your device. They do not automatically synchronize to a journal on our servers. Clearing that storage or losing your device may cause you to lose your records.
AI features are optional. Before you use them, Tarsis asks for permission to send the information needed for your request to Google Gemini through our services. This may include your messages, photos or documents, name, profile, goals and a relevant summary of your records. This information can reveal health information and should not be considered anonymous.
You can continue recording information manually without allowing AI. Permission applies to the account and device where you give it; withdraw it in Profile → Privacy to stop future requests. Withdrawal does not automatically delete information already sent or affect the lawfulness of earlier processing.
Google’s processing is subject to the applicable Gemini service terms. We do not promise immediate deletion of information sent to a provider. Avoid including information about other people or content you do not need to share for your request.
04How information is used
We use account information to identify you, enable access and provide the service; subscription information verifies purchases, manages renewals and enables purchased features. This processing relates to performing our contract with you.
Optional AI processing of your requests and context is based on your consent. When the context includes health information, the requested permission explicitly covers sending and processing it to respond to your request. You can withdraw permission without losing manual tracking.
Technical information and usage counts help operate the service, prevent abuse and resolve issues. Referral information attributes signups and purchases and calculates relevant commissions. The Tarsis team uses account, subscription, usage and referral metrics to administer the service.
For security, support and service administration, we rely on our legitimate interest in keeping the service operational and protecting it, subject to applicable legal limits. Where a legal obligation applies, we process or retain the information necessary to meet it. We do not sell your personal information or use it for advertising based on your health history.
05Providers and recipients
We work with the following providers depending on the features you use. Their privacy documents also explain the processing for which they are independently responsible.
- Cloudflare: delivery and protection of the website and web app; it may process technical information needed to handle requests.
- Supabase: authentication, account and subscription information, service functions, usage and the referral program. AI requests pass through Tarsis functions hosted by this provider.
- Google Gemini: processing of AI requests and content when you give permission and use those features.
- Apple: sign-in, app distribution and in-app purchases when you use those services.
- RevenueCat: validation and management of Apple purchase status. It receives account and purchase identifiers, subscription information and, when available, the email linked to your account.
- Stripe: management of web subscriptions and payments made through this provider.
- Collaborators: access to results for their referral codes and corresponding commission information. Your health journal is not included in their referral dashboards.
- Authorities or advisers where there is a legal obligation or this is necessary to address or defend a claim.
06International processing
Our providers operate internationally. Depending on the service, information may be processed in countries other than your own, including the United States. Data protection rules may differ.
Providers’ privacy and data protection documents describe their locations and transfer mechanisms. Contact support@tarsis.pro to request information about recipients and safeguards applicable to your information.
07Retention and deletion
Local records remain on your device while you keep them in app or browser storage. Information already shared with a provider is not automatically deleted when you clear that storage.
Retention of account and service information depends on the duration of our relationship with you, deletion requests, the need to resolve issues or claims, and applicable billing or recordkeeping obligations. Canceling a subscription is not the same as deleting an account.
You can start account deletion from Profile. To request erasure of additional information, retained copies or data processed by our providers, contact support. Some payment or security records may need to be retained for legal obligations or handling claims. Provider retention also depends on the applicable services and terms.
Deleting your account does not automatically cancel Apple subscriptions. Manage those in your Apple Account subscription settings.
08Your rights and choices
Depending on applicable law, you may request access, correction, erasure, restriction of processing and portability, and object to processing based on legitimate interests. You can also withdraw consent without affecting earlier processing.
Email support@tarsis.pro from the address associated with your account and explain your request. We may ask for proportionate information to verify that the request comes from you. Applicable law sets the limits and response periods for these rights.
If you believe your rights have not been properly addressed, you may complain to the competent data protection authority; in Spain, this is the Agencia Española de Protección de Datos.
Providing the necessary account information allows you to create and use an account. The records you enter, files you select and participation in AI features are your choices; the relevant features may not be available without the information they need.
09Cookies, storage and permissions
The Tarsis marketing website does not include advertising or marketing tracking tools. Delivering and securing the website requires technical processing of requests.
The app uses local storage for your records, session, preferences, AI consent and, where applicable, referral information. Authentication or payment services may use session mechanisms needed to function.
Camera, photo and notification access is used when you choose the relevant features and allow device permissions. Manage those permissions in your system settings. Declining AI permission does not prevent manual tracking.
10Minors and security questions
The Tarsis terms set a minimum age for creating an account. Third-party AI services have additional age restrictions. If you believe a minor has supplied information without meeting the applicable conditions, contact us so we can review it.
Protect access to your device and account. If you identify a possible security incident or unauthorized access, contact support@tarsis.pro.
11Changes to this policy
We may update this policy to reflect changes to the service, providers or legal obligations. The date above shows the latest update. We will communicate material changes by email at least 15 days in advance and request new consent when necessary.