Only what we need.

The Tongue apps are a suite of AI-powered tools. Not every app collects every category of data described here — each app only collects what it needs to provide its own features. To run these apps, we store some of your data on our servers and share parts of it with the third-party services that power the features you use. This policy explains what we collect, how we use it, who we share it with, and the choices you have. See the per-app details below for what is specific to each app.

Information we collect and store

When you create an account and use the Tongue apps, we may store the following on our servers, depending on which app and features you use:

• Account information. Your account identifier, email address, and (where applicable) name, phone number, and timezone. Accounts are managed through Amazon Cognito.
• Subscription and purchase information. Your subscription status and purchase history, managed through RevenueCat and the app store you purchased from. We do not receive or store your full payment-card details.
• Profile and health data you provide.Information you add to use an app's features, which may include birthday, height, weight, sex, activity level, food and nutrition logs, workouts, body metrics, and medication or supplement tracking (for example peptide and dosing logs in PepDose). Some of this is sensitive health-related information, and we store it only to provide the features you choose to use.
• Conversation content. Messages you exchange with your assistant, including text-message (SMS) and voice-call content sent through the Tongue SMS Agent feature, along with related delivery metadata such as timestamps and status. Voice-call audio is handled in real time by our telephony provider; we retain call metadata and text records rather than raw audio.
• Connected accounts. If you connect a third-party service (such as Whoop, Withings, Strava, Eight Sleep, Google Workspace, or Discord), we store the access credentials for that connection and the data it returns (for example fitness, sleep, or activity records) so your assistant can use it.
• Files and media. Files, images, and photos you upload or generate while using the apps (for example photos you provide to ELO AI).
• Camera input. Some apps (such as Striga) use your device camera. Striga processes the camera feed on your device for pose detection; we do not upload or store that camera video on our servers.
• Usage and operational data. Limited technical, analytics, and operational information needed to run, understand, and secure the apps. Product analytics are collected through PostHog.

How we use your information

We use your information to operate the Tongue apps: to run your assistant, deliver the features you request, route your messages and calls, sync your connected accounts, manage your subscription, understand and improve how the apps are used, and keep the apps secure and working. We do not sell your personal information, and we do not use it for third-party advertising.

Third-party services we share data with

To provide the Tongue apps, we share data with service providers that process it on our behalf or that you choose to connect. Each handles data under its own terms and privacy policy. These include:

• Cloud infrastructure (Amazon Web Services and Cloudflare) for hosting, our database, and file storage.
• Amazon Cognito for account creation and authentication.
• RevenueCat and the relevant app store (Apple or Google) to manage subscriptions and purchases.
• PostHog for product analytics that help us understand and improve how the apps are used.
• Twilio for delivering SMS messages and voice calls.
• AI providers(such as OpenRouter and Anthropic) to generate your assistant's responses and other AI-powered features. Your prompts and relevant context are sent to these providers to produce a result.
• Services you connect (such as Whoop, Withings, Strava, Eight Sleep, Google Workspace, and Discord), which receive and return data only for the integration you authorized.

We share information with these providers only to operate the service. We do not control how third parties you authorize handle data within their own platforms.

SMS and voice messaging

Tongue offers an optional text-message and voice-call feature (the "Tongue SMS Agent" program) that lets the account owner reach their own assistant by texting or calling a phone number assigned to their account. Participation is opt-in and owner-initiated: the owner provisions their own number inside Tongue and messages their own assigned number from their own mobile device.

When the owner texts or calls their assigned number, Chad Newbry LLC receives the owner's mobile phone number, the message or call content, and related delivery metadata (for example timestamps and carrier status) through our telephony provider Twilio. This information is used to route the message or call to the owner's assistant and to return a reply to the owner.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Information shared with subprocessors solely to provide the messaging service (for example Twilio for delivery, and LLM or TTS providers the owner has chosen to power their assistant) is not shared with third parties for their own marketing purposes.

The owner can stop text messages at any time by replying STOP and can request help by replying HELP. Message and data rates may apply; message frequency varies based on the owner's own usage.

Per-app details

The sections above describe the full set of data practices across the Tongue apps. Each individual app only collects and uses what it needs:

• Tongue. An AI assistant. Uses your account information, profile and health data you provide, conversation content (including the optional SMS and voice features described above), connected accounts, and files and media.
• PepDose.A peptide and dosing tracker. Stores health-related information such as your medications or supplements and your dosing schedule so it can track and remind you. This is sensitive health information and is stored only to provide the app's features.
• Striga. Uses your device camera for pose detection. Camera processing happens on your device; we do not upload or store the camera video.
• ELO AI. Works with photos you provide. Photos you upload are stored and may be sent to our AI providers to generate results.

Across all apps, we use the shared account (Amazon Cognito), subscription (RevenueCat), and analytics (PostHog) services described above.

Data retention

We keep your information for as long as your account is active or as needed to provide the service. When you delete your account, we delete or de-identify the personal data associated with it within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Data already shared with a third-party service you connected remains subject to that service's own retention practices.

Security

We take reasonable measures to protect your information, including encrypting stored access credentials for connected accounts and restricting access to your data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You can disconnect any connected account at any time, and you can request access to, correction of, or deletion of your personal data. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To make a request, contact us using the email below and we will respond as required by applicable law.

Children

The Tongue apps are not intended for children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above, and significant changes will be reflected here.

If you have questions about this policy or want to make a privacy request, contact chad@trytongue.com.