tovelyBack to Tovely ↗

Privacy policy

Version 1.0 · Review draft · Updated 13 October 2026

For review before publicationThis draft records the approved privacy choices. The release experience still needs to match them, including age eligibility, AI permission, email notices and complete account deletion.

Who we are

Tovely is operated by Corefold Labs LLC, registered in California, United States. For support or privacy requests, contact support@corefoldlabs.com.

Information we collect

How we use it

We use information to operate your account, sync your kitchen, interpret foods and preferences, generate meals and images, save your history, support shared kitchens, verify purchases, apply usage limits, investigate problems and respond to support or privacy requests.

Corefold Labs LLC does not currently sell personal information, share it for targeted advertising, or use users’ photos, prompts or recipes to train its own models.

We may introduce new features and update how information is used as Tovely develops. We will describe material changes in an updated policy and obtain additional permission where required by applicable law or platform rules.

Service providers

We use service providers to support account access, data storage and syncing, AI meal features, purchases, optional diagnostics and customer support.

These providers may process information needed to deliver those services, such as account details, kitchen photos, food descriptions, voice transcripts, meal preferences and service records. Meal preferences may include allergy information.

Providers may process information outside your country and retain it under their applicable policies. We do not send account passwords or payment-card details with AI meal requests.

Shared kitchens and meals

Joining a shared kitchen lets its current members see shared foods, kitchen photos, shopping items, meal plans, votes, diner names and assignments. Your private meal history and saved food styles are not automatically published.

Before your first community post, you choose a public nickname, which is saved in your Profile for future posts. Other signed-in Tovely users can see that nickname, the meal photo, recipe, servings, estimated calories and like count. Your private kitchen is not automatically published. Posts remain linked to your account within Tovely; a nickname does not make them anonymous to the service. Changing your nickname applies to future posts; existing posts keep the name used when shared.

You choose what to send through the iPhone share sheet. Recipients and their apps may keep copies under their own practices; we cannot erase copies already sent outside Tovely.

Your choices

You can review recognized foods before saving, edit your kitchen and preferences, remove kitchen photos, leave a shared kitchen, and manage camera, photo, microphone, speech and notification permissions in iPhone Settings.

Optional usage and crash reporting is off until you enable it in Profile → Privacy. Turning it off does not stop the account, purchase and request records necessary to provide the service.

The approved launch design requires permission for the AI processing needed by Tovely’s core service. Declining or withdrawing that permission would prevent use of the core app. The final permission and withdrawal flow still needs implementation and review; it must preserve access to privacy information, support and account deletion. Optional diagnostics, advertising or training permission must remain separate.

Kitchen reminders stay on your iPhone. The home widget receives the food count and kitchen update time.

Retention and account deletion

We retain account-linked AI request history, including saved request text and transcribed words included in requests, until you delete your account. This is separate from raw microphone audio, which this voice flow does not save.

You can initiate account deletion in Profile → Delete account after confirming your identity. The approved deletion requirement is to remove user-uploaded images and personally identifying information, including relevant copies and identifiers in shared records. Complete coverage still needs backend changes and live verification, so this draft does not claim it is already complete.

Information independently retained by Apple or other providers, and copies you sent to other people, are handled under their own practices. Deleting your account does not cancel an App Store subscription.

Privacy requests

Email support@corefoldlabs.com, or use Profile → Privacy → Privacy requests in the app, to request access, correction or deletion of your information, or a copy of it. In-app requests receive a reference number and a status you can check. A request for help with deletion does not itself delete your account; use Profile → Delete account to initiate account deletion. We may need to confirm your identity before completing a request.

Depending on where you live, you may have additional rights to object to certain uses, withdraw consent or contact a data-protection authority. Access controls restrict private records to your account and shared-kitchen records to current members. No internet service can guarantee absolute security.

Age eligibility

Tovely is intended for people aged 16 and older. People under 16 should not create an account or submit personal information. If you believe someone under 16 has provided personal information through Tovely, contact support@corefoldlabs.com so we can investigate and handle it appropriately.

The release’s age-checking experience and App Store rating still need to be aligned with this requirement.

Changes

The approved method for notifying users of material privacy changes is email. The delivery process and final effective date must be verified before publication. Updated policies will identify their effective date; this review draft is not an effective published policy.