Privacy Policy

Last updated 14 October 2026

The short version: TotaLive keeps your food diary and the details you choose to add so the app can work for you. We don't sell your data, we don't show ads, and we don't use tracking or analytics tools. You can delete your account and everything in it at any time from inside the app.

Who we are

TotaLive is run by Yong An Chia, an individual developer based in Singapore ("we", "us"). We are responsible for your personal data under Singapore's Personal Data Protection Act 2012 (PDPA) and, for users in the European Union and United Kingdom, the General Data Protection Regulation (GDPR). You can reach us at [email protected].

What we collect

• Account details: your name, email address and password. Your password is stored only in scrambled (hashed) form, so we can never read it.
• What you log: food diary entries, meals, foods you create, and your calorie and macronutrient goals.
• Profile details: your sex, age, height and weight, which you give once when you set up your account. We use them to suggest goals and to keep calorie targets above a safe minimum.
• Health and fitness details you choose to add: body weight, body fat, steps, sleep, water intake and written goals. Nothing is collected automatically from your phone's health apps.
• Coaching details: if you connect with a coach, the link between your accounts, requests and notes your coach leaves on your diary, and private reminders and preferences your coach keeps about you.
• App settings: choices such as theme, the order of cards on your Home screen and which figures you follow.
• Barcodes: when you scan a product, the barcode number is looked up in our database and, if needed, in the Open Food Facts database. The camera image itself never leaves your phone.

We don't collect your location, contacts, photos or advertising identifiers.

How we use it

• To run your account and show your diary, goals and progress.
• To let a coach you have connected with see and help with your diary.
• To send emails you need, such as confirming your address or resetting your password.
• To keep the service secure and fix problems.

For users covered by the GDPR, we rely on our contract with you (to provide the app you signed up for) and your explicit consent for health details you choose to enter. You can withdraw that consent at any time by deleting the details or your account.

Who can see your data

• You.
• Your coach, only if you connect with one using their coach code. A coach can see and edit your diary, goals and the health details above. You can disconnect at any time, and they lose access straight away.
• Us, only when needed to run the service, answer a support request or keep the app secure.

We use these service providers to run TotaLive. They process data only on our instructions:

• Supabase: stores the app's database and handles sign-in, hosted in Singapore.
• Cloudflare: hosts this website.
• Open Food Facts: receives barcode numbers for products we don't already have. No account details are sent.
• Apple and Google: deliver the app through their stores under their own privacy policies.

We will only share data otherwise if the law requires it.

How long we keep it

We keep your data for as long as you have an account. When you delete your account, your profile, diary, health details, coach connection and everything linked to them are permanently deleted straight away. Backup copies are overwritten within 30 days.

Your rights

You can see, correct and delete your data in the app at any time. You can also ask us for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing [email protected]. We'll reply within 30 days. If you're in the EU or UK, you can also complain to your local data protection authority.

Deleting your account

In the app, open the menu under your name, choose Account, then Delete account. If you can't sign in, see how to request deletion.

Children

TotaLive is for people aged 13 and over. If you're under 18, please use it with a parent or guardian's permission. If we learn that someone under 13 has an account, we will delete it.

Security

Data travels over encrypted connections, sign-in sessions on your phone are kept in secure storage, and database rules make sure each person can only reach their own data or that of clients connected to them. No system is perfectly secure, so please use a password you don't use anywhere else.

International transfers

Your data is stored in Singapore. If you use TotaLive from elsewhere, your data is transferred there, and we protect it to the standard this policy describes.

Changes to this policy

If we make important changes, we'll tell you in the app before they take effect. The date at the top shows when this policy last changed.