The data controller is Bartosz Jagła. Data contact: kontakt@tharan.tech.
Health data is processed on separate, explicit consent collected before enabling the diary and sync (GDPR Art. 6(1)(a) and 9(2)(a)), to record data and show your statistics. Signing in with Apple or accepting terms does not grant health-data consent. We record your decision, its date and the consent-text version. You can withdraw it in Settings → Data consents. Before confirming, you see an erasure warning and can export JSON or a full archive with photos. Withdrawal erases health data from the active account, disconnects providers and stops imports and reminders. Your login account remains; consenting again starts an empty diary. Apple Health originals and copies you exported are not deleted. Apple Health access can also be revoked in iPhone settings.
Account data is processed to perform the service contract (GDPR Art. 6(1)(b)). Marketing messages require separate, optional consent. Feature-use statistics and diagnostics support maintenance, improvements and security (legitimate interest, Art. 6(1)(f)); you may object using our contact email. Events are linked to your account ID and contain action names and counts, not photos, medication names, meal descriptions or lab values. Visits to the tharan.tech information pages (home page, help, installation guide and feedback page, also when opened from the app) are counted with Umami on our own server, without cookies, without storing IP addresses and without identifying who the visitor is. App screens are not counted by this tool.
Before each transfer to Anthropic, the app asks for separate confirmation describing the data and purpose. Declining sends nothing. Labels and lab scans can use local OCR; meals can be entered manually. Manually requesting meal-text recognition sends the selected descriptions to Anthropic to estimate foods and nutrition, after confirmation. Typing alone does not send your text.
When you ask us to read a product label or a lab report from a photo or PDF, the image is sent to a language model provider (Anthropic) purely to transcribe its text. The image is not used to train models. You can avoid this entirely: the app can read images locally in your browser.
Meal recognition works the same way. A photo of your plate is sent to Anthropic only to work out what is on it and to estimate portion sizes. We do not store it on our servers, we do not attach it to your diary entry and we do not write it to any log: only the result, as names and numbers, stays in the app. Photos are not used to train models. You use this feature when you choose a photo yourself; you can always add food by barcode or by typing its name instead.
If you connect the app to Health on iPhone, we read only what you allow in the system: sleep, heart rate, HRV, blood oxygen, steps, walking and running distance, weight, body fat percentage, VO₂max and blood pressure. This data is used solely to show you your statistics and insights. It never goes to advertising, is never sold and is never shared with third parties beyond the hosting described below. You can revoke the connection at any time in iPhone settings.
If you choose to connect a Fitbit, Withings, Oura or Polar account, we read your data from that account (activity, sleep, heart rate, weight, blood pressure, depending on the provider) and store it on your THARAN account; the provider learns that you connected THARAN. You can disconnect at any time in Settings; data already imported stays as your history and can be deleted separately.
Anthropic also receives meal descriptions when you request text recognition and confirm the transfer. Commercial API data is not used for model training by default. The provider may retain inputs and outputs for a standard period of up to 30 days, with safety and legal exceptions; we do not claim a zero-retention agreement. See Anthropic retention. Do not include other people’s data or unnecessary identifiers in submitted material.
We do not sell data and do not pass it to advertisers or data brokers.
Health data is kept until you withdraw consent or delete your account. Confirmed withdrawal erases diary entries, results, photos, medication, goals, health profile and saved provider connections. Login data remains until account deletion. Backups expire within 30 days of erasure and must not be used to restore erased history. We retain a minimal decision and erasure record (account identifier, date and version), without health measurements, to document the request and prevent restoration from an old backup. An offline device may retain a local draft until it reconnects, but cannot save it back to the server.
You have the right of access, rectification, erasure, restriction, portability, and to withdraw consent at any time. Withdrawal does not affect processing before it. You may lodge a complaint with your data protection authority.
Traffic is encrypted, passwords are stored as PBKDF2 hashes, sessions are signed. Each account's data lives in its own directory.
The service is not intended for anyone under 16.
For anything about your personal data write to kontakt@tharan.tech. We reply within 30 days.
Back to the app