This policy covers the TallPath app for iPhone and Android and the website tallpath.app. TallPath is made by Redoubt ApS, Denmark ("we"), which is the data controller. Questions: contact@redoubt.dk.
The short version
- No account, name or email is needed. The app signs you in anonymously.
- We store your quiz answers, measurements, prediction, plan, habit check-ins and coach chats so the app keeps your progress.
- No ads, no advertising identifiers, no tracking across other apps, and we never sell your data.
- Email us and we delete everything within 30 days.
1. What the app collects
Quiz answers and measurements
Sex, birth year and month, height, weight, mother's and father's heights, growth-spurt stage, and answers about sleep, nutrition, activity, posture and your goal. Later height logs are added as you enter them. We use these to calculate your prediction, build your daily plan and update both over time.
Prediction, plan and habits
Your predicted range and the inputs it was calculated from, your daily plan, and which habits you checked off on which days.
AI coach conversations
The messages you send the coach and its replies. To answer, the coach is given your recent conversation plus your quiz answers and latest prediction, so its advice fits you. Don't share anything in the chat you don't want stored.
Usage analytics
Which screens you view and what you tap (for example quiz steps, paywall views, purchases, habit check-ins), your app version, platform, operating system version and language. Analytics events are linked to your anonymous user ID. Your analytics profile also holds your sex, age, height, weight, quiz answers and predicted range, so we can see which kinds of users the app helps. It never holds your parents' heights or coach messages. On Android we also record where the install came from, read from the Google Play install referrer (for example our website or a shared link), and, if the paywall fails to load, the raw referrer to diagnose the failure.
Purchases
Payments are handled by Apple or Google; we never receive card details. Our purchase provider receives your purchase history (products and their status) with your anonymous user ID. On iPhone it also receives Apple's Search Ads attribution token, which tells us whether an install came from an Apple Search Ads campaign. It contains no advertising identifier.
Crash reports
Technical error reports (device model, OS version, the error and the steps leading to it) so we can fix bugs. They don't include your quiz answers or name.
What we don't collect
No name, email, phone number, contacts, photos, precise location, advertising identifier (IDFA or Android advertising ID) or push token. Reminders are scheduled on your device.
2. Who processes it
| Service | What for | What it receives |
|---|---|---|
| Supabase (database, EU: Ireland) | Storing your data and running the coach | Everything in section 1 except analytics and crash reports |
| Anthropic (Claude API) | Generating coach replies | Your recent coach messages, quiz answers and prediction, when you use the coach |
| Mixpanel (EU data residency) | Product analytics | Usage events and the analytics profile described above, plus your IP address, from which Mixpanel derives an approximate location |
| RevenueCat | Managing subscriptions | Purchase history, anonymous user ID, Apple Search Ads attribution token |
| Sentry | Crash and error reports | Technical error data |
| Apple / Google | Payments, app distribution, app updates | As set out in their own privacy policies |
| Vercel | Hosting tallpath.app | Standard server logs (IP address, browser) |
Some of these providers are based in the United States and may process data there. Where data leaves the EU, it is covered by the transfer safeguards in each provider's data processing terms, such as the EU Standard Contractual Clauses. Anthropic does not use data sent through its API to train its models.
3. Why we may use it (legal basis)
- To provide the app you asked for (prediction, plan, progress, coach, purchases): performance of our agreement with you.
- Analytics and crash reports, to improve the app and fix bugs: our legitimate interest.
- Height, weight and growth information can be health data. We process it only to provide the features you use, on the basis of your explicit consent, which you give by entering it. You can withdraw consent at any time by asking us to delete your data.
4. Children and teenagers
TallPath is made for teenagers and for parents tracking a child's growth. We collect only what the prediction and plan need, show no ads and never sell data. If you are under the age at which you can consent to online services in your country (13 to 16 in the EU, 13 in the US), use TallPath with a parent or guardian. If you are a parent and believe your child used TallPath without your permission, email us and we will delete their data.
5. How long we keep it
Your app data is kept while you use TallPath and deleted on request. Analytics data is kept as long as it is useful for improving the app. Crash reports are deleted automatically by Sentry after its retention period.
6. Your rights and deleting your data
You can ask us to access, correct, delete or export your data, or object to or restrict its use. Because TallPath has no login, tell us roughly when you installed the app and which device you use, so we can find your data. Email contact@redoubt.dk and we will act on it within 30 days. Deleting the app removes the data on your phone but not what is stored on our servers, and does not cancel a subscription.
If you're in the EU or EEA, you can also complain to your data protection authority. In Denmark that is Datatilsynet (datatilsynet.dk).
7. The website (tallpath.app)
The calculators run in your browser: the heights and weight you type are never sent to us. When you get a result we record that a calculation happened, with the sex, age and units you chose, but no measurements. We also count page views and taps on the App Store and Google Play buttons. Analytics use Mixpanel (EU), routed through our own domain, and store a random identifier in your browser's local storage. If you tap the Google Play button, that identifier is passed to Google Play with the install, so we can tell that an Android install came from the website. The site also remembers your unit choice (feet or cm) in local storage. If your browser sends a "Do Not Track" signal, no analytics are sent. There are no advertising cookies.
8. Security
Data travels over encrypted connections. Database access is restricted so each anonymous user can only read their own records. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
9. Changes
If this policy changes, we update the date at the top of this page.
10. Contact
Redoubt ApS, Denmark · contact@redoubt.dk · Support