Useful support without false medical authority.

Taby is a self-guided health, awareness, and behavior-support product. By creating an account or using the service, the user agrees to use it lawfully, provide reasonably accurate account information, and keep credentials secure.

Users may not impersonate another person, circumvent safety controls, interfere with billing verification, or misuse support channels or private data.

Some features are age-restricted, jurisdiction-restricted, or not yet live. Taby may suspend or limit access where product safety, platform rules, or legal compliance require it.

TABY App is operated by Gragi Technology Limited, with certain technical support activities provided in partnership with Gipro Nigeria Limited.

Taby collects data when a user creates an account, enters or imports information, uses a tracker, sends a Taby Bot message, chooses an attachment, changes a setting, makes or restores a purchase, or requests support, export, or deletion. Taby stores account identifiers and settings, female cycle state, male vitality logs, mental entries, discipline logs, saved chat text and attachment metadata, export/deletion requests, and verified billing metadata when those features are used.

This data is used to provide requested features, protect and restore accounts, sync cross-device state, generate user-facing insights, operate Taby Bot after permission, respond to support, enforce verified billing entitlements, and honor export and deletion rights.

Taby requests device permissions only for live feature operation: camera and photo access support user-selected Taby AI attachments; microphone and speech access support optional transcription; notifications support reminders and account/service messages; Google Play Billing supports verified subscriptions; biometric or fingerprint access supports local device unlock; and network access supports secure sync, sign-in, notifications, billing verification, and normal operation. This release does not request HealthKit, Health Connect, NFC, or partner-link permissions.

Before any personal data is sent to a third-party AI provider, Taby asks for separate, explicit permission. If the user allows it and sends a Taby Bot request, Taby sends the authenticated account reference, message, recent chat history, profile or response preferences, relevant health and tracker context (which can include cycle dates, symptoms, mood, stress, sleep, vitality, or discipline data), and any user-selected image plus its name, media type, and size through Taby's authenticated backend to OpenAI, LLC. The sole purpose is to interpret the request and generate the response the user requested.

Taby sends OpenAI API requests with response storage disabled and does not opt API inputs or outputs into model training. OpenAI states that API data is not used to train its models by default and that API content may be kept in abuse-monitoring logs for up to 30 days unless longer retention is legally required. Taby requires OpenAI and every processor that receives user data to apply the same or equivalent privacy, confidentiality, access-control, and security protection described in this policy and required by applicable law.

Saved chat text is account-backed. Image bytes are used for the requested response and are not written into the saved Taby conversation; attachment name, media type, and size may remain with the saved message. Users can refuse AI sharing and continue using core trackers. They can stop all future OpenAI transfers in Profile → Privacy & Data → Taby Bot — OpenAI Data Sharing. Account deletion removes Taby-held conversations and other account data; provider security logs expire under the provider retention rules described above.

Android cloud backup and device-to-device transfer are disabled for Taby app-private files, databases, and preferences. Signed-in account restoration comes from Taby's authenticated backend.

Taby does not sell health-related user data to advertisers or data brokers. Device-only state such as biometrics, app PIN configuration, and OS permission state remains device-bound unless the app explicitly labels it as export metadata.

Taby may rely on Apple, Google, Firebase, Supabase, OpenAI, Resend, store billing providers, and other operational vendors for authentication, storage, AI responses, notifications, email, billing verification, and app-platform functions.

Third-party SDKs, icons, fonts, media, and libraries must be used only under their applicable licenses. Their presence does not mean that a provider sponsors, endorses, or clinically validates Taby.

Provider processing is limited to the service being requested. Taby does not provide cycle entries, mental-health logs, AI conversations, symptoms, or account insights to advertising providers for behavioral targeting.

Taby does not diagnose, treat, cure, monitor, or prevent disease. Cycle, fertility, vitality, discipline, stress, and burnout insights are informational support only.

Taby does not confirm pregnancy, ovulation, infertility, hormonal disorders, testosterone status, addiction diagnosis, depression, anxiety disorders, or emergency medical conditions.

Users should seek licensed professional care for self-harm risk, suicidal thinking, severe distress, heavy bleeding, pregnancy concerns, chest pain, breathing difficulty, neurological symptoms, or any worsening physical or mental health concern.

Users under 13 are not permitted to create or use a Taby account.

Users aged 13 through 17 may use the free solo self-management features. They may not start new paid premium purchases inside the app.

Users aged 18 and older may start premium purchases when they are live and lawfully available. Couples mode, partner linking, specialists, telehealth, and wearables are not included in this release.

Taby does not currently provide guardian-managed minor accounts, silent parent monitoring, or a parent dashboard.

If local law requires parent or guardian permission for a teen to use a digital service of this kind, that consent must already exist before the teen continues. Taby records the user’s confirmation of that requirement.

Because guardian-managed verification is not live, under-18 accounts are limited to free solo features and cannot start new premium purchases.

Private feature data is private by default. Couples mode and partner linking are not enabled in this release; any future sharing experience will require a separate explicit action.

HealthKit and Health Connect are not enabled in this release. Notifications, advertising privacy choices, marketing contact, and any future device-health or telehealth access each require their own applicable user action.

Consent to one category does not create blanket consent for another category.

Taby Bot sharing with OpenAI requires its own explicit permission after Taby names the provider, lists the data that may be sent, and explains the purpose. Refusing or revoking this permission does not block core tracking. Revocation stops future OpenAI transfers and Taby asks again before any later transfer.

Account-backed feature data is retained until the user deletes the account or removes the underlying feature data. Any legacy relationship-scoped records are removed through relationship or account deletion.

Temporary export artifacts are removed on expiry or account deletion. Export and deletion request rows are retained only as minimized operational metadata after deletion, with account identifiers anonymized.

Provider-managed encrypted backups may remain for the provider retention window, but deleted user data is not restored into active production tables except through controlled disaster recovery procedures.

Operational diagnostics do not retain account email. Identifying fields are kept for no more than 30 days and then anonymized; all operational diagnostic events are deleted after 90 days.

A signed-in user can request a structured export of the data they own, including profile/settings, female, male, mental, discipline, lifecycle, trial, billing, and still-linked operational diagnostic metadata, plus any legacy relationship or device-health metadata if present.

A signed-in user can request immediate deletion by confirming identity in-app. Deletion removes owned data, any linked legacy rows, export artifacts, and the authenticated account, clears device-bound state on the requesting device, and anonymizes operational diagnostics still linked to the account.

Users who cannot access the app can request account deletion from the public deletion page at https://www.officialtabyapp.com/delete-account.

Clipboard copying is not the production export path. Taby uses authenticated backend lifecycle pipelines.

Taby does not sell health data, discipline logs, AI conversations, symptoms, or account insights for advertising. Marketing contact stays separate from essential service messages and remains revocable.

When advertising is enabled for a supported release, adult Free users may see limited, clearly labeled, non-personalized ads on non-sensitive dashboard, summary, library, and educational surfaces. They may also choose a rewarded ad for a clearly stated one-time feature action. Cycle, vitality, mental-health, discipline, AI, symptom, crisis, addiction-support, and emergency-adjacent data is never sent for ad targeting, and ads are excluded from logging forms, AI conversations, crisis, and urgent flows.

Pro subscribers and users in an active 14-day no-card Pro trial do not see ads. Applicable consent and advertising privacy choices remain available in the app.

Operational billing, security, and account-lifecycle messages may still be sent where needed to provide the service or comply with law.

Every new Taby account receives one backend-owned 14-day Pro welcome trial automatically when the account is created. It requires no payment method, is not a store purchase, does not renew, never creates an automatic charge, and returns the account to Free at expiry while existing records remain accessible.

Outside the no-card trial, a user cannot appear Pro unless a purchase was verified server-side. Local toggles or cached preference state do not create premium access.

The separate no-card Taby trial is not an App Store or Google Play introductory offer. A paid store subscription includes no additional free trial, starts immediately after confirmation, charges the user's store account immediately, and auto-renews monthly until cancelled. On iOS, digital premium uses App Store auto-renewable subscriptions. On Android, digital premium uses Google Play subscriptions. Web or external checkout uses Stripe where permitted.

Restore Purchases is available from Subscription & Billing. After an App Store subscription is verified, the same page provides Apple's subscription-management path for viewing or cancelling renewal. Under-18 accounts cannot start new premium purchases inside the app.

Any telehealth language in Taby is pre-disclosure only and does not mean a licensed clinician, live consultation, or clinical records workflow is active today.

Before telehealth can launch, Taby must separately define supported jurisdictions, provider licensure, informed consent flow, records retention, media-security controls, payment workflow, and emergency escalation boundaries.

Even if telehealth launches later, it will remain unavailable to under-18 accounts until a compliant youth model exists.