Privacy
Your data, plainly.
Effective 2026-09-27 — this update spells out what goes with each message, and names Apple Health, voice input, subscriptions and the feedback you can choose to send; how your data is handled has not changed
The short version: your food logs, weight, goals, and conversations live on your phone — not on our servers, unless you choose to send us feedback on one of Graham's replies. There's no account. We don't sell data, run ads, or let anyone train AI models on what you tell Graham. What does leave your phone is listed below.
Graham is made and operated by Troxlabs LLC — that's who "we" means on this page.
What stays on your phone
Everything Graham knows about you is stored in a database on your device: the foods you've taught him, every logged meal, your weight readings, your goals, and your conversation history. It's included in your phone's normal backup, so it moves with you to a new phone.
Apple Health, if you connect it. Graham can read your steps, active energy, and weight from Apple Health, and save the weigh-ins you tell him back to it. You choose each of those in the app's settings, and you can turn them off in the Health app at any time. What he reads is kept on your phone like everything else. It leaves only as part of what goes with a message, described below, or inside a conversation you choose to send us as feedback. Health data is never used for advertising and never sold.
What leaves your phone
- Your messages to Graham. To generate his replies, each message is sent to our server and passed to an AI model provider, along with the rest of today's conversation and the context he needs to answer well. That context is the kind of thing a coach would have in front of them: the name you asked him to call you, your goals and targets, today's log, your recent days, the foods you've taught him and your saved meals, your weight trend and latest weigh-in, and, if you've connected Apple Health, today's step count and how today's activity compares with your usual. We use providers under commercial terms that do not permit training on your data. Apart from feedback you choose to send (below), our server doesn't keep the content of what it passes along.
- Food lookups. When Graham searches for a food, the search text goes to public nutrition databases (like USDA FoodData Central) through our server, so their access keys never live on your phone.
- Voice input. When you talk to Graham instead of typing, your phone's own speech recognition turns it into text, helped by a list of the food names you use so it hears them right. Where your phone can transcribe on the device, the audio and that list stay there; where it can't, both go to Apple's speech service, under Apple's privacy policy. The audio never reaches us — only the text you then send.
- Your subscription. Payment goes through Apple, and we never see your payment details. To know whether your subscription is active, the app uses RevenueCat, which receives your random device identifier and the purchase record Apple provides (which plan, its dates, whether it renews) and keeps them to manage the subscription. Nothing about your food, weight, or conversations goes to it.
What we keep on our servers
- Request records. For each request our server handles, we keep a random device identifier, a timestamp, and usage counts (like message size in tokens). We use this to prevent abuse and understand costs. These records hold no content and aren't linked to your name or email.
- Feedback you send us. If you tap thumbs up or down on one of Graham's replies, the app sends us that reply with the few messages before it, what Graham did to answer (the foods he looked up and logged), the entries logged in that stretch, any note you add, and the app's version. We keep it to understand what Graham got right or wrong and to make him better, and only we can read it. It's tied to your random device identifier, not to an account. Ask and we'll delete it.
- Your waitlist email, if you joined the waitlist on this site, with the time you joined and, if the link you arrived by carried one, a short code saying which week's post brought you. It's used to tell you about access to Graham and to see which posts bring people, and nothing else. Ask and we'll delete it.
Crash reports and usage counts
The app sends crash reports and basic usage events — things like "a meal was logged" — so we can find and fix bugs, and see whether the app is actually working for the people using it. These never include the content of your conversations or your logs.
This website
Everything above is about the app. This site — tellgraham.com — uses Cloudflare Web Analytics to count page views: which pages people visit, roughly where they came from, and how quickly pages load. It's cookieless, so this site sets no cookies and stores nothing in your browser. It isn't connected to your waitlist email, and it has no connection at all to what you tell Graham in the app.
Our own YouTube channel
We post short clips to Graham's YouTube channel, @tellgraham_app, using an internal tool we built. That tool uses YouTube API Services to upload those clips and to read how they perform — views, likes, comments, shares, watch time — for our channel only. It reads nothing about you: no viewer is identified to us. What it keeps is about our own account and our own videos — the sign-in that lets it post, stored encrypted, the channel's name and id, and the figures and the responses YouTube returns for each clip. All of that sits on our servers (Cloudflare, in the United States) for as long as we run the channel, and is used to decide what to post next. By using YouTube you are also covered by Google's privacy policy. The one Google account connected to the tool is ours, and we can disconnect it at any time from the Google security settings page. If you ever have a question about a clip on that channel, the address at the bottom of this page reaches the people who posted it.
What we never do
- Sell or share your data with advertisers or data brokers.
- Show ads.
- Allow your conversations to be used to train AI models.
- Ask for data the product doesn't need.
Your choices
- Delete the app and its data on your device is gone with it.
- Ask Graham to delete something — an entry, a food, a day — and it's deleted.
- Want a copy of your data, or off the waitlist? Email us and we'll take care of it.
One honest caveat
Graham helps you track what you eat. He is not a doctor, a dietitian, or medical advice — for eating-disorder recovery or medical nutrition needs, please work with a professional.
Changes and contact
If how Graham handles data changes, this page changes first, with a new effective date. Questions or requests: support@tellgraham.com.