Privacy policy
How Trimm looks after your data
Trimm is a calm iPhone app that takes some of the thinking out of everyday life, for you and the small groups you share it with, such as your family or household: meals, health, groceries and the people close to you. This policy says what Trimm keeps, why, who else handles it, and how to take it back. It describes Trimm as it works today.
Effective 12 October 2026. Trimm is run by Tyler Elton, an individual ("we"), who is the controller of your data. Questions: privacy@trimm.uk.
The short version
- Trimm keeps what you tell it so it can count, plan and remind for you. We never sell it and never use it for advertising.
- Trimm's database is in Google Cloud in London. Some fields are encrypted with a key that belongs to you or your group; the rest is protected by Google's standard storage encryption. Trimm is not end-to-end encrypted: our servers read your data to do the sums.
- Trimm has no built-in assistant and sends nothing to AI providers itself.
- Agents you connect, such as Claude or ChatGPT, see what you ask them about. You can disconnect them at any time.
- You can delete your account in the app. That removes everything you have logged.
What Trimm collects
| What | Examples | Why |
|---|---|---|
| Account | The ID your sign-in provider gives Trimm, which providers you use, your name and profile photo from that provider, and when you agreed to the health data consent below | To know it is you, to show your name to people you connect with, and to record your consent |
| What you log | Foods and amounts you log, meals you skip, exercise, weights, 5-a-day, alcohol units, water (if an agent records it for you), day notes | Your day, daily totals and trends |
| Profile | Your target weight, the only number Trimm asks for, and your food period (how many days, from one to seven, Trimm balances your calories and macros across) | To know which way your weight should go. Your daily allowance is learned from what you log and your weight trend |
| Food preferences | Diet, allergies, dislikes | To keep meal plans, recipes and shopping safe for you and your household |
| Foods you add | Custom foods, portions, favourites, saved meals, recipes | So you can log them again. They stay private to you (or your group) |
| People | Who you are connected with, your circle link and requests to join it, what each of you shares, reactions, short notes, shared meals, and whether someone may log for you | The family and friends features you choose to use |
| Groups | Each group's name, members and their roles, what it covers and what each member agreed to share and when, its messages, meal groups, meal plans and each member's portion, likes and dislikes of planned meals (with an optional note), and whether planned meals are logged for you | Planning meals and shopping together |
| Groceries | Your shops, shopping rules and budget, staples, what is in your cupboards (with pack sizes and barcodes), shopping lists and who asked for each item, what was ticked off in the shop and by whom, with the barcode, pack and price paid if given, and products your agent saved for a list (shop, description, and a link, price or barcode where it gave one) | Shopping lists, baskets and stock. While you shop, the app keeps the list and the products it is likely to scan on your phone, so scanning works with poor signal |
| Tasks | Work you hand to an agent, such as a shopping list or a week's meal plan: its title and brief, what the agent submitted (dishes, portions, products, prices and how it met each person's allergies, diet and dislikes), your review and a short note, and a history of each step | So an agent's work waits for your approval before anything changes |
| Apple Health | Weight, body fat, daily step totals, workouts and how hard they felt, and daily minutes of activity in four zones worked out on your phone from your heart rate, if you allow it | Your weight trend and activity (see below) |
| Connections | Devices you sign in on (the kind of device, such as "iPhone"), agents you connected, when, what each may do and its limits, Trimm's own count of each agent's calls, and what an agent says about its own usage (tokens, models and purpose) | So each one works, and so you can see, limit, sign out or disconnect them |
| Home | What Home last showed you, kept for two minutes | So Home opens quickly |
Trimm does not store your email address; your sign-in provider and Google Identity Platform hold it. Trimm does not store IP addresses. Trimm's own logs hold none of what you log: a request log has only the type of request, whether it worked and how long it took. Food searches travel inside requests, not in web addresses, and Trimm is set up to keep web addresses out of stored logs anyway: Cloudflare keeps no per-request log for Trimm's addresses and removes the part of an address after the "?" from anything else it logs, and Google Cloud's own request log, which would store full addresses, is excluded.
To stop misuse, Trimm limits how much each person and each address can do. Cloudflare counts recent requests from each IP address for Trimm, inside Cloudflare, and turns away an address that sends too many. To slow down attacks on sign-in and on connecting agents, Trimm counts recent attempts against a keyed hash of your IP address that changes every day, so a count cannot be tied back to your address; those counts are deleted after a day. Trimm also counts your own requests in the current minute and the changes you make each day, which hold nothing else.
Trimm has no analytics, no advertising and no tracking cookies. The sign-in pages keep what they need for the sign-in itself in your browser's session storage and in short-lived cookies that only work on Trimm's own address.
Your consent to health data
Much of what you tell Trimm is health data, which UK law treats as special category data, so Trimm keeps it only with your explicit consent. Straight after you first sign in, and again whenever its words change, the iPhone app shows the screen below (consent version 3). Until you choose I agree, Trimm saves no health data for you, and Not now signs you out.
Trimm helps you and the people close to you with everyday life, and much of what you tell it, from meals to weight, is health data. Trimm needs your explicit consent before it keeps any.
What Trimm keeps
What you eat and drink, your weight and body fat, exercise, water, 5-a-day, alcohol and day notes, your target weight, your allergies and dislikes, and the Apple Health readings you allow: steps, workouts and how hard they felt, and heart rate, which your iPhone turns into daily minutes of activity in four zones before anything leaves it.
Why
Only to run Trimm for you: what you log, daily targets and trends, and meal plans and shopping that are safe for you. Never for advertising, and never sold.
Who processes it
Google Cloud stores it in London. On Trimm Plus, a meal or label photo you choose to send goes to an AI provider through OpenRouter to be read, which keeps none of it. People and agents you connect see only what you choose to share.
You can withdraw consent at any time in You. Trimm then stops saving health data, and offers to delete what it holds. Not now signs you out.
If the words on that screen change, the version goes up and the app asks you again. Only you can agree, in the Trimm iPhone app: agents you connect, such as Claude, cannot agree for you. To withdraw, open You in the iPhone app and choose Withdraw consent. Trimm stops saving health data straight away, and offers to delete your account and everything it holds. Nothing is deleted unless you choose that.
Signing in
You sign in with Apple or Google through Google Cloud Identity Platform. Trimm never sees or stores a password. Identity Platform receives your email address, name and profile photo from the provider you choose, and Trimm receives a signed confirmation of who you are. Trimm has its own Identity Platform user pool, used by nothing else.
Open Food Facts
To find packaged foods, Trimm's servers send barcodes and food search words to Open Food Facts, a free, open food database. These lookups come from Trimm, not your device, and carry nothing that identifies you. Products found are kept in Trimm's shared food list, which holds no personal data.
Apple Health
Trimm reads from Apple Health only what you allow in the iPhone app: weight, body fat, workouts (their type, time, duration, distance, how hard they felt and the app that recorded them, such as WHOOP or Apple Watch), steps, and heart rate. Steps reach Trimm only as a total for each day. Your heart rate never leaves your phone: the app turns it into how many minutes each day you spent in four activity zones (Light, Moderate, Hard and Peak), and only those minutes reach Trimm. Trimm reads no calorie burn. If you allow it, Trimm writes back the food you log (calories and nutrients), water, and exercise you log by hand as workouts with how hard they felt. You can change this at any time in the Health app or in Trimm under You, then Integrations.
- Health data is used only to run Trimm for you: your weight trend, the allowance Trimm learns from it, and showing your activity, workouts and steps.
- It is never used for advertising or marketing, never sold, and never given to data brokers or advertising platforms.
- It is shared only where you choose: with people you connect with, at the sharing level you pick, and with agents you connect, when you ask them.
- Connecting Apple Health happens only in the Trimm iPhone app. Claude and other agents cannot connect it.
Agents you connect, such as Claude
You can connect AI agents to Trimm, for example by adding Trimm as a connector in Claude or ChatGPT. You sign in to Trimm and approve the agent first; Trimm shows what it will be able to do and its limits. After that it can read and change your Trimm data for you within that access, and Trimm sends it whatever its requests ask for, so what it does with that data is covered by its own provider's policy (for Claude, Anthropic's privacy policy; for ChatGPT, OpenAI's privacy policy). An agent can also take on tasks you hand it, such as building a shopping list or a week's meal plan; what it submits waits for you to approve it.
To disconnect an agent, remove Trimm from the agent's settings (in Claude: Settings, then Connectors), or open it in the Trimm iPhone app under You, then Integrations, and choose Disconnect. There you can also narrow what it may do in each area (diary, meals, groceries, people) to none, see only, or see and change, and set how many calls it may make and when its access ends (after 90 days unless you choose otherwise). You can connect at most 10 agents at once. Disconnecting stops it straight away. Deleting your account disconnects every agent.
Who else handles your data
| Provider | What for |
|---|---|
| Google Cloud (London, europe-west2) | Runs Trimm's servers and database, holds the encryption keys and backups |
| Google Cloud Identity Platform | Sign-in with Apple or Google |
| Cloudflare | Delivers Trimm's web addresses, limits requests from each IP address, and passes requests securely to Google Cloud |
| Open Food Facts | Barcode and food lookups (no personal data) |
| Apple | Apple Health on your iPhone, and Sign in with Apple if you use it |
Data sent outside the UK
Some of these providers handle data outside the UK. Where they do, UK law requires a safeguard, and these are the ones Trimm relies on:
- Google Cloud. Trimm's servers, database, database backups, encryption keys and erasure records are in London (europe-west2). Server logs and sign-in records are held in Google's global locations, covered by the UK Addendum to the EU Standard Contractual Clauses in Google Cloud's data processing terms, or by UK adequacy regulations where they apply.
- Cloudflare. Requests pass through Cloudflare's data centre nearest to you, which may be outside the UK. Covered by UK adequacy regulations where they apply, otherwise by the UK Addendum to the EU Standard Contractual Clauses in Cloudflare's data processing terms.
- Open Food Facts is in France, which UK adequacy regulations cover. Trimm sends it no personal data.
- Apple. Apple Health data stays on your iPhone and in your Apple account, under Apple's own privacy policy; Trimm does not send your data to Apple. Sign in with Apple is also under Apple's policy.
How it is protected
Everything travels over encrypted connections. In the database, these fields are each encrypted with a key that belongs only to you, or to your group for what belongs to the group: your name and photo, the descriptions on diary entries and exercise, day notes, notes people send you, shared meal offers, your circle link, your allergies and dislikes, recipe steps, group messages, meal group names, notes on planned meals, how an agent said a shopping list or a dish meets people's allergies, diet and dislikes, each task's title, brief, result and review, and what Home last showed you. Those keys are themselves locked by Google Cloud's key service. Everything else, such as which foods you log, amounts, calories, weights, your profile, groceries and dates, is protected by Google Cloud's standard encryption of stored data. Trimm's servers can still read your data while working on a request; that is how they total your day, fit portions and build lists.
How long it is kept
- What you log and everything else above: for as long as you have an account, unless a shorter time is given here.
- Device sign-ins: the 20 most recently used. Signing in on another device signs the oldest out.
- Agents: until you disconnect them or their access ends. What an agent says about its own usage: 400 days. Trimm's own count of an agent's calls covers only the current minute and day.
- Products and prices Trimm remembers from your shops, and barcodes of things you bought: the newest 5,000 of each.
- Invite links: deleted 30 days after they expire.
- What Home last showed you: two minutes.
- Sign-in codes: they work for about a minute and are deleted within an hour after that. Sign-in attempt counts: a day.
- Database backups: 7 days. A backup is taken every day and kept for 7 days, and changes are kept for 7 days so the database can be restored to a point in time. When you delete your account, the keys for your encrypted fields are destroyed, and those fields cannot then be read in any backup. Other data in a backup goes when that backup expires.
- Server logs in Google Cloud: 30 days. Google Cloud's audit logs, which record changes to Trimm's infrastructure and hold none of your data, are kept for 400 days.
- Cloudflare: Trimm keeps no per-request logs there. Cloudflare's request logs are switched off for Trimm's addresses, and the few log lines Trimm writes there itself hold no personal data.
Trimm deletes expired sign-in codes, sign-in attempt counts, invite links, agents' usage reports and Home's saved screens on a schedule, every 15 minutes.
Deleting your data
In the Trimm iPhone app, go to You, then Delete account. This deletes everything you have logged, your profile, foods, meals, weights, Apple Health readings, preferences, groceries, tasks, connections with people, device sign-ins and agent connections at once, and destroys your encryption keys. Messages you sent in a group are deleted too. What you added to a group's meal plan, stock and shopping lists belongs to the group and stays with it, without your name. A group you alone manage passes to its longest-standing member, or is deleted if you are its only member. Foods from Open Food Facts stay in the shared list, as they hold nothing about you.
Deleting your Trimm account does not remove your sign-in record from Google Identity Platform. Email privacy@trimm.uk and we will remove it. Readings Trimm wrote to Apple Health stay in Apple Health until you delete them there.
Children
Trimm is for people aged 13 and over. Everyone in a group, including a child of 13 or over, has their own sign-in. Trimm keeps no profiles for anyone without one.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask for it in a portable format. Where Trimm relies on your consent, you can withdraw it at any time. Email privacy@trimm.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.
Why Trimm is allowed to use your data
| Use | Lawful basis |
|---|---|
| Your account, and the parts of Trimm that hold no health data: foods you add, groceries, tasks, people and groups, and agents you connect | Contract: it is the service you asked for |
| Health data: what you log, weight and body measurements, exercise, profile and goals, allergies and dislikes, and Apple Health | Your explicit consent, given on the consent screen above. You can withdraw it in the iPhone app under You, then Withdraw consent |
| Security logs, request limits and sign-in attempt counts | Legitimate interests: keeping Trimm and your account secure |
| Sharing with people in your circle and groups | Your consent, given each time you choose to share |
Changes
If this policy changes in a way that matters, we will say so in the app before the change applies. The date at the top shows the current version.
Contact
Tyler Elton
privacy@trimm.uk