Privacy Policy
The Short Version
Your taco data lives on your device. We never sell it, share it, or use it for advertising. An account is optional — required only if you choose to enable the optional cloud backup feature.
What Data the App Stores Locally
All meal logs, taco ratings, ingredients, photos, favorites, and settings are stored in a local Room database on your device. Nothing is sent anywhere by default. You can export your entire history at any time as a CSV file. Uninstalling the app deletes this local database.
Your meal database and app settings are also excluded from Android's automatic cloud backup and device-to-device transfer, so they are not uploaded to your Google Drive unless you explicitly turn on the optional Pro cloud sync described below. To move data to a new device, use CSV export or Pro cloud backup.
Photos you attach to meals are saved to your device's Pictures folder via Android's MediaStore (API 29+), so they survive an uninstall. On older Android versions, photos are stored in the app's private storage and are removed on uninstall.
Crash Reporting (Always On)
TacoLogger uses Firebase Crashlytics (provided by Google) to catch bugs automatically. Crash reports include device model, Android version, and a stack trace. No meal content or personal information is included. Crash reporting is disabled in debug builds.
Firebase also collects a small set of standard telemetry automatically — things like app version, device type, and session length. This is Google-controlled baseline data governed by Google's privacy policy.
Advanced Analytics (Opt-In, Off by Default)
TacoLogger includes an optional analytics feature to help improve the app's automatic ingredient classifier. It is turned off by default and can be enabled in Settings → Share usage data to improve TacoLogger.
When opted in, the following is sent on each meal save:
- Meal type (Breakfast / Lunch / Dinner / Snack)
- Up to 5 ingredient names as you typed them (e.g. "shrimp", "al pastor")
- The filling categories those ingredients classify into (Beef, Pork, Poultry, Seafood, Veggie, etc.)
- Feature usage signals with no meal content: stats viewed, CSV exported/imported, achievements unlocked, GPS tapped, bulk edit applied
- How you found the app: if you installed TacoLogger by tapping a shared link, Google Play passes along the campaign labels from that link (for example, "share" and "medal"). These are our own channel tags — never your name, account, or any personal information — and are read once on first launch so we can tell which kinds of shares bring new taco lovers in.
This data is linked to an anonymous Firebase device ID — not to your name, email, or Google account. No location names, photos, notes, ratings, or restaurant names are ever sent.
You can opt out at any time from the Settings screen and previously collected events cannot be retroactively deleted from Firebase, but no new events will be sent after opting out.
Optional Cloud Backup (Pro Feature)
If you choose to enable cloud backup (a Pro-only feature), the app will ask you to sign in with your Google account via Firebase Authentication. Once signed in, your meal logs and saved favorites are synced to Firebase Firestore under your Google Account's UID — only you can read your data.
- Cloud backup is strictly opt-in. The app functions fully offline without it.
- Only the meal data you explicitly logged and the favorite meal templates you saved are synced — no location history, no browsing behavior, no identifiers beyond your Firebase UID.
- Photos are not synced to the cloud — only the local file path string is stored in Firestore.
- You can restore your backup by downloading it from Firestore back onto your device (for example, after a fresh install). This reads only your own meal data and writes it into the app's local database; it does not share your data with anyone.
- Deleting a meal marks it as deleted in Firestore (a "soft delete") rather than immediately removing the document, so the record is retained until a permanent purge. To have your cloud data permanently deleted, email us at the address below and we will remove your Firestore records within 30 days.
- You can sign out at any time from the Settings screen, which stops all future syncing.
Delete Your Account & Data
You can request deletion of your TacoLogger account and its associated cloud data at any time. TacoLogger is developed by Tom Aguero.
How to request deletion:
- Delete individual meals in the app — removing a meal in TacoLogger also removes it from your cloud backup.
- Delete your entire account and cloud backup — email Info@TacoLogger.com from, or mentioning, the Google account you signed in with and ask us to delete your account. We will permanently purge your Firestore records and your Firebase Authentication account within 30 days.
- Remove local data — uninstalling the app deletes the on-device meal database and settings. Photos saved to your device's Pictures folder (Android 9+) remain in your gallery and can be deleted there; on older Android versions they are removed on uninstall.
What is deleted: all meal logs, taco ratings, ingredients, notes, location names, and saved favorites you synced to cloud backup, along with your Firebase Authentication account (your name, email, and account ID held for sign-in).
What is kept: nothing tied to your identity is retained after the purge. Anonymous, aggregated analytics events (collected only if you opted in to "Share usage data") are not linked to your name, email, or account and cannot be individually deleted, but they contain no meal content or personal identifiers.
Retention period: cloud data is permanently deleted within 30 days of your request.
Location Data
TacoLogger requests the ACCESS_FINE_LOCATION and
ACCESS_COARSE_LOCATION permissions to power the GPS restaurant
discovery feature (Pro). Location is only accessed when you tap the GPS
button in the meal entry form — the app does not track your location in the
background. The location is used to search for nearby restaurants via the
Google Places API and is not stored persistently beyond the restaurant name
you choose.
Google Places API usage is governed by Google's privacy policy linked above.
Photos
TacoLogger lets you attach photos to your meal entries. It does not request the camera or storage permissions: taking a photo hands off to your device's camera app, and choosing an existing photo uses the Android photo picker — neither requires the app to hold those permissions. Photos are saved to your device only and are never uploaded unless you explicitly share them via Android's system share sheet.
Rating the App
After a taco milestone, and from the Settings screen, TacoLogger may show Google Play's in-app review prompt. This flow is handled entirely by Google Play; TacoLogger does not receive your rating or any personal information from it. Whether and how often the prompt appears is controlled by Google.
Subscriptions & Payments
TacoLogger Pro is an optional subscription purchased through Google Play's billing system. All payment processing is handled entirely by Google Play — TacoLogger never sees or stores your payment details. The app only learns whether you currently hold an active Pro subscription, which it uses to unlock Pro features. That entitlement check is cached on your device so it works offline. Purchases, billing, refunds, and cancellations are governed by Google Play's terms and Google's privacy policy.
Advertising
There are no ads in TacoLogger. There will never be ads in TacoLogger. TacoLogger does not collect your device's advertising ID: advertising-ID collection in our analytics is turned off. The advertising-ID permission is present only because it ships built into Google's analytics library; the identifier is not collected and is never used for advertising.
Children's Privacy
TacoLogger is not directed at children under 13. We do not knowingly collect personal information from children.
This Website
This website (the one you're reading right now) uses no cookies, no tracking scripts, no analytics, and no third-party services. It is a plain static HTML/CSS site hosted on GitHub Pages. No personal information is collected from visitors.
Changes to This Policy
If we make material changes to this policy, we'll update the "Last updated" date above. Significant changes will also be noted in the app's What's New dialog on the next update.
Contact
Questions, concerns, or data requests? Reach out:
Email: Info@TacoLogger.com