Privacy Policy
Effective: October 21, 2026
Who we are
MacroCNX ("we", "us") is a nutrition app. Contact us about privacy at support@macrocnx.app.
The short version
- We collect what you enter (body stats, goals, health answers, food log, weights) to calculate your targets and suggest meals.
- We never sell your data, and we never use your health or nutrition data for advertising. Ads on the free tier are non-personalized and receive none of it.
- You can download all of your data (Profile → Export my data) or delete your account (Profile → Delete account) at any time, in the app.
What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address, password (stored hashed by our sign-in provider), account ID | Sign-in, account recovery |
| Profile and health | Birth date, sex, height, weight, goal weight, body fat %, activity and training, goal, health conditions you choose to share (for example diabetes or kidney disease), medications that affect appetite or blood sugar, pregnancy or breastfeeding, targets from your care team | Calculating personalized targets and safety guardrails |
| Food and diet | Diary entries, custom foods, saved meals, recipes, leftovers, water, diet preferences, allergies, dislikes, your own ingredient prices | Logging, meal suggestions, cost estimates |
| Progress | Weigh-ins and the history of your targets | Trends and target check-ins |
| Purchases | Subscription status, product, renewal and expiry dates. We never see your card details. | Unlocking Pro |
| Usage | AI recipe requests and their cost, rewarded-ad rewards, ad impression counts | Usage limits, preventing abuse, deciding which features are worth their cost |
| Barcode lookups | The barcode number you scan | Finding the product |
We don't collect your contacts, precise location, or photos (the camera only reads barcodes, on your device). We don't use your advertising identifier (IDFA) and don't ask for permission to track you.
How we use it
Only to provide and improve MacroCNX: to calculate targets, store your log, generate recipes, enforce plan limits, keep the service secure, answer support requests, and meet legal obligations. Where the law requires a legal basis (for example UK GDPR), we rely on our contract with you to run the app, your explicit consent for health information you choose to give us, and our legitimate interests in keeping the service secure and working. You can withdraw consent for health information by removing it from your profile or deleting your account.
Who processes it for us
We share data only with service providers that run parts of the app for us, under contracts that limit their use of it:
- Supabase (database, sign-in, server functions; hosted in the United States) stores all of the above.
- Anthropic (AI recipe generation) receives the text of your recipe request, your food rules, allergies, dislikes, eating style and the nutrition targets for that meal. It does not receive your name, email, account ID, weight or health conditions.
- RevenueCat and Apple (subscriptions). RevenueCat receives your account ID (a random identifier) and your purchase history from the App Store. Apple handles payment.
- Google AdMob (ads, free tier only). See "Ads" below.
- Open Food Facts and USDA FoodData Central receive only the barcode number you scan, from our server, with nothing about you.
We may disclose data if the law requires it or to protect someone's safety. If MacroCNX is sold or merged, your data would transfer under this policy and we'd tell you first. We don't sell or rent personal information, and we don't "share" it for cross-context behavioral advertising.
Ads
Free accounts may see a small number of ads: one card labeled "Sponsored" in the Diary and in saved recipes, and an optional rewarded video you can choose to watch for an extra AI recipe. Pro removes all ads, and new accounts see none in their first days.
- Ads are non-personalized. We don't use your IDFA and don't show Apple's tracking prompt.
- We pass no health, nutrition, body, diet, goal or food data to Google, and no keywords or targeting.
- Google's SDK collects some device and usage data itself (for example IP address for approximate location, device type, ad interactions and diagnostics) to serve and measure ads and prevent fraud. See how Google uses information from apps that use its services.
- For rewarded ads, we give Google your random account ID so Google's server can confirm to ours that you finished the ad. Nothing else.
- In the UK, Google's consent form asks for your choices before any ad is shown, and you can change them any time in Profile → Ad privacy choices.
Where your data is stored
Our servers are in the United States. If you use MacroCNX from Canada, the UK or Australia, your data is transferred to and stored in the US. For UK users we rely on appropriate safeguards for these transfers, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses used by our providers.
How long we keep it
We keep your data while your account exists. When you delete your account, your profile, diary, weights, recipes and all other personal records are deleted from our database right away. We keep AI cost records with the link to your account removed, for accounting. Copies in our backups are overwritten within 30 days. RevenueCat's customer record for you is deleted at the same time; Apple keeps its own purchase records under its policies.
Your choices and rights
- Access and portability: Profile → Export my data gives you a JSON file of everything we store about you.
- Correction: edit your profile and entries in the app.
- Deletion: Profile → Delete account. Cancel any App Store subscription first; deleting the account doesn't cancel it.
- Health information is optional: you can leave optional health questions unanswered.
Depending on where you live, you may have more rights. For example: in the UK (UK GDPR) to object to or restrict processing and to complain to the Information Commissioner's Office (ico.org.uk); in Canada (PIPEDA) to complain to the Office of the Privacy Commissioner of Canada; in Australia (Privacy Act) to complain to the OAIC; and in US states such as California, Washington and others, to know, delete, correct, and appeal a decision about your request. Email support@macrocnx.app to make a request. We'll verify it's you (usually by replying from the email on your account) and answer within the time the law requires. We won't treat you differently for using your rights.
Washington, Nevada and similar state health-data laws: see our Consumer Health Data Privacy Policy.
Children
MacroCNX is for adults 18 and over. We don't knowingly collect data from anyone younger. If you believe a minor has an account, contact us and we'll delete it.
Security
Data is encrypted in transit, database access is restricted so each user can reach only their own records, and secret keys stay on our servers. No system is perfectly secure; we'll notify you and the authorities of a breach as the law requires.
Changes
We'll post changes here with a new effective date and, for material ones, tell you in the app before they take effect.