Your food log is yours.

Who we are

Macroz is provided by Chance Marine, an individual developer based in Indiana, USA, who is responsible for your information under this policy. For questions or privacy requests, email support@macroz.co. Health information is also covered by our Consumer Health Data Privacy Policy.

What we keep in your account

Macroz keeps the following under your account so it can be restored on a new phone. For accounts that use FatSecret diary hosting, food diary entries and custom-food nutrition are also hosted by FatSecret as described below.

• Your food log — every day’s meals, the foods on each plate with their amounts, recipe steps you write, and the conversation with Macroz that produced them, including the text of what you typed or said.
• Your body — weigh-ins, body fat, muscle mass and daily steps, whether you typed them in a check-in or imported them from Apple Health, and the profile details your program is built from (sex, birthday, height, activity, and pregnancy or breastfeeding if you tell us).
• Your program — goal, pace, targets, and a history of every change to them.
• Saved meals, water, weekly check-ins, and the notes Macroz keeps about your preferences so it does not have to ask twice.
• Your name and email — the name and email address Apple shares when you sign in. If you hide your email with Sign in with Apple, we only ever see the relay address. We use your email to identify your account and to contact you about your account, support or privacy requests; we do not use it for marketing.
• Your AI sharing choice and when you made it.
• Support tickets and feature requests you write, and photos you attach to a support ticket.
• Meals you share by link — the shared meal and its expiry.
• Usage and diagnostic records for assistant requests, food searches, performance, errors, and subscription access. Short-lived abuse-prevention records derived from connection information help limit repeated requests.

Photos and nutrition data

• Photographs of food are kept on your phone for the timeline. With AI sharing on, they are sent to AI providers when you ask Macroz to read them. They are not backed up, so they do not come back on a new phone or after reinstalling; the meals do. The analysis cache stores derived observations rather than the original image bytes. Observations may be reused for the same account for ten minutes. Expiry ends reuse and is not a promise of immediate physical deletion. Provider processing and retention follow their applicable terms and settings.
• Progress photographs are stored on your phone and backed up to private account storage so they can be restored on another device. They are not sent to AI providers. Photos attached to support tickets are stored with the ticket.
• Nutrition figures from fatsecret use a six-hour server cache, within its 24-hour server limit. Saved-food and historical nutrition can remain on your device indefinitely for offline access, including after restarting the app. Recent search results are cached on your device to speed up repeated searches and refreshed when online. Device caches are excluded from device backups and cleared when you sign out or delete your account. Online catalog updates do not rewrite historical meals. Macroz retains food, serving and diary-entry identifiers, aggregated totals, meal organization, instructions, owned images and authored corrections separately on its servers.

Public feature requests

Feature requests you submit are reviewed before publication. Published requests show their title, description, your first display name and votes to other app users. Do not include private health or account details. You can report a request or block its author from the request menu. Moderators can remove unsuitable content and review reports. Reports and block choices are kept under your account and are not shown publicly. Your requests are deleted with your account.

Food corrections

Your personal corrections are kept separately from shared catalog corrections. With AI sharing on, label photos attached to a food report are sent to AI providers to read the label and investigate the correction. Macroz does not store those image bytes in its report records. A supported correction can apply privately to your account; independently verified corrections may be published for other users when the necessary reuse permission exists, without your name. Verification of a label does not itself grant reuse rights.

Apple Health

With your permission, Macroz reads your biological sex, date of birth, height, weight, body fat, lean body mass and step count to fill in onboarding and draw your charts. The readings you import are kept in your account alongside the ones you type, so your history restores on a new phone. Only a number you logged yourself is ever written back to Health; estimates are not. With AI sharing on, your weight, body fat, muscle mass and steps, including readings imported from Apple Health, are sent to AI providers when you use the assistant or a check-in. Health data is not used for advertising or marketing, is not sold, is never sent to analytics, and is not stored in iCloud by Macroz.

Your choice about AI

AI sharing is optional. Macroz asks for it separately after you sign in, and nothing is sent to an AI provider until you turn it on. With it on, relevant messages, food photos, recordings, food and nutrition context, body measurements (weight, body fat, muscle mass and steps, including Apple Health readings), and profile or program details may be sent to AI model providers, a routing service that connects Macroz to them, and a web research provider. Ordinary dictation sends recordings to a speech provider for transcription, and voice features send microphone audio and reply text to a speech provider for transcription and speech. The app names these providers on its AI providers page, opened from “Who receives it” when Macroz asks about AI sharing, and we will send the list on request. Macroz asks again only when you use an AI feature while it is off. You can turn it off anytime in Settings → Privacy → AI Sharing. Manual food entry, barcode scanning, food database search, your log, history, stats and weigh-ins all work with AI sharing off. Turning it off stops work in progress and any new AI sharing; it cannot recall requests already sent.

Who processes your data

Macroz uses specialist service providers for hosting, AI, speech, web research, nutrition searches, hosted food diaries, analytics and the website. They receive only what the feature you use needs, and we require them, through their contracts and terms, to protect it in line with this policy. Provider processing, retention and permitted uses are governed by those agreements and account settings; this policy does not promise zero retention by every provider. Some providers may process data outside the United States.

• Hosting. The account, database, private files and server functions run with a cloud provider in the United States. FatSecret separately hosts the associated food diary and custom foods.
• AI models. With AI sharing on, language and vision providers receive the relevant conversation, nutrition context and attachments needed to answer, together with your current, starting and goal weight, recent weights, body fat, muscle mass and steps, and your targets and program, so that answers fit your plan. Your sex, birthday and height are kept in your account to set your targets; the values themselves are not sent to AI providers unless you write them in a message, though targets, calorie floors and safety notes worked out from them can be. We do not deliberately attach your name, email or account identifier to model requests. Information you include in a message or attachment is part of that request. Macroz retains conversations and may cache derived food observations and recipe-source extraction to avoid repeated processing. A public recipe page you link may be read once and reused for seven days; cache expiry is separate from physical deletion. Web pages you link, and pages found during food research, are fetched by our servers, so those sites see a request from us, not from you.
• Speech. With AI sharing on, a speech provider turns ordinary dictation recordings into text, and voice conversations use a speech provider to transcribe microphone audio and speak reply text. A temporary dictation recording stays on the phone while recording or retrying; completing or canceling the take removes it. Macroz keeps the resulting text, not the recording. Provider retention follows the applicable terms and settings.
• Nutrition data and hosted diary. Food searches and barcode numbers go to the fatsecret Platform API. FatSecret hosts the diary linked to your Macroz account: logging sends food and serving identifiers, amount, meal category and date to the FatSecret profile associated with your account, and manual or corrected custom foods can also include a name, serving description and nutrition figures. FatSecret processes this information under its privacy policy. Missing or rejected barcode matches can send the barcode to Open Food Facts, which receives no Macroz account or meal history. With AI sharing on, a confirmed missing food can then be researched with the web research provider. Supported barcode research can be cached privately for your account for up to 24 hours; shared catalog publication requires the necessary reuse rights. Open Food Facts source records keep their attribution and license information in a separate cache, which may be retained indefinitely and is available for download.
• Apple. Sign in with Apple, subscriptions and Apple Health, under Apple’s own terms.
• Analytics. One analytics provider, in the United States, receives your account identifier, a device identifier and device model, which screens and features you use, and crash reports — no food names, calories, weights or email. Delivering those events necessarily shows that provider your device’s network address; the provider is set to discard it, so no location is recorded. You can turn analytics off in Settings at any time.
• Website. macroz.co is served by a website host and loads fonts from a font provider; both receive ordinary network requests and connection information. A meal link opened on the web shows only a button to open the app.

For a list of the specific providers we use, email support@macroz.co. We may also disclose information when the law requires it, to protect people’s safety, or to a business that takes over Macroz, which would remain bound by this policy.

Analytics

We collect account-linked usage events and diagnostics: which screens and features are used, whether setup steps and sign-in worked, whether you connected Apple Health (not what it contains), whether uploads failed, and when the app crashes, so problems can be fixed. Events carry no food names, calorie figures, measurements, health readings, names or email addresses. Nothing is sold or shared for advertising, and Macroz does not track you across other apps or websites. Analytics starts when the app first opens; events from setup are linked to your account when you sign in. You can turn analytics off in Settings after you sign in; from then on no new events are sent. When you delete your account, one deletion record (your account identifier and the time) is sent to the analytics provider even if analytics is off, so the deletion can be applied again if we ever restore a backup.

Advertising and tracking

Macroz shows no ads, does not sell or share personal information for advertising, and does not track you across other companies’ apps or websites. Because of that, the website and app do not change their behavior for browser “Do Not Track” or Global Privacy Control signals; there is no selling or cross-site tracking to turn off. The website sets no advertising or analytics cookies.

Sharing a meal

When you share a meal, a copy of the plate — its name, picture, foods, amounts, nutrition figures, groups, any recipe steps, and the date it was logged — is stored behind a random link. It does not include your name, your notes or your body data. Anyone with the link, the app and a Macroz account can open it until it expires after 30 days; the stored copy is deleted within about an hour of expiry. You can stop sharing earlier, and account deletion removes your links. A copy someone has already saved to their own account stays with them.

The waitlist on macroz.co

If you join the waitlist on this website, we keep the email address you enter and when you joined. It is used only to send one email telling you Macroz is available on the App Store. That email will be sent through an email delivery provider and will include a way to unsubscribe. We delete the list after that email is sent. It is not sold or shared for anyone else’s use. To have your address removed sooner, email support@macroz.co.

Deleting your account

Open Settings, then Privacy, then Delete account. Apple asks you to confirm your identity so we can revoke the app’s authorization. Deleting your account does not cancel an Apple subscription; manage or cancel it in your Apple subscription settings to stop future billing. Once accepted, the request closes your account and stops new writes. The app shows pending or completed deletion status and keeps a receipt that can be checked after restarting.

Active Macroz account data is then removed, including your log, measurements, photos, support tickets, feature requests, shared links and AI sharing choice, and the app clears local account data. If your account used FatSecret diary hosting, hosted diary entries are removed with retries, and we finish removing the FatSecret profile and custom foods with FatSecret by hand; only minimal protected identifiers and authorization needed for that cleanup are kept until it is confirmed. We aim to complete deletion within 45 days of your request. A completed-status receipt contains no account or food details and expires after 30 days. For help, contact support@macroz.co.

Backup and migration copies and required records can need separate handling. Our own backups are kept for 7 days. FatSecret’s published policy allows required legal retention and says backup and disaster-recovery copies are destroyed or deidentified within six months after account deletion. Corrections to the shared food catalog that you helped verify stay in the catalog without your name. Records already stripped of identifying information may be retained as diagnostics. Analytics events linked to your account identifier, including the deletion record, are deleted from our analytics provider within 30 days after your account is deleted.

How long we keep it

Account data stays until you delete it or delete your account. Shared meal links last 30 days. Food-photo observations can be reused for ten minutes, recipe extractions for seven days, private barcode research for 24 hours and fatsecret server responses for six hours. Abuse-prevention records last about two days. Waitlist addresses are deleted after the launch email. Our backups are kept for 7 days.

Your rights

Wherever you live in the United States, you can ask us to confirm what personal information we hold about you, give you a copy in a portable format, correct it, or delete it, and you can withdraw consent you gave, such as AI sharing. Many details can be corrected or deleted in the app. Email support@macroz.co or open Support in the app; we will confirm the request comes from the account holder and answer within 45 days, or tell you within that time if we need up to 45 more days. If we decline, you can appeal by replying with “Appeal” in the subject, and we will answer within 45 days. We will not treat you differently for using these rights. The Consumer Health Data Privacy Policy describes the rights that apply to health data.

Security

Data is sent over encrypted connections, each account can reach only its own data, and access to our systems is limited to the people who run Macroz. No system is perfectly secure, and we cannot promise that information will never be accessed without permission. If a breach affects your information, we will notify you and the authorities as the law requires.

Children

Macroz is intended for adults aged 18 and older managing their own nutrition, and is not directed to children. Onboarding checks the birthday you provide; this is a self-reported age check, not independent identity verification. If we learn that someone under 18 has an account, we will delete it.

Changes and contact

This policy takes effect on the date at the top. If it changes in a way that matters, the app will say so before the change applies, and we will ask for consent where the law requires it. For questions or privacy requests, email support@macroz.co or open Support under Settings in the app.