MacroBasics ("we", "us", or "our") operates macrobasics.app and the MacroBasics iOS app. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
Account information. When you sign in with Google, we receive and store your name, email address, profile photo URL, and a Google-issued identifier. We do not receive or store your Google password.
Food log entries. Every meal you log is stored: the date, time, description, portion size, and nutritional values (calories, protein, carbohydrates, fat, fiber).
Weight entries. If you log your body weight, those entries are stored.
Recipes. Recipes you create or save, including their names, ingredients, instructions, and nutritional data, are stored in your account.
Voice audio. When you use voice logging, your audio recording is transmitted to OpenAI's Whisper API for transcription. The resulting text is returned to us and processed normally as a food log entry. We do not store the audio recording itself.
AI interactions. When you use AI food logging or recipe chat, the text of your food description or message (and relevant context such as your saved recipe list) is sent to Anthropic's Claude API to generate a structured response. We do not store the raw prompts or AI responses beyond what is saved as a food log or recipe entry.
2. How We Use Your Data
- To provide the MacroBasics service — logging, tracking, and displaying your nutrition data
- To authenticate you and maintain your session
- To power AI features (food parsing, voice transcription, nutrition insights)
- To allow you to export your data
We do not sell your data. We do not use your data for advertising.
3. Third-Party Services
We share data with the following third parties only to the extent necessary to operate the service:
- Google — authentication via OAuth 2.0. Governed by Google's Privacy Policy.
- Anthropic — AI food parsing, recipe chat, and post-log insights. Food descriptions and recipe context are sent to Claude. Governed by Anthropic's Privacy Policy.
- OpenAI — voice transcription via the Whisper API. Audio is sent for transcription only. Governed by OpenAI's Privacy Policy.
- Railway — cloud infrastructure and hosting. Your data is stored on Railway's servers. Governed by Railway's Privacy Policy.
4. Data Retention
Your data is retained for as long as you have an active account. You can export your data at any time from within the app. To request deletion of your account and all associated data, email us at privacy@macrobasics.app.
5. Security
Sessions are managed with short-lived JSON Web Tokens (7-day expiry) stored in HTTP-only, secure cookies, which are not accessible to JavaScript. All traffic is served over HTTPS in production.
6. Children's Privacy
MacroBasics is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us data, please contact us and we will delete it.
7. Your Rights (BC and Canadian Residents)
MacroBasics operates from British Columbia, Canada and complies with BC's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable.
You have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent for the collection or use of your personal information (note: doing so may prevent you from using the Service)
- Request deletion of your account and associated data
To exercise any of these rights, email us at privacy@macrobasics.app. We will respond within 30 days.
9. Changes to This Policy
We may update this policy as the service evolves. We will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this policy? Email us at privacy@macrobasics.app.