Privacy Policy

This Privacy Policy explains how Makro handles personal information when you use the Makro mobile app, website, support channels, and related services. Makro is a nutrition logging and general coaching product; it is not a healthcare provider and is not intended to create a physician-patient relationship.

Depending on the features you choose, we may collect:

• Account information: email address, authentication provider, account identifier, and limited profile details supplied by Apple or Google.
• Profile and goal information: language, unit preference, age, height, weight, equation profile, activity level, goal direction, calorie and macronutrient targets, and target ranges.
• Nutrition and meal information: foods, meal names and times, portions, calories, protein, carbohydrates, fat, ingredients, food-source references, barcodes, saved meals, corrections, and associated food-image URLs.
• Weight and progress information: weight check-ins, goal history, derived trends, adherence scores, and other progress summaries generated from your entries.
• Content you submit to optional AI features: meal descriptions, meal photos, Coach questions, recent conversation context, and a verified summary of relevant Makro progress data.
• Coach records: conversation identifiers, messages, timestamps, and the progress snapshot used to ground a response.
• Product analytics: a pseudonymous account or device identifier, approved screen names, app and device metadata, and limited events such as completing onboarding, logging a meal, or using Coach.
• Diagnostics and support: app version, device and operating-system details, active route, operation name, redacted error information, and any information you choose to include in a support request.

Makro does not currently request HealthKit data. If that changes, Makro will request the required device permission and update this policy before collecting it.

We receive information directly from you, from your use of Makro, from Apple or Google when you choose social sign-in, and from food-data providers when you search for or select a food. USDA FoodData Central and Open Food Facts may receive the search term or barcode needed to return a result.

We use information to:

• create and secure your account;
• save and display meals, goals, weight trends, progress, and reusable meals;
• calculate editable starting targets and derived progress metrics;
• provide food search, barcode lookup, optional AI estimates, and optional Coach responses;
• operate, troubleshoot, secure, and improve Makro;
• respond to support, privacy, and account requests; and
• comply with law, enforce our terms, and protect Makro and its users.

AI processing is off until you enable it. When you intentionally use a photo or text estimate, Makro sends the submitted meal text or image through a Makro server to OpenAI. When you ask Makro Coach a question, Makro sends the question, recent conversation context, and a relevant progress summary to OpenAI.

Database search, barcode lookup, manual logging, local target calculations, scores, and charts do not require AI. Makro stores a nutrition result only if you save it, and stores Coach conversations in your account. Makro does not store the original meal photo in its database. OpenAI’s handling of API inputs is also subject to Makro’s production API configuration and OpenAI’s applicable business terms.

We do not sell personal information or consumer health data. We disclose information only as needed to operate the service, at your direction, or when required by law. Current service-provider categories include:

• Supabase: authentication, database, server functions, and account management.
• OpenAI: optional meal analysis and Makro Coach processing.
• PostHog: limited product analytics. Session replay, surveys, location enrichment, touch capture, and PostHog error capture are disabled.
• Sentry: crash and error diagnostics with personal content filtered from deliberately attached diagnostic data.
• Apple and Google: authentication when you choose the relevant sign-in option.
• USDA FoodData Central and Open Food Facts: food search and barcode results.

We may also disclose information to professional advisers, authorities, or a successor in a corporate transaction where permitted by law and subject to appropriate safeguards.

Makro’s analytics filter blocks meal text, nutrition values, weight, photos, searches, barcodes, Coach questions, names, email addresses, credentials, URLs, and request or response bodies from approved PostHog events. PostHog may still receive a pseudonymous account identifier, a device-level identifier, app and device metadata, screen names, and limited interaction events.

Makro configures Sentry not to send default personal information and removes user, request, and extra payloads before events are sent. Redaction and minimization reduce risk, but no automated filter can guarantee that unexpected diagnostic data will never contain personal information.

We generally keep account, meal, goal, weight, saved-meal, and Coach data while your account is active. We may keep limited security, diagnostic, transaction, or legal records for the period reasonably necessary for the purpose collected or required by law. Service providers apply their own retention schedules under their agreements with Makro. When you delete your account, Makro initiates deletion of the account and user-owned database records, subject to limited legal, security, backup, and fraud-prevention exceptions.

In the app, open Settings → Privacy and data to turn optional AI processing on or off and export the Makro data associated with your signed-in account. You can edit or remove meal entries and saved meals, update goals and preferences, and delete your account from Settings.

Depending on where you live, you may also have rights to request access, correction, deletion, portability, restriction, or an appeal of a privacy decision. Email nomofoway@gmail.com. We may need to verify your identity before completing a request. See Delete your Makro account for step-by-step instructions.

Makro uses authenticated requests, row-level database rules, secure native session storage, server-side quotas, and data-minimization controls. No internet service can guarantee absolute security.

Makro is not directed to children under 13, or the higher minimum age required in a user’s jurisdiction. If you believe a child provided personal information without appropriate permission, contact us so we can investigate and delete it.

Makro and its service providers may process information in countries other than where you live. Where required, we use contractual or other recognized safeguards for international transfers.

We may update this policy as Makro changes. We will post the revised version and change the effective date, and will provide additional notice when required by law.

Questions or requests can be sent to nomofoway@gmail.com. You can also review our Consumer Health Data Privacy Policy and Terms of Service.

Launch note: this policy is a product-grounded draft and must be reviewed by qualified counsel before public distribution.