Privacy Policy

Data we collect

Your account email; the food entries, weights, targets and optional body metrics you record; and the minimal usage data needed to run the app.

AI processing

To produce estimates, the food text or photo you submit is sent to our AI provider, Anthropic, and processed to return a result. Under our API terms it is not used to train their models. Photos are processed transiently and are not stored by us.

If you use coaching, when your coach generates a weekly summary, aggregated data from your week — days logged, average calories and protein, your target and how far you were from it, how often you ate breakfast, and your weight change — is also sent to Anthropic to produce that summary. Your name is not included.

How we use your data

To provide the Service — compute your calories and macros, show your history — and, if you use coaching, to share the data you consent to with your coach.

Coaching

Coaching is opt-in. A coach can see a linked client's logs, weights and targets only through an active link the client accepted, and only until the client revokes it. Revocation takes effect immediately.

Legal bases

We rely on performance of our contract with you (providing the Service), our legitimate interests (security and improvement), and your consent (coaching and AI photo analysis).

Where data is stored and who processes it

Data is held by our infrastructure provider, Supabase, on servers in Switzerland (Zurich). We also use Vercel (hosting and CDN, USA/global), Anthropic (AI estimates, USA), Resend (transactional email, USA) and Paddle (payments, United Kingdom). Each provider is bound by data-processing terms.

Vercel also provides us with cookieless, aggregated analytics about page visits — such as which pages are viewed and roughly where visitors are located. This does not identify you and is not linked to your account or the data you enter.

International transfers

Some providers process data outside Switzerland and the EU/EEA, in particular in the United States (Anthropic, Vercel, Resend) and the United Kingdom (Paddle). Where a country lacks an adequate level of data protection, we rely on appropriate safeguards, in particular standard contractual clauses as implemented in our providers’ data processing agreements.

Retention and your rights

We keep your account data for as long as your account exists. If you delete your account, your data — entries, weights, goals, coach links and messages — is deleted from our database immediately and permanently. We do not retain backup copies of deleted data. Paddle retains billing records as merchant of record to meet legal (tax and accounting) obligations.

You can access, export (Settings → Data & privacy) and delete your data at any time.

You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU/EEA, with your local supervisory authority.

Cookies

We use only the cookies needed to keep you signed in and remember cosmetic preferences. There are no advertising trackers.

Children and contact

The Service is not intended for children under 16. We may update this policy and will notify material changes. Contact: privacy@macronote.ch.