Privacy Policy
Macro · by Obed Espinoza · Effective date: 2026-07-25
This policy describes how the Macro app (com.obi180.macroapp) collects, uses, and
protects your information.
Data controller
Obed Espinoza (the “Controller”) is responsible for processing your
personal data under this policy and applicable law, including Mexico's Federal Law on Protection of
Personal Data Held by Private Parties (LFPDPPP). Contact:
[email protected] (postal address available upon request).
Information we collect
- Meal photos: sent securely to our servers and shared with third-party AI vision
providers solely to estimate the dish and its nutrition. Photos are cached temporarily server-side
(Redis, up to ~1 hour) and are not stored in Supabase. If you log the meal, the copy shown later is
kept only in that device's private app storage. Global catalog photos are AI-generated.
- Meal descriptions you type or dictate: voice input is transcribed
on-device by iOS; only the resulting text is sent to our servers.
- Barcodes: looked up using the open Open Food Facts database.
- Profile data you enter (weight, height, age, sex, activity level, goals) — used to
compute your nutrition targets.
- Wellness logs you choose to save: meals, water, meal-linked mood notes, and your
usage streak.
- Subscription data: if you purchase Macro Premium, Apple and our provider
RevenueCat process the transaction and tell us your subscription status (active, expired, trial). We
never see or store your payment information.
- Email and name only if you choose to sign in with Apple (Sign in with Apple).
Otherwise, we use an anonymous account identifier.
- Technical and diagnostic data: crash/error reports (via Sentry) and basic
first-party usage metrics used to operate and improve the app.
Sensitive data and consent
Some data you enter (weight, measurements, health goals, meal and mood logs) may qualify as
sensitive personal data related to your health. By using Macro and providing this
data you give your express consent to its processing for the purposes described in
this policy. You may revoke consent at any time by deleting your account or contacting us.
Purposes of processing
- Primary (necessary): estimating your meals' nutrition, computing your targets,
maintaining your diary and history, operating your subscription, and providing support.
- Secondary: diagnosing errors and improving service quality. We do not use your
data for advertising and do not sell it.
Information we do NOT collect
- Location
- Contacts
- Advertising identifiers
We show no ads, do not sell your data, and do not perform cross-app tracking.
Who we share data with (processors)
- AI model providers, to estimate dishes and nutrition from photos or text. Our primary analysis
providers (OpenAI, Google, Anthropic) do not train their models on data sent via API. Some auxiliary
features (such as kitchen suggestions from your pantry) use additional providers that may retain or
use submitted content to improve their models; we send those providers only the content needed (the
photo or ingredient list), without your name or account identifiers.
- Apple — purchase and subscription processing (App Store).
- RevenueCat — subscription status management.
- Supabase — database and storage.
- Railway — application hosting.
- Sentry — crash and error diagnostics.
- Open Food Facts — barcode product data (ODbL license).
We do not transfer your personal data to third parties for their own purposes. We only disclose
data to authorities when legally required.
International transfers
Your data is stored and processed on servers located in the United States (and in
countries where our providers operate). By using the App you consent to this transfer, which is made
to providers bound by contractual data-protection obligations.
Retention and deletion
Your meal logs are kept until you delete them. You can delete an individual log from your diary, or
delete your entire account and all of your data in-app via Settings → Delete account
(this also works for guest/anonymous accounts). Photos used for analysis expire from the cache
approximately 1 hour after processing. Crash reports are retained for a limited period in Sentry and
then automatically deleted. Residual backups are purged on normal backup cycles.
Your rights
You have the right to access your data, rectify it,
delete it, and object to its processing (the ARCO rights under
Mexican law), as well as to revoke consent and limit use. You can exercise most of these directly
in-app (edit your profile, delete logs, Settings → Delete account). For anything else, email
[email protected] and we will respond within the legally required
timeframes. If you reside in another jurisdiction (e.g., California or the European Union), we will
honor the equivalent rights that apply to you.
Children
Macro is not directed at children under 13 and we do not knowingly collect data
from children under 13. If you believe a child has provided us data, contact us and we will delete
it.
Security
We use reasonable administrative, technical, and physical safeguards: encryption in transit
(HTTPS/TLS), access controls, and credential isolation. No system is 100% secure; if a breach affects
your sensitive data, we will notify you as required by law.
Important notice: nutrition values shown in Macro are AI-generated estimates,
for informational purposes only. They are not medical advice. Consult a healthcare professional before
making medical or dietary decisions.
Changes to this policy
We may update this policy occasionally. Material changes will be reflected on this page with a new
effective date.
Contact
If you have questions about this privacy policy or want to exercise your rights, reach us at
[email protected].