Privacy Policy
Our Macro is built privacy-first. Your health data lives on your device, and the parts of the app that cost us money to run send us the smallest possible amount of derived information — never your raw health history. This policy explains exactly what that means.
The short version
- Your food logs, weights, measurements, and workouts are stored on your device, and sync to your own iCloud — not to us.
- We never sell your data, and we never use it for advertising.
- Optional AI features send only derived numbers or short text (and, for a photo scan, the image) to our server and on to Google (Gemini) — never your full history and never Apple Health data.
- You can export everything to CSV any time, and delete your account with one tap. Two small one-way anti-abuse records outlive the deletion — we explain exactly which, below.
What stays on your device
Everything you log — foods, portions, macros, body weight and its trend, body measurements, workouts and personal records, and your goals and targets — is stored locally on your device using Apple's on-device database. It is included in your encrypted device backup if you have one enabled. We do not receive a copy.
What we receive, and only when you use AI
Some optional features use AI hosted on our backend. When — and only when — you tap one of them, we send the minimum needed to answer your request:
- Photo scan: the meal photo you chose.
- Describe / estimate a food or dish: the short text you typed.
- Recomposition insight: a few derived numbers only — whether the scale has been flat, the change in your estimated one-rep max, and the change in a waist measurement. Never your logs.
- Workout suggestions: recent exercise names.
We do not send your food diary, your weight history, or any Apple Health / HealthKit data to these features. Requests are processed to generate your result and are not used to build a profile of you. We keep only an anonymized usage count (which feature, how many tokens, and when) to enforce fair-use limits and monitor cost — not the content of your request.
AI requests are processed by Google (Gemini) through our own backend. Google processes the request to return your result; we do not permit your data to be used to train models.
Accounts
You can use the whole app with no account — logging food, weight, measurements and workouts, the trend and TDEE maths, and CSV export all work without ever signing in.
The optional AI features do require Sign in with Apple, before the first AI request. They are a metered service — a free monthly allowance, or Our Macro Plus — and we have to be able to attribute that meter to an identity. The app also creates an anonymous, device-scoped account for the app itself; that one holds no name and no email.
When you sign in with Apple we store the anonymized identifier Apple gives us and the email address Apple shares, including a private relay address if you chose Hide My Email. We use it only to match your account and any complimentary access we have granted. It is never advertised against, never sold, and never sent to the AI service. We never receive your Apple password.
Sync and backup
The app syncs your logs to your own iCloud private database, so they survive a reinstall and reach your other devices signed in to the same Apple ID. That data is stored under your Apple ID, not ours —we have no access to it and cannot read it.
Subscriptions
If you subscribe to Our Macro Plus, the purchase is handled by Apple. We verify your subscription status with Apple's servers to unlock premium features; we never see your payment details. Apple's handling of the transaction is governed by Apple's privacy policy.
Analytics
We use privacy-respecting product analytics (TelemetryDeck) to understand how the app is used — for example, how many people log a meal or hit a feature — so we can improve it. These events are anonymous: they carry a random per-install identifier (not tied to you, your device ID, or your account) and coarse, non-identifying labels only. They never include your food, weights, health data, or any free-form text you enter.
We also collect crash, hang and performance diagnostics from iOS (Apple's MetricKit) so we can fix stability problems. These carry the same random per-install identifier and contain no health data and no text you entered.
Your choices & rights
- Export: export all your data to CSV from within the app at any time.
- Delete: deleting your account removes your server-side account, subscription record, and usage counts. Deleting the app removes the on-device data. Two small anti-abuse records are kept: a one-way hash of the Apple identifier (so a deleted account cannot be recreated to mint a fresh free AI allowance) and a one-way hash of the IP address the account was created from. They hold no readable personal information and are used only to prevent abuse — they are one-way for correlation, not a security guarantee.
- Control AI: AI features are opt-in per action — if you never tap them, nothing leaves your device beyond anonymous analytics.
Children
Our Macro is not directed to children under 13, and we do not knowingly collect data from them.
Changes
If we change this policy we will update the date above and, for material changes, note it in the app.
Contact
Questions about your privacy? Email ihjastk25@gmail.com.