FitMacros Privacy Policy

Effective Date: February 2025
Last Updated: February 2025

FitMacros (“we,” “us,” or “our”) is a nutrition and fitness tracking app that helps you log meals, receive AI-generated nutrition estimates, and track your progress. This Privacy Policy explains what data we collect, how we use it, where it is stored, and your rights. By using FitMacros, you agree to this Policy. If you do not agree, please do not use the app.

1. Plain-English Summary

FitMacros stores most detailed meal, nutrition, and progress data locally on your device. Meal photos are uploaded temporarily for AI analysis and deleted immediately after processing. If you use the optional FitMacro + FitFace AI ecosystem features, we also sync a limited set of account-linked summary fields to our backend, such as your linked account ID, email, goals, calorie/protein targets, calories logged, protein logged, and meals logged. We store only hashed, non-reversible identifiers for free-trial abuse prevention, separate from these optional ecosystem features.

We never sell your data. We do not use your information for targeted advertising. FitMacros does not provide medical advice.

2. Data We Collect

We collect only the minimum data required to provide the app’s core features.

Account Information: Email and user ID (via Firebase Authentication).
Meal Data (Local Only): Text descriptions, nutrition estimates, favorites, and your manually entered meal information.
Meal Photos: Photos are uploaded temporarily to create a secure URL for AI analysis. They are deleted immediately after analysis. We do not store images long-term in the cloud.
Fitness Data (Local Only): Any workout entries, fitness notes, or manually entered fitness information. FitMacros does not use Apple HealthKit or Google Fit.
Daily, Weekly & Monthly Progress Data (Mostly Local): We calculate daily totals (calories, protein, carbs, fats) and use them to generate weekly and monthly charts. If you use the optional FitMacro + FitFace AI ecosystem features, limited daily summary fields such as calories logged, protein logged, and meals logged may also be synced to our backend.
Progress Retention: Progress older than 3 months is automatically deleted from your device.
Hashed Identifiers (Non-Reversible): We store a cryptographic one-way hash of (1) your device ID and (2) your email/Apple ID. These hashes cannot identify you and are used solely to prevent repeated free trials.
Subscription & Purchase Data: Entitlements, receipts, and product identifiers via RevenueCat and the App Store.
Diagnostics: Crash logs, performance data, and basic usage analytics to improve reliability.

3. Local Storage and Optional Ecosystem Sync

FitMacros stores the following detailed data locally on your device:

Meals and meal history
Nutrition logs
Daily/weekly/monthly progress
Favorites
Fitness entries
Goals

We do not host your full meal history, favorites, or detailed local progress logs on a general backend server. However, if you use the optional FitMacro + FitFace AI ecosystem features, we may sync a limited set of account-linked profile fields and daily summary fields to our backend so the two apps can show shared context, recommendations, and next-step guidance. If you delete the app or reset your device storage, your local-only data is permanently removed from that device.

The ecosystem sync may include your linked account ID, email, goal, calorie target, protein target, calories logged, protein logged, meals logged, and related fit/wellness summary timestamps. It does not send your full local meal history or meal photos through this sync.

4. How We Use Your Data

To analyze meals using AI and generate nutrition estimates
To store and display your daily, weekly, and monthly progress
To manage subscriptions via RevenueCat & Apple
To provide customer support
To prevent repeated free trial usage through anonymous hashed identifiers
To debug, secure, and improve app quality
To provide optional cross-app ecosystem features between FitMacros and FitFace AI

AI Accuracy: AI estimates may be inaccurate. FitMacros does not provide medical or nutritional advice.

5. Legal Bases (GDPR/EEA/UK)

Contract: To provide core app features.
Consent: For analysis of meal photos and processing of health-related meal data.
Legitimate Interests: Security, fraud prevention, and app improvement.
Legal Obligation: Compliance with financial and consumer protection laws.

6. Sharing and Disclosure

We share only with trusted service providers necessary to operate the app:

OpenAI: Receives a temporary image URL for AI analysis. Image is deleted after processing.
Firebase: Authentication (email/password, Apple, Google), temporary storage during analysis.
RevenueCat: Subscription management.
Apple App Store: Billing and receipt validation.
Crash/Analytics Tools: Error logs and performance diagnostics.
Our Ecosystem Backend: Receives limited account-linked profile and daily summary fields when you use the optional FitMacros + FitFace AI ecosystem features.

We do not sell your data. We do not share data for targeted or cross-app advertising.

Hashed Identifiers: Used ONLY to prevent repeated free trials. Never shared, sold, or linked to personal identity.

7. Data Retention

Meal Photos: Deleted immediately after AI analysis.
Meals, Fitness Logs, Goals: Stored locally until you delete them or uninstall the app.
Ecosystem Summary Data: Limited account-linked profile fields and daily summary fields may be retained on our backend while the optional FitMacros + FitFace AI ecosystem features remain active.
Progress Data: Automatically deleted after 3 months to protect privacy.
Account and Subscription: Retained as long as your account remains active.
Diagnostics: Retained for a reasonable period to improve app stability.

8. Your Rights

Depending on your region, you may have the right to:

Access your data
Correct inaccurate data
Delete meals, fitness logs, or your entire account
Withdraw consent (by deleting local data or account)
Request data portability (where applicable)
GDPR/EEA/UK rights to restriction and objection
California rights (CCPA/CPRA): access, correction, deletion

Email fitmacors@gmail.com for account deletion requests.

9. Children’s Privacy

FitMacros is not intended for children under 13 (or under 16 in EEA/UK). We do not knowingly collect children’s data.

10. Security

We use industry-standard encryption (TLS in transit, Firebase encryption at rest). No system is 100% secure. You are responsible for securing your device and login credentials.

11. International Data Transfers

Your data may be processed in Canada, the United States, and other regions where our providers operate. We rely on lawful transfer mechanisms, including Standard Contractual Clauses.

12. Not Medical Advice

FitMacros provides informational estimates only. Consult qualified professionals for medical, nutrition, or fitness decisions.

13. Changes

We may update this Policy. Changes are posted on this page with an updated date.

14. Contact Us

FitMacros
Toronto, Ontario, Canada
📧 Email: fitmacors@gmail.com

15. App Store Privacy Summary

Data Linked to You (stored locally on your device):

User Content – Meal text, fitness logs
Health & Fitness – Nutrition logs (manual), progress charts
Photos – Temporary for analysis only
Identifiers – Firebase user ID, subscription status

Data Not Linked to You:

Hashed Device Identifier – for trial prevention only
Hashed Email/Apple ID – anonymous, non-reversible

We do not track you across other apps or websites.