Privacy policy

• No advertising, and no third-party analytics or tracking.
• What you log is stored on servers the developer operates, not handed to an ad network or a data broker.
• Resend delivers account emails. On iPhone, Apple delivers push notifications when you enable them.
• Your data is kept while your account exists. You can delete the account in the app or on this site.

You sign up with a name, an email address and a password. The password is stored only as a hash. Your email address has to be verified before the account can be used.

Signing in creates a session that lasts up to 90 days. Each session records the IP address and the device’s user agent it was created from.

Everything you enter is stored with your account in a database on servers the developer operates. That includes:

• Your profile: height, birth date, sex, activity level, time zone, units and goals, which Macros uses to estimate your targets.
• Food entries, your own foods, recipes, saved meals, day notes and your shopping list.
• Weigh-ins, body-fat readings, body measurements, steps, active energy, hydration and habits.
• The nutrition targets, check-ins and expenditure estimates Macros calculates from all of the above.

Photos you add to a weigh-in are uploaded to private object storage run by the developer, not into the database. The app only reaches them through signed links that expire after 15 minutes. Deleting a photo in the app deletes the file from storage.

When a food you create is added to the shared database, Macros keeps a private record that your account added it, so a report about it can be acted on. Other people never see who added a food; the moderator sees a code in place of your name, and looking up the email behind it is logged.

If you report a food, Macros stores the food, the reason, any note you write and when you sent it. Notes are shown to the moderator without your name. If you hide a contributor, Macros stores that you did and the name of the food you did it from. When a food is removed or an account is restricted, the action and the moderator’s note are kept in a moderation log.

Deleting your account deletes your reports, the people you hid, and the record that you added any shared food. Foods you shared stay in the database, with nothing that links them to you.

Account emails. Verification and password-reset emails are sent through Resend, an email delivery service, which receives your email address and the message.

Food search. Searches and barcode lookups are forwarded from the Macros server to the nutrition database it uses, which the developer also runs. They are sent with a service key, not with your account details. If you create a food with a barcode, that product’s name, brand, serving and nutrition are added to the shared database so the barcode finds it next time — again without your account attached.

Label photos. When you photograph a nutrition label, the photo is sent to an image-reading service the developer runs. That service sends the image through Vercel AI Gateway to an AI model provider to extract the values. Macros doesn’t save the label photo.

With your permission, the iPhone app reads weight, body fat, steps and active energy from Apple Health. It sends those readings to your Macros account to update your trend and energy estimate. The app can also write the calories and macros you log back to Apple Health. Health access can be changed in the app or in iPhone Settings.

A separate Apple Health Shortcut can send the same kinds of readings using an import token. Those tokens are stored only as hashes and shown to you once.

Macros does not use Apple Health data for advertising and does not send it to a third-party analytics service.

If you allow push notifications on iPhone, the app sends its device token and the app’s push environment to the Macros server. The server uses Apple Push Notification service to deliver notifications. You can turn notifications off in the app or iPhone Settings.

The app keeps your sign-in in the phone’s secure storage (the iOS Keychain, or the Android Keystore) and a copy of your recent data on the phone, so it opens quickly and keeps working offline. Entries you make offline are held on the phone until they can be sent.

This site has no analytics, advertising or tracking scripts, and sets no tracking cookies.

Everything described here is kept for as long as your account exists.

You can delete your account in the app under More › Settings › Delete Account, or on this website. That immediately deletes your account, your sessions, everything you logged, your own foods and recipes, and your progress photos. It can’t be undone.

Products you added with a barcode stay in the shared nutrition database, because they never had your account attached.

You can edit or delete individual food entries, weigh-ins, photos, recipes and your own foods at any time in the app, and export your statistics as CSV or JSON from Progress.

The terms of use cover how the service itself works. For help, contact support.