Privacy Policy

Cleveland Computing Company (“we,” “us,” or “our”) operates the Macro Pal mobile application (the “App”). This Privacy Policy explains how we collect, use, store, and protect your information when you use our App.

By using Macro Pal, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

Account Information

When you create an account, we collect your email address and password. Passwords are cryptographically hashed and never stored in plain text. You may also sign in via Google OAuth, in which case we receive your email and basic profile information from Google.

Health & Body Data

To calculate your personalized nutrition targets, we collect the following during onboarding:

• Gender
• Date of birth
• Height and weight
• Activity level
• Diet goal (maintain, lose, or gain weight)

This data is used solely to compute your daily calorie and macronutrient targets.

Food & Nutrition Logs

When you log food, we store meal entries including food descriptions, serving sizes, macronutrients (calories, protein, carbs, fat), and micronutrients (vitamins and minerals). We also store your personal food library and logging streaks.

Voice Data

If you use the voice logging feature, your device’s built-in speech recognition converts your speech to text locally on your device. We do not record, transmit, or store audio. We only receive the resulting text transcription.

Usage & Analytics Data

We use PostHog to collect anonymized usage analytics, including screen views, feature usage (e.g., which logging method you use), and engagement patterns. This data helps us improve the App. We use Sentry for crash reporting in production to identify and fix bugs.

2. How We Use Your Information

• Nutrition analysis: Your food descriptions are sent to Anthropic’s Claude AI to parse food items and estimate nutritional content. These requests are not linked to your identity — only the food description text is sent.
• Personalized targets: Your body data is used to calculate daily calorie and macro targets using standard nutritional formulas.
• App functionality: Food logs, streaks, and your food library power the core tracking experience.
• Improvement: Anonymized analytics help us understand usage patterns and improve the App.
• Error monitoring: Crash reports help us identify and fix technical issues.

3. Third-Party Services

We use the following third-party services:

• Supabase — authentication and database hosting. Your data is stored in a PostgreSQL database with Row-Level Security enforced so only you can access your data.
• Anthropic (Claude AI) — processes food descriptions to return nutrition estimates. Food text is sent without any user identifiers.
• RevenueCat — manages subscriptions and in-app purchases. Payment processing is handled entirely by Apple and Google; we never see or store your payment card information.
• PostHog — anonymized product analytics.
• Sentry — crash reporting and error tracking (production only).
• Google OAuth — optional sign-in provider.

Each third-party service processes data in accordance with their own privacy policies. We encourage you to review them.

4. Data Storage & Security

Your data is stored in a Supabase-managed PostgreSQL database with Row-Level Security, ensuring that each user can only access their own records. All data is transmitted over HTTPS/TLS encryption. Our API uses rate limiting, CORS protection, and security headers to protect against abuse.

Authentication tokens are stored locally on your device using secure storage. We do not store passwords in plain text.

5. Data Retention & Deletion

We retain your data for as long as your account is active. You may delete your account at any time from within the App. Account deletion permanently removes all of your data from our systems, including your profile, food library, and meal logs. This action is irreversible.

6. Your Rights

For All Users

• Access, correct, or delete your personal data
• Delete your account and all associated data
• Opt out of analytics (by contacting us)

For EU/EEA Users (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including:

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time (where processing is based on consent)
• Right to lodge a complaint with your local data protection authority

Our legal basis for processing your data is: (a) performance of a contract (providing the App’s services), (b) your consent (for optional features like analytics), and (c) legitimate interests (improving the App and preventing abuse).

For California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information — we do not sell your personal information
• Non-discrimination for exercising your privacy rights

7. Children’s Privacy

Macro Pal is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will promptly delete it. If you believe a child under 16 has provided us with personal information, please contact us.

8. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the third-party services listed in Section 3, and only as necessary to provide the App’s functionality. We may disclose information if required by law, regulation, or legal process.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or on our website with a revised “Last updated” date. Your continued use of the App after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Cleveland Computing Company
Email: nweingart12@gmail.com