Back to home

Privacy Policy

Last updated: 16 December 2025

Introduction

Macronote ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and mobile application.

This policy covers both our website (macronote.app) and our mobile application (iOS and Android). Where practices differ between platforms, we specify which platform the information applies to.

Information We Collect

Website (macronote.app)

  • Email address when you join our waitlist
  • Anonymous website usage data (page views, device type, approximate location at city level)
  • Food descriptions you submit to our demo feature (processed in real-time, not stored)

Mobile App

  • Account information (email address) when you create an account
  • Food diary entries and nutritional data you input or generate using our AI features
  • Photos you choose to upload for food recognition
  • Voice recordings when using speech-to-text (immediately transcribed to text and deleted - audio is not stored)
  • Device locale for regional nutrition lookups (e.g., UK vs US food differences)
  • App usage data and preferences for improving your experience
  • Crash reports and diagnostic data to fix bugs and improve stability

Location Data: We use your device's language and region settings (e.g., en-GB for UK) to provide regionally accurate nutrition data. We do not track your physical location via GPS. Location permissions are optional and only used if you choose to enable location-based features.

How We Use Your Information

  • To provide and improve our nutrition tracking services
  • To analyse food items and calculate nutritional information using artificial intelligence
  • To generate personalised meal plans and recipe recommendations
  • To sync your data across your devices (app only)
  • To send you service updates and notifications (with your consent)
  • To respond to your enquiries and provide customer support
  • To detect and prevent technical issues and improve app stability

Data Storage and Security

Storage Locations

Your data is stored securely using industry-standard encryption:

  • Local Storage (App): Your food diary is stored on your device for offline access
  • Cloud Storage (App): When you create an account, your data is securely backed up to cloud servers
  • Email Storage (Website): Waitlist emails are stored by our email service provider

Data Retention

  • Food Diary: Retained until you delete entries or your account
  • Account Data: Retained until you request account deletion (processed within 30 days)
  • Waitlist Emails: Retained until app launch plus one year, or until you unsubscribe
  • Analytics Data: Anonymous usage data retained for up to 24 hours (website) or 90 days (app)

Security Measures

We implement appropriate technical and organisational measures to protect your personal information, including encryption at rest and in transit, secure authentication, and regular security audits.

Website Analytics

We use privacy-focused analytics services to understand how visitors use our website:

  • Does not use cookies or tracking pixels
  • Collects anonymous data only (page views, referrer, approximate location, device type)
  • Cannot identify individual users or track you across websites
  • Automatically discards session data after 24 hours

No personal information is tracked, sold, or shared with third parties.

Third-Party Services

We do not sell your personal data. To provide our services, we work with trusted third-party service providers. We only share the minimum data necessary for each service to function.

Email Services

We use email service providers to send transactional emails (waitlist confirmations, app notifications). These providers process your email address solely to deliver emails on our behalf.

Artificial Intelligence Services

We use AI services to power our core nutrition features:

  • Nutrition Analysis: Food descriptions and photos are processed by AI to calculate nutritional information
  • Meal Planning: AI generates personalised meal plans based on your goals and preferences
  • Recipe Import: AI extracts recipe information from websites and photos
  • Voice Transcription: Audio recordings are transcribed to text (recordings are immediately deleted)

Data sent to AI services: Food descriptions (text), photos of meals, voice recordings (audio), recipe URLs, and your dietary preferences (if provided). This data is processed to provide you with nutrition estimates and personalised recommendations.

Demo mode (website): Data submitted via the demo is processed in real-time and immediately discarded. We do not store your demo submissions.

Search and Data Services

We use web search services to retrieve publicly available nutrition information for branded and restaurant foods. Only the food name and your region are sent (e.g., "Nando's chicken, UK") to find official nutrition data from brand websites and verified databases.

Cloud Infrastructure and Authentication

We use cloud infrastructure providers for:

  • User Authentication: Secure account creation and login (email/password)
  • Data Storage: Encrypted storage of your food diary and preferences
  • Backend Processing: Server functions that process nutrition lookups and meal generation
  • Data Synchronisation: Syncing your data across multiple devices

Font Delivery Services

Our website loads fonts from external content delivery networks. These services may process your IP address to deliver font files efficiently. They do not track your browsing behaviour.

Data Processing Summary

When you log a meal, the following data flow occurs:

  1. You submit a food description, photo, or voice recording
  2. Data is sent to our secure backend servers
  3. Our servers use AI services to classify the food and calculate nutrition
  4. If it's a branded food, search services retrieve official nutrition data
  5. Results are sent back to your app/browser and stored locally
  6. If you have an account (app), data is optionally synced to cloud storage

Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Data Portability: Export your data in a machine-readable format
  • Right to Restrict Processing: Limit how we use your data
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing communications or optional features

To exercise any of these rights, please contact us at hello@macronote.app. We will respond to your request within 30 days.

International Data Transfers

Your data may be processed on servers located outside your country of residence, including in the United States and European Union. We ensure appropriate safeguards are in place for international transfers in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.

Children's Privacy

Macronote is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages. If you believe we have collected information from a child, please contact us immediately and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting the updated policy on this page with a new "Last updated" date
  • Sending an email notification to registered users (app)
  • Displaying an in-app notification (app)

Your continued use of our services after changes indicates acceptance of the updated policy.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

  • Contract Performance: Processing necessary to provide our services (nutrition tracking, meal planning)
  • Legitimate Interests: Improving our services, preventing fraud, and ensuring security
  • Consent: Marketing communications and optional features (you can withdraw at any time)
  • Legal Obligation: Compliance with legal requirements (e.g., tax, data protection laws)

Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have privacy concerns, please contact us:

For residents of the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority.

🔒 Our Privacy Commitment

We believe privacy is a fundamental right. That's why we use cookie-free analytics on our website, store your food diary locally for offline access, and only process the minimum data necessary to provide our AI-powered nutrition features. Your food data is yours - we never sell it to advertisers or third parties.