Privacy in the Macro app

Jan Hamsch und Kai Hamsch GbR, Schutternstr. 23a, 77974 Kürzell, Germany.

Contact: hello@fade.de, +49 151 54200511.

Macro stores your health data on your device first. It only syncs to our servers if you actively turn that on (opt-in). Without cloud sync, your health data never leaves your device, except for the AI analysis you trigger yourself, described below.

Sign-in uses Firebase Authentication (Google). Depending on the method, we process: with Apple sign-in an anonymised Apple ID and optionally name/email (or Apple's relay address); with Google sign-in name and email; with email sign-in your email address.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

With your explicit consent, Macro reads data from Apple Health (HealthKit) or Health Connect (Android), e.g. steps, heart rate, sleep, workouts, body measurements. You also log nutrition, water, caffeine, supplements and weight yourself.

This data lives in an encrypted local cache on your device. Only if you enable cloud sync is it additionally stored in our database in the EU, so you can restore it on a new device.

Health data from Apple Health is never used for advertising or marketing and is never sold to third parties.

Legal basis: your explicit consent (Art. 9(2)(a) GDPR). You can withdraw consent at any time in your system settings or in the app.

When you submit a photo or description of a meal for analysis, that content is sent to our servers (EU) and from there to an AI service that estimates the nutrition: Google Vertex AI (Gemini) and/or Anthropic (Claude).

Only the content you submit is transferred, no other health data. The providers process the request to deliver the analysis; using your content to train their models is contractually excluded.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR); for health-related content additionally your consent (Art. 9(2)(a) GDPR).

In-app purchases are handled by Apple (App Store) and Google (Play Store). To manage your subscription status we use RevenueCat, which processes a pseudonymous user ID and your purchase/subscription state, but no payment details, your card or account data is only ever seen by Apple or Google.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

To protect against abuse the app uses Firebase App Check. For technical operation, device information (model, OS version, app version, language/region) is processed. Macro includes no advertising SDKs and no cross-user tracking.

Google (Firebase Authentication, Firestore database, Cloud Functions, Storage, region europe-west3/EU; Vertex AI; App Check).

Anthropic (AI analysis, when active).

RevenueCat (subscription management).

Apple and Google (payment processing for in-app purchases).

Data processing agreements are in place with these providers where required.

Storage and database are located in the EU. Some AI processing (Vertex AI global endpoint, Anthropic) may take place in third countries, including the USA. Such transfers are based on the EU Standard Contractual Clauses and additional safeguards.

We store account data and synced health data for as long as your account exists. Photos submitted for analysis are not retained permanently for other purposes after processing. If you delete your account, all associated data is irreversibly removed.

You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw any consent at any time. You can delete your account and all its data directly in the app (Settings, Account). You also have the right to lodge a complaint with a data protection authority.

For requests: hello@fade.de.

Macro is not directed at children under 16. We do not knowingly collect data from children.

We update this policy when our processing changes. The current version is always available at this address.