Last Updated: January 10, 2026
1. Introduction
Welcome to Macrofy ("we", "our", or the "Company"), a nutrition and wellness application operated by MB "Appmonster Technologies", a Small Partnership duly registered under the laws of the Republic of Lithuania (company code 306141982).
This Privacy Policy explains how we collect, process, store, share, and protect your personal data when you use the Macrofy mobile application or related websites (collectively, the "Service").
As a company established in the European Union, we primarily operate in accordance with the EU General Data Protection Regulation (GDPR). Macrofy also complies, where applicable, with privacy and data protection laws of other jurisdictions, including the United Kingdom, United States (state-level laws), Canada, Australia, and other regions where required by law.
By using Macrofy, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
2. Eligibility & Children's Privacy
Macrofy is designed exclusively for adults aged 16+.
You may not use the Service if you are under 16.
We do not knowingly collect or process data of:
- individuals under 16 (contract restriction)
- individuals under 16 in regions where GDPR "digital age of consent" is 16
- individuals under 13 (US COPPA requirement)
If we discover that we processed data belonging to a minor, we will delete it immediately.
3. Categories of Data We Collect
We collect the following categories of personal data:
3.1. Data You Provide Directly
- Email address
- Age, gender (optional)
- Weight, height, body metrics
- Nutrition goals
- Food diaries and logs
- Food photos (user-uploaded)
- Activity logs
- Paired Mode partner information
- Consents and preferences
3.2. Sensitive Health Data (GDPR Art. 9)
Collected only with explicit consent:
- Steps, workouts
- Heart rate
- Active calories
- Weight and measurement data
- Sleep duration
- Activity intensity
- Activity energy
- Other connected health metrics
Sensitive data is never shared with advertisers or sold.
3.3. Automatically Collected Data
- IP address, country, region
- App usage metadata
- Device model, OS, language
- Crash logs, diagnostics
- Cookie identifiers
3.4. AI Interaction Data
We collect:
- AI chat messages you send
- AI coaching results
- Contextual nutrition and activity data used to generate responses
We do not allow AI partners to train models on your information.
3.5. Paired Mode Data
Shared only when you activate Paired Mode:
- daily progress
- nutrition overview
- activity summary
- shared goals
You choose what is visible to your partner.
3.6. Geolocation Data (Optional)
Collected only if you choose to enable it, for:
- improving food recognition and suggestions
- regionalizing food databases
- adjusting calorie recommendations (time zone, region)
We do not track precise continuous GPS.
4. Purposes of Processing
We process data for:
- Providing core app functionality
- Creating personalized nutrition plans
- Adaptive calorie calculation
- AI-powered insights
- Analytics to improve the app
- Pairing users in Paired Mode
- Security, fraud detection
- Compliance with legal obligations
5. Legal Bases for Processing (GDPR)
- Explicit Consent — health data, AI coaching, geolocation
- Contract Performance — providing the app
- Legitimate Interest — product improvement, security
- Legal Obligations — tax, compliance, audits
6. How We Share Data
We do not sell personal data.
We share only as described below.
6.1. With Service Providers
We use trusted processors:
| Provider | Function | Region | Notes |
|---|---|---|---|
| Hetzner Online GmbH | Hosting | EU | encrypted storage |
| RevenueCat | Subscription management | US/EU | no access to health data |
| App Store / Google Play | Billing | Global | no access to health data |
All providers operate under Data Processing Agreements (DPAs).
6.2. Paired Mode Sharing
Visible only to your paired partner.
6.3. Legal Compliance
Data may be disclosed if required by:
- court orders
- government authorities
- law enforcement
6.4. No Use of Health Data for Advertising
We do not use:
- HealthKit data
- Google Fit data
- sensitive data
for advertising or marketing.
7. Apple HealthKit Compliance
Macrofy fully complies with Apple Health requirements:
- We only read/write data you explicitly authorize.
- Data is used solely for wellness functions.
- Data is never shared with third parties.
- Data is never used for advertising or analytics.
- You may revoke permissions at any time.
8. Google Fit Compliance
Macrofy respects Google Fit policies:
- Data is used only to display and analyze your health information.
- No sharing with third parties without consent.
- No advertising use.
9. AI Data Processing (EU AI Act)
Macrofy uses AI to:
- analyze nutrition logs
- generate suggestions
- provide coaching messages
We guarantee:
- AI does not make medical decisions
- AI does not provide diagnosis
- AI outputs may be inaccurate
- AI does not use personal data for training
- Users may delete AI data anytime
10. International Transfers
When transferring data outside the EU (e.g., Firebase, OpenAI), we use:
- Standard Contractual Clauses (SCC)
- Additional safeguards: encryption, pseudonymization
11. Data Retention
- Account data — stored until deletion
- Health data — deleted immediately upon account removal
- Food photos — removed on account deletion
- Analytics — 12–18 months
- Backups — 30 days
12. Security
We use industry-standard security measures:
- HTTPS encryption
- Encryption at rest
- Strict access controls
- Firewall and intrusion detection
- Zero-trust server model
13. Your Rights
EU/EEA Users (GDPR):
- Access
- Correction
- Deletion
- Restriction
- Portability
- Withdraw consent
US State Rights:
Detailed in regional addenda (below).
Canada (PIPEDA)
- Access
- Correction
- Withdraw consent
Australia (Privacy Act 1988)
- Access
- Correction
- Complaint rights
14. Changes to This Policy
We may update this policy and will notify users in-app or via email.
15. Contact
Email: legal@macrofy.app (or legal@appmonster.tech)
Company: MB "Appmonster Technologies"
Legal form: Small Partnership
Company code: 306141982
Registered address:
Vilnius, Treniotos g. 2-12, LT-08121, Lithuania