Macro&Muscle Privacy Policy

Effective date: [date]

Macro&Muscle ("we", "us") is run by [Craftsman Media and Internet Marketing LLC, registered address]. Contact: [privacy email].

What we collect

• Account: your email address, used to send you a sign-in link. There are no passwords.
• About you: sex, age, height, weight, activity level, goal weight and diet style, which you enter so the app can work out your daily targets.
• What you log: meals and food items, weigh-ins, weekly check-ins, your own recipes, your meal slots, and your settings.
• Training: workouts (exercises, sets, weights, reps, notes), routines, gyms and equipment, custom exercises, cardio sessions and training preferences.
• Waitlist: if you join the waitlist on our website, your email address, used only to email you about the launch. It is collected through our web host, Netlify, and kept until you ask us to delete it.
• Photos: none. The camera is used only to read a barcode on a food pack. Nothing from the camera is recorded or saved.
• Technical: the app does not currently include analytics or crash-reporting tools. [If PostHog or Sentry are added, list them here.]

Where it is kept

Your data is kept on your phone and, when you are signed in, copied to your account so it is there on any phone. Account data is stored with Supabase [region: confirm the project region]. Exercise videos are streamed to signed-in people through short-lived links.

Who we share it with

We do not sell your data and we do not show ads. These services process data for us:

• Netlify: hosts our website and receives the email address you enter on the waitlist form.
• Supabase: hosting, sign-in and email delivery for the sign-in link.
• Open Food Facts: when you scan a barcode, the barcode number is sent to look up the product. No account details are sent.
• AI meal description ("Describe it"): when this feature is switched on, the text you type is sent to Anthropic to suggest the parts of a meal. [Confirm before launch: it is not deployed yet. If it stays off, delete this line.]
• Payments: when subscriptions are added, Apple or Google and RevenueCat process the purchase. We receive whether your subscription is active, not your card details. [Update when payments are live.]

Your choices and rights

• Export: Settings has an export of your data as a file.
• Delete: Settings, "Delete my account and data", removes your account and the data linked to it.
• Access and correction: you can see and edit your data in the app. For anything else, write to [privacy email].
• Notifications: the app uses on-device notifications for the rest timer. You can turn them off in your phone's settings.

Depending on where you live, you may have more rights, for example under the UAE personal data protection law (Federal Decree-Law No. 45 of 2021) or, in the EU and UK, the GDPR. [Lawyer to confirm which laws apply and add the legal bases and any transfer wording.]

How long we keep it

Until you delete your account. After deletion, copies in backups are removed on [period: confirm with Supabase backup settings].

Children

Macro&Muscle is for people aged 18 and over. We do not knowingly collect data from anyone under 18.

Health information

Macro&Muscle gives estimates for food and training. It is not medical advice. Talk to a doctor before changing your diet or exercise, especially if you have a health condition.

Security

Data is sent over encrypted connections and every table is protected so people can read only their own rows. No system is perfectly secure.

Changes

If we change this policy we will update the date and, for important changes, tell you in the app.

Contact

[Company name, address, privacy email]