Privacy Policy

Last updated: October 15, 2026

1. Controller and contact

Macromate is operated by ALHAZMI in the Kingdom of Saudi Arabia. For privacy questions or rights requests, contact support@macromatefit.com.

2. Data the app processes

• Account: email address, username, and account identifier needed for sign-in.
• Profile and goals: age, height, weight, sex, activity level, and fitness goal. This information is saved to your Supabase account profile to calculate and sync goals.
• Daily log: steps, water, meals and calorie/protein/carbohydrate/fat values, and any weight you choose to log.
• Workouts: routines, exercises, weights, repetitions, sets, and progress.
• Friends and challenges: friend requests and status, challenge membership, and data categories you choose to share with friends.
• Subscriptions: if you make a paid purchase when available, the service receives subscription status and transaction information needed from the store and RevenueCat; Macromate does not receive your card number.

3. Steps and permissions

The app asks permission to use your device’s motion sensor to count steps. It may ask to read step counts from the health data service available on your device; it does not write data to that service. You can deny or revoke permission in your device settings, but step counting may then be unavailable. Daily activity totals are sent to your account database to sync progress.

4. Meal photos, food descriptions and AI features

If you choose meal analysis using a camera or gallery photo, or a food description and amount, the app shows a notice explaining that the information will be shared with OpenAI. The image or description is sent through a Supabase server function only after you consent. OpenAI estimates calories and nutrients. We do not retain the photo after analysis; if you add the result to your daily log, the meal name and nutrition values are saved. OpenAI may process the information under its own terms and privacy policy. A separate notice appears before a weekly report is requested; daily activity totals, workouts, and goals are sent to OpenAI only after you consent. The resulting report text is saved in your account. Outputs are estimates, not medical advice.

5. How we use data

We use data to sign you in, operate app features, save and sync progress, calculate goals, show information you choose to share with accepted friends, provide support, and protect the service. We do not sell your data or use your health data or profile to personalize ads or track you across apps.

6. Advertising, service providers, and sharing

The Android version may show Google AdMob banner ads. We request non-personalized ads and set the maximum content rating to G. Google may process advertising identifiers, device information, IP address, ad impressions and interactions, and consent choices to serve and measure ads and prevent fraud. We do not send your health logs or profile to advertisers. Consent options may appear when required; you can also review ad settings in your device settings. Supabase processes account, sync, and database data. The first time you sign in, the app asks your operating system for notification permission. If you allow it, your device push token is stored in Supabase and used through Expo and your operating system's notification provider for friend or feature notifications; local water and weekly report reminders may also be scheduled. You can deny permission or turn notifications off later in your device settings; on iPhone, go to Settings > Notifications > Macromate. OpenAI processes meal photos, food descriptions, and report summaries when you request those features. The store where you subscribed and RevenueCat process subscription status if purchases are enabled. Exercise images are loaded from GitHub or jsDelivr; those services may receive your IP address and normal connection information. Accepted friends can see only categories you enable, and you can turn sharing off in Friends settings. See Google's Privacy Policy for details.

7. Processing locations and transfers

The Macromate Supabase project database is currently hosted in the Mumbai, India region (ap-south-1). OpenAI and other providers may process data outside Saudi Arabia depending on the service. We limit data to what is needed for the feature and take account of safeguards required by applicable Saudi rules for international transfers. Contact us for questions about processing and transfers.

8. Retention and deletion

We keep account and activity data while your account is active or as needed to provide the service. You can start account deletion from the Account screen or use our external account deletion request page; these request deletion of your profile and associated data. Your device push token is deleted when you sign out or delete your account. Turning notifications off in device settings stops them from being displayed but does not automatically delete the stored token. Backups or limited logs may remain temporarily for recovery, security, or legal obligations, then are removed under the provider’s retention cycle. Water and report reminders are local notifications managed in your device settings.

9. Security and your rights

We use encrypted connections in transit and restricted database access rules. No method is completely secure. You may ask about the purpose and legal basis of processing, access or obtain your data in a clear format, correct, complete, or update it, request destruction when it is no longer needed, and withdraw consent where processing is based on consent. Email the address above from your account email; we may request reasonable verification to protect your account and will respond under applicable deadlines and procedures. You may also complain to the competent authority in Saudi Arabia.

10. Children and changes

The app is not directed to children under 13. If you are under the age at which you can legally consent, use the app with your guardian where required by law. We may update this Policy when the app or laws change; the latest update date is shown above.

11. Health information

Macromate is not a medical device. App data and estimates are for general tracking and do not replace professional advice.