SanoMacro Privacy Policy
This Privacy Policy describes how SanoMacro ("SanoMacro," "we," "us," or "our") collects, uses, discloses, and protects information when you use the SanoMacro iOS application, web application, and related services (collectively, the "Services"). It describes the data practices of the version of the Services that is currently deployed.
Information We Collect
- Account information: your email address, the sign-in provider you used (Google or Apple), and a provider-specific account identifier. We do not receive or store your password.
- Profile and settings: the display name shared by your sign-in provider (which you can change), preferred weight unit, target weight, and daily calorie, protein, carbohydrate, fat, and fiber goals.
- Goal setup profile: your goal, sex, age, height, weight, activity level, desired rate of change, optional target weight, optional protein preference, and whether you completed or skipped goal setup.
- Food log data: food names, calories and nutrients (protein, carbohydrates, fat, fiber, sugars, saturated fat, sodium, salt), serving sizes, tags, the meal date and time, and the time the entry was created.
- Saved foods and recipes: custom foods, saved meals and recipes, their ingredients, nutrition values, and optional thumbnails.
- Insight feedback: your thumbs up, thumbs down, and hide-for-a-week feedback on dashboard insights.
- Weight tracking data: weight values and the dates they were logged, and whether each daily value was entered by you or imported from Apple Health or Withings.
- Imported body measurements (iOS app, optional): if you connect Apple Health or Withings, we store each imported weight, body fat percentage, fat mass, lean mass, muscle mass, bone mass, body water and visceral fat reading, with its time, its source (Apple Health or Withings), and the name of the app or device that recorded it.
- Withings connection (optional): your Withings user identifier and the access and refresh tokens Withings issues when you connect your account. Tokens are encrypted at rest.
- Meal photos: photos you take or choose from your photo library for image-based meal estimation. Photos you attach to a saved food entry are stored on our servers together with that entry so they can be shown in your log.
- Search and description text: food search queries, barcodes you scan, and free-text meal descriptions you enter.
- Subscription and purchase history (iOS app): if you subscribe to SanoMacro Pro, Apple sends the app and our server signed records of the purchase. We store, linked to your account, the App Store environment (live or test), the original and latest transaction identifiers, the product, the purchase, expiry, renewal and grace-period dates, whether the subscription will auto-renew or is in a billing retry, and the date and reason of any refund or revocation. To tie a purchase to your account, the app gives Apple your SanoMacro account identifier as the purchase's account token. We also keep a record of each subscription notification Apple sends our server (its identifier, type and date). Apple processes the payment: we never receive or store your card, bank or other payment details, or your Apple Account password.
- Session data: a hashed refresh token and its expiry date for each signed-in device, used to keep you signed in.
- Server logs: standard request metadata (such as IP address, request path, and timing) generated automatically by our hosting infrastructure for security and troubleshooting. These logs are kept for a short period and are not linked to a marketing or analytics profile.
Some information stays on your device only: recently used foods, and your sign-in tokens (stored in app preferences on the iOS app, or browser local storage on the web).
How We Use Information
- To sign you in, keep you signed in, and secure your account.
- To store and display your food logs, weight history, goals, and progress.
- To calculate and save calorie and macro goals from the profile information you provide during goal setup.
- To provide food search, barcode lookup, and nutrition reference data.
- To estimate the foods and nutrition in your meal photos and text descriptions.
- To check whether your account has an active SanoMacro Pro subscription, unlock Pro features, handle renewals, refunds and revocations reported by Apple, and prevent a purchase from being used by a different account.
- To operate, maintain, troubleshoot, and secure the Services.
We do not use your data for advertising, and we do not build marketing or behavioural profiles.
Third-Party Services
The Services currently send data to the following third parties, only for the purposes described:
- Google Sign-In and Sign in with Apple authenticate you. We receive your email address, name, and an account identifier from the provider you choose.
- OpenFoodFacts and USDA FoodData Central receive the barcodes and search terms you enter in order to return product and nutrition data. No account information is sent.
- OpenRouter (routing to Google Gemini models) receives your meal photos, optional meal descriptions, and natural-language food queries in order to identify foods and estimate portions and nutrition. Photos are sent for analysis only when you use the photo feature; no account information is sent with them.
- Gemini or OpenRouter, depending on the configured AI provider, receives your goal-coach messages and the profile information needed to provide goal-setting guidance. SanoMacro does not store goal-coach chat messages; your saved goal profile and goals are stored when you apply a plan.
- Google Gemini or OpenRouter, depending on the configured AI provider, receives aggregated nutrition statistics and food names from your log to word personalised dashboard insights. Insight text is cached briefly, and your insight feedback is stored.
- OpenRouter receives your Ask questions and the summaries of your logged data needed to answer them; TypeSafe receives your Ask questions and the replies for safety checks; Ask conversations are not stored.
- TypeSafe receives your search text, meal descriptions, photo notes, goal-coach messages, names of saved foods, your display name, text read from your food photos (never the photos themselves or account information) and candidate food names, to rank search results and to detect attempts to misuse the AI features. Only the resulting scores are logged, never the text.
- Withings, only if you connect it from the iOS app: you sign in on Withings' website and authorise SanoMacro to read your body measurements. Withings sends us those measurements and notifies our server when new ones are recorded. We send Withings nothing about you other than the authorisation request.
- Apple processes SanoMacro Pro purchases, renewals, cancellations and refunds through the App Store. Apple receives your SanoMacro account identifier as the purchase's account token and sends us signed purchase records and subscription notifications. Apple's handling of your payment information is governed by Apple's privacy policy.
- Railway hosts our servers, PostgreSQL database, and Redis cache.
- Grafana Labs (Grafana Cloud) receives technical telemetry from our servers and apps (request traces, performance metrics, error reports, and server logs) to monitor reliability. Our team also uses it to view an internal operations dashboard showing your email address, display name, sign-in provider, sign-up and last-activity dates, food log counts and daily nutrition totals, goals, and weights you entered manually. Data imported from Apple Health or Withings is never sent to Grafana Labs.
We do not use advertising SDKs or third-party analytics that track you across other companies' apps or websites. Third-party providers process information under their own terms and privacy policies.
Apple Health (HealthKit)
If you choose to connect Apple Health in the iOS app, SanoMacro asks for permission to read your weight, body fat percentage, and lean body mass. It never writes to Apple Health. The readings are uploaded to our servers so they can appear in your weight history, trends, insights, and weekly plan check-ins. Health data is used only to provide these features. It is never used for advertising or marketing, never sold, and never shared with third parties, including the AI providers listed above, except that aggregated weight trends may be included in the summaries described for insights and Ask. You can revoke access at any time in the Health app under Sharing → Apps → SanoMacro, or disconnect it in SanoMacro's Settings.
Camera and Photo Library Access
If you grant camera permission, SanoMacro uses the camera to scan barcodes and to take meal photos. Barcode recognition happens on your device and no barcode images leave it. Meal photos are uploaded to our servers and forwarded to the AI provider above to produce food and nutrition estimates. With your permission, you may also select up to four photos from your photo library for the same purpose. Camera and photo access are optional, but these features will not work without them.
Disclosure of Information
We disclose information only to the providers above as needed to deliver the Services, to comply with legal obligations, or to protect users and the Services. We do not sell personal information, and we do not share personal information for cross-context behavioural advertising.
Storage and Retention
- Account, settings, food log, weight, imported body measurement, and photo data are kept for as long as your account exists. Disconnecting Apple Health or Withings stops new imports; Withings tokens are deleted when you disconnect.
- Your goal profile is kept for as long as your account exists. Goal-coach chat messages are not stored by SanoMacro.
- Food entries you delete are hidden from your log immediately but are marked as deleted rather than erased; they, and any photo attached to them, remain in our database until your account is deleted.
- Subscription and purchase records are kept for as long as your account exists, so a refund or revocation reported later by Apple can still be applied. Subscription notifications that do not match any SanoMacro account, and the records of processed notifications, are deleted after 90 days.
- Each sign-in session expires 30 days after you sign in, or earlier when you sign out.
- Results from food databases and AI analysis may be cached on our servers for up to 12 hours, keyed by the content of the request rather than by your account, to speed up repeated lookups.
- Personalised insight text may be cached for up to six hours; insight feedback is kept with your account.
Security
Data is transmitted over HTTPS. Refresh tokens are stored only as hashes, access tokens are short-lived, and all food and weight data is scoped to your account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Choices and Rights
- You can choose whether to use the camera and photo features.
- You can edit or delete food and weight entries, and change your display name and goals, in the app.
- You can sign out to end the session on a device.
- You can delete your account and all associated data at any time in the app under Settings → Delete account. This immediately erases your profile, food log, photos, weight and body measurements and subscription records, and disconnects Withings. Deleting your account does not cancel an App Store subscription; cancel it in your Apple Account's subscription settings. To request a copy of your data, or if you can no longer sign in, contact us at the address below and we will complete the request within 30 days.
Children's Privacy
SanoMacro is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.
International Data Processing
Our servers and the providers listed above may process information in countries other than the one in which you reside, including the United States.
Changes to This Policy
We may revise this Privacy Policy from time to time. If we make material changes, we will update the version published on this page and revise the effective date shown above.
Contact
If you have questions about this Privacy Policy or SanoMacro's privacy practices, you may contact us at [email protected].