Privacy Policy

Last updated: October 7, 2026

1. Controller and contact

Macromate is operated by ALHAZMI in the Kingdom of Saudi Arabia. For privacy questions or rights requests, contact abash.alhazmi29@gmail.com.

2. Data the app processes

• Account: email address, username, and account identifier needed for sign-in.
• Profile and goals: age, height, weight, sex, activity level, and fitness goal. This information is saved to your Supabase account profile to calculate and sync goals.
• Daily log: steps, water, meals and calorie/protein/carbohydrate/fat values, and any weight you choose to log.
• Workouts: routines, exercises, weights, repetitions, sets, and progress.
• Friends and challenges: friend requests and status, challenge membership, and data categories you choose to share with friends.
• Subscriptions: if you make a paid purchase when available, the service receives subscription status and transaction information needed from the store and RevenueCat; Macromate does not receive your card number.

3. Steps and permissions

The app asks permission to use your device’s motion sensor to count steps. On Android it may ask to read step counts from Health Connect when available; it does not write data to Health Connect. You can deny or revoke permission in your device settings, but step counting may then be unavailable. Daily activity totals are sent to your account database to sync progress.

4. Photos and AI features

If you choose meal-photo analysis, the app first shows an in-app notice explaining that the image will be shared with OpenAI. The image is sent through a Supabase server function only after you consent; you can decline and enter food manually. OpenAI estimates the meal name, calories, and nutrients. The app does not save the image in your account tables, and OpenAI may process it under its own terms and privacy policy. A separate notice appears before a weekly report is requested; daily activity totals, workouts, and goals are sent to OpenAI only after you consent. The resulting report text is saved in your account. Outputs are estimates, not medical advice.

5. How we use data

We use data to sign you in, operate app features, save and sync progress, calculate goals, show information you choose to share with accepted friends, provide support, and protect the service. We do not sell your data, use it for advertising, or track you across apps.

6. Service providers and sharing

Supabase processes account, sync, and database data. OpenAI processes a meal photo or report summary when you request the feature. Apple App Store or Google Play and RevenueCat process subscription status if purchases are enabled. Exercise images are loaded from GitHub or jsDelivr; those services may receive your IP address and normal connection information. Accepted friends can see only categories you enable, and you can turn sharing off in Friends settings.

7. Processing locations and transfers

The Macromate Supabase project database is currently hosted in the Mumbai, India region (ap-south-1). OpenAI and other providers may process data outside Saudi Arabia depending on the service. We limit data to what is needed for the feature and take account of safeguards required by applicable Saudi rules for international transfers. Contact us for questions about processing and transfers.

8. Retention and deletion

We keep account and activity data while your account is active or as needed to provide the service. You can start account deletion from the Account screen; this requests deletion of your profile and associated data. Backups or limited logs may remain temporarily for recovery, security, or legal obligations, then are removed under the provider’s retention cycle. Reminders are local notifications managed in your device settings.

9. Security and your rights

We use encrypted connections in transit and restricted database access rules. No method is completely secure. You may ask about the purpose and legal basis of processing, access or obtain your data in a clear format, correct, complete, or update it, request destruction when it is no longer needed, and withdraw consent where processing is based on consent. Email the address above from your account email; we may request reasonable verification to protect your account and will respond under applicable deadlines and procedures. You may also complain to the competent authority in Saudi Arabia.

10. Children and changes

The app is not directed to children under 13. If you are under the age at which you can legally consent, use the app with your guardian where required by law. We may update this Policy when the app or laws change; the latest update date is shown above.

11. Health information

Macromate is not a medical device. App data and estimates are for general tracking and do not replace professional advice.