Privacy Policy

MacrAU ("we", "our", "the app") is an Australian calorie and macro tracking app. This policy explains what data we collect, how we use it, and your rights.

What stays on your device

All of the following lives in a private database on your phone. None of it leaves your device unless you choose to turn on cloud backup:

• Your food log — what you ate, when, and the macros
• Custom foods, recipes, and meal templates you've created
• Favourites and frequently logged items
• Your preferences — meal structure, energy unit, theme, all that
• Body stats for TDEE calculation (age, height, weight, sex, activity level)

What we send to our servers

When you use certain features, some data is sent to our servers. Everything is hosted in Sydney, Australia.

Authentication Optional

You can sign in with Apple or email/password if you want cloud backup. The app works perfectly without an account — it's completely optional.

Cloud backup Optional

If you turn on cloud backup, your food log database gets uploaded (encrypted at rest). You can delete it any time by deleting your account.

Food submissions

When you add a food, anonymised nutrition data (name, barcode, macros) may be shared to improve the community database. These are tied to a random device ID — not your identity.

Food reports

If you flag a food as incorrect, we store the report with your random device ID. That's it.

Device identifier

On first launch, the app creates a random UUID for anonymous submissions and rate limiting. It's not connected to your Apple ID, email, or anything personal.

Nutrition label photos

When you snap a photo of a nutrition panel, it's sent to Google's Gemini API (through our server) for text extraction. The photo is processed in memory, never saved, and immediately discarded. Only the extracted numbers come back to your phone.

Apple HealthKit Optional

If you grant permission, we read active energy burned from Apple Health to show exercise data. We don't write anything to HealthKit. This data stays on your device — never sent to us. The app works great without it.

Crash reporting

We use Sentry to catch crashes and bugs. Reports are anonymous — no personal info included. This just helps us fix things faster.

What we don't collect None

• Location data
• Contacts or address book
• Browsing history
• Advertising identifiers (IDFA)
• Microphone or call data
• Data from other apps
• Third-party analytics (no Firebase, no Mixpanel, nothing)
• Ads or ad networks of any kind

Security

• Servers hosted in Sydney, Australia
• Cloud backups encrypted at rest
• All communication over HTTPS/TLS
• Industry-standard authentication protocols

Your rights

Export

You can export your full food log as CSV any time from Profile > Export Data.

Delete

• Local data: Uninstall the app and it's gone
• Cloud data: Delete your account (Profile > Account > Delete Account) and we remove all backups and de-identify any submissions

Australian Privacy Act

If you reckon we've breached the Australian Privacy Principles, get in touch or lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Kids

MacrAU isn't designed for children under 13. We don't knowingly collect data from kids.

Changes

We might update this policy down the track. If anything major changes, we'll let you know in the app. The date up top tells you when it was last revised.

Get in touch

Privacy questions or data requests: privacy@macrau.app