Privacy Policy

The short version

• Your diary, weight and body stats are health data. We only use them to run Macrocellar for you, and only with your permission.
• We never sell your data, never show ads, never send health data to advertisers and never use it to train AI.
• A coach can only see your data after you ask them to coach you and they accept. You can leave at any time.
• You can download everything (Settings → Your data) or delete your account (Settings → Account) at any time.
• Our servers are in the EU (Frankfurt). Card payments for coaches are handled by Stripe; we never see card numbers.

Who we are

Macrocellar is run by Szymon Osipowicz, trading as Macrocellar (a sole trader). Email [email protected]. We are the controller of your personal data. Privacy questions: [email protected].

EU representative (UK GDPR / GDPR Article 27): [EU representative, needed once we offer Macrocellar in the EU].

Who this policy covers

• Members: people who use the Macrocellar app to track food, weight and progress (13 and over).
• Clients: members who ask a coach to coach them in the app.
• Coaches: people who use the coaching website and pay for a coach subscription (18 and over).
• Website visitors, including people who join the early-access list.

If you live in Washington, Nevada or Connecticut (USA), our Consumer Health Data Privacy Policy also applies. Under 18? There’s a plain-English guide for you.

What we collect

• Account: name, email address, password (stored only as a secure hash) or your Apple or Google sign-in, and your profile icon. If you use Sign in with Apple and choose to hide your email, we only receive Apple’s private relay address.
• About you (health data): birth date, sex, height, weight and weigh-ins, activity level, weight goal and target, and the calorie and macro targets worked out from them.
• Your diary (health data): the foods, meals, recipes and amounts you log, favourites, custom foods, meal sections and your streak.
• Journal notes you write, including which days you mark “Just for me”.
• Coaching (if you have a coach): your join request and intake form (goals, allergies, injuries, schedule and your coach’s questions), check-ins (ratings and answers), meal plans, targets your coach sets, and their replies. Coaches can also keep private notes about clients.
• Things you share: recipes you share with other people, and barcoded foods you add, whose nutrition (never your name) is added to a shared food catalogue.
• Feedback and reports you send us, such as app ratings, comments and reports about wrong food data.
• Device data: a push notification token, your phone’s platform (iOS or Android) and time zone, so reminders and coach updates arrive at the right time.
• Coach billing: your plan, subscription status, Stripe customer and subscription IDs, discount codes used, and a record of what you agreed to at checkout (terms version, price shown, time, IP address and browser). To stop free trials being reused we keep a one-way hash of your email and your card’s fingerprint (never the card number).
• Waitlist (early-access list): your email, whether you track your food or coach, when you signed up, which wording of the consent line you agreed to, and whether your thank-you email was sent.
• Messages you send us through a contact form: your name (if you give it), email, what it’s about, your message and our replies. If you’re signed in, the message is linked to your account. To stop spam we keep a one-day hash of your IP address, never the address itself.
• Security logs: sign-in times, IP addresses and error logs kept by our hosting provider.

We don’t collect your location, contacts, photos or anything from other apps. The camera is only used to scan barcodes and nothing is recorded.

Health data and your consent

Your diary, body stats, weigh-ins, journal and check-ins can reveal information about your health, so the law treats them as special category data. We only process them because you give us your explicit consent: an unticked box you tick when you create your account (UK GDPR Article 9(2)(a)). We keep a record of when you agreed and to which version of this policy, and you can see it in your data download.

You can withdraw that consent at any time by deleting the data or your account. Because Macrocellar can’t work without it, withdrawing consent means we stop providing the tracking features. Withdrawing doesn’t make earlier processing unlawful.

Why we use it, and our lawful basis

• To provide Macrocellar (your account, diary, targets, reminders, coaching features): performance of our contract with you (Article 6(1)(b)), plus your explicit consent for health data.
• To share your data with a coach you choose: your consent, given in the join agreement that lists exactly what they can see and change. You can withdraw it by leaving your coach.
• To send account emails (sign-in codes, billing receipts and reminders): contract, and legal obligation for consumer-law notices.
• Push notifications and reminders: your consent, through your phone’s permission and the switches in Settings → Notifications.
• Coach subscriptions, tax and accounting records: contract and legal obligation (HMRC requires 6 years).
• Preventing fraud and abuse (one free trial per person, rate limits, security logs): our legitimate interests in keeping Macrocellar safe and fair.
• Waitlist emails (a thank-you when you join and one when Macrocellar opens, nothing else): your consent, given on the form. Every email has an unsubscribe link; unsubscribing deletes your email from the list.
• Answering messages you send us through a contact form: our legitimate interests in helping you (and, for privacy requests, our legal obligation).
• Improving Macrocellar from feedback you send: legitimate interests. We don’t use analytics or tracking tools.

Automated calculations. Macrocellar works out suggested calorie and macro targets from your details. This doesn’t produce legal or similarly significant effects, you can change the targets at any time, and they never go below a safe minimum (1,200 kcal for women, 1,500 for men).

Who can see your data

• You.
• Your coach, only while you’re coached and only what the join agreement lists. They can’t see your email, password or birth date, or journal days you keep “Just for me”. Coaches must sign in with two-factor authentication.
• People you share a recipe with see that recipe.
• Macrocellar staff, only what their role needs to look after your account (for example, support can see your account and billing status to answer you, never your diary or health data). Staff sign in with two-factor authentication and every lookup is recorded.
• Our service providers (processors), who only act on our instructions under data processing agreements. They are listed on Service providers.
• Authorities, only when the law requires it, or to protect someone’s life.
• A buyer of Macrocellar, if the business is ever sold. They would have to keep this policy’s promises, and we would tell you first.

We never sell or rent personal data, never share it for advertising, and never send health data to advertising, social media or analytics companies.

Where your data is stored

Our database runs on Supabase in the EU (Frankfurt, Germany), which the UK recognises as adequate. A nightly backup copy is also kept on our own password-protected computer in the UK for up to 14 days, so data can be restored if something goes wrong. A few providers process some data in the USA (Stripe for coach payments, Expo for delivering push notifications, Google for Android push and Google sign-in, Apple for iPhone push and Sign in with Apple). Those transfers are protected by the UK–US Data Bridge (where the provider is certified) or by the ICO’s International Data Transfer Addendum / EU Standard Contractual Clauses.

How long we keep it

• Your account and everything in it: until you delete it. Deletion is immediate in our live database; backups roll off within 30 days.
• Coaching data (check-ins, plans, intake form): kept in your account until you delete it. When coaching ends, your coach immediately loses access. Their private notes about you are deleted when their coach account is deleted.
• Barcoded foods you shared: the nutrition stays in the shared catalogue without any link to you.
• Coach billing records: 6 years after the end of the tax year, as UK tax law requires, even if the account is deleted. They contain no diary or health data.
• Free-trial check (email hash, card fingerprint): as long as we offer free trials.
• Waitlist: until Macrocellar launches and for 12 months after, or until you unsubscribe (we delete it straight away).
• Messages you send us: up to 2 years after the conversation is closed, so we can follow up. Ask us to delete one sooner at any time.
• Security logs: up to 90 days.

Your rights

You have the right to:

• access your data: Settings → Your data downloads a copy of everything, or email us;
• correct it: edit your profile, targets and diary in the app;
• delete it: Settings → Account → Delete account (see Delete your account);
• move it (portability): the download is a standard JSON file;
• withdraw consent at any time (leave your coach, turn off notifications, unsubscribe, or delete your data);
• object to or restrict processing based on our legitimate interests.

Email [email protected] for anything you can’t do in the app. We reply within one month, and we may ask you to confirm your identity. It’s free.

Children and teenagers

You must be at least 13 to use the Macrocellar app, and 18 to be a coach. Our system refuses younger birth dates. If you’re 13 to 17, privacy settings are high by default: we don’t market to you, profile you or share anything unless you choose to (for example, by asking a coach to coach you). We have a guide written for you. If you think a child under 13 has an account, email us and we’ll delete it.

Security

Data is encrypted in transit (HTTPS) and at rest. Database rules make sure each person can only reach their own data, coaches need two-factor sign-in, sign-in sessions on phones are kept in the device’s secure storage, and no card numbers ever reach us. If a breach puts your rights at risk, we’ll tell you and the ICO as the law requires (within 72 hours for the ICO).

Cookies

We don’t use advertising cookies or tracking pixels. Optional analytics only ever run if you choose “Allow analytics” in the cookie banner, and we don’t use any yet. See the Cookies & storage policy.

Complaints

Please tell us first at [email protected]; see Complaints. We acknowledge data protection complaints within 30 days. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or 0303 123 1113, or to the data protection authority where you live.

Changes to this policy

We’ll show the date of the latest version at the top. If a change affects how we use your data, we’ll tell you in the app or by email before it applies, and ask for your consent again where the law requires it.