Privacy Policy
Last updated: July 17, 2026
1. Who We Are
MacroLab (“we”, “us”, “our”) is an AI-powered calorie tracking and nutrition assistant available as a mobile application and at g10app.com. The service is operated by Dmitrii Trifonov (sole proprietor).
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use MacroLab.
2. Data We Collect
2.1. Information you provide
- Account data: email address (via Apple Sign-in, Google Sign-in, or email link through Firebase Authentication)
- Body & health data: gender, birth year, height, weight, body fat level, activity level, fitness experience
- Nutrition goals: target weight, weekly weight change rate, calorie and macronutrient targets, protein preference, calorie distribution across the week
- Food entries: meal logs including food items, portions, calories, macronutrients, and meal timing
- Photos: images of meals and package labels you upload for recognition, and images you attach to AI coach messages
- Voice recordings: audio you submit for food transcription
- Custom foods & recipes: food items, recipes, saved meals, and bookmarks you create
- Coaching conversations: messages you exchange with the AI nutrition coach
- Apple Health workouts: selected workout and activity information read with your permission
- Payment information: subscription plan choice and subscription status. We do not store payment card details — these are handled entirely by Apple and Yookassa.
2.2. Information collected automatically
- Usage analytics: app events such as feature usage and subscription events (processed by PostHog on EU servers and by Firebase Analytics)
- Error reports: crash reports, diagnostic logs, and performance information (processed by Firebase Crashlytics for the iOS app and by Sentry for the website and backend services)
- Device information: device model and operating system version (collected implicitly through analytics SDKs)
2.3. User-initiated support diagnostics
When you choose to send diagnostics while contacting support, we collect a limited log of app events, timestamps, error details, and app and device information. The log is linked to your support request and used only to investigate it.
Support diagnostics exclude food entries and photos, health and HealthKit data, body measurements, coaching messages, payment data, passwords, authentication tokens, precise location, and contact lists. Only authorised support personnel can access them.
2.4. Information we do NOT collect
- Advertising identifiers (IDFA / GAID)
- Precise location data
- Contact lists, calendar data, or browsing history
3. How We Use Your Data
- Provide the service: track nutrition, calculate calorie and macro targets, manage your weight program
- AI food recognition: process food photos and text descriptions to identify ingredients and estimate nutritional content
- AI coaching: provide personalised nutrition guidance based on your goals and eating patterns
- Manage subscriptions: process and manage your premium subscription
- Improve the app: analyse aggregated usage patterns, identify bugs, optimise performance
- Notifications: send service-related reminders (local on-device notifications only; we do not use remote push)
3.1. Legal basis for processing (GDPR)
| Purpose | Legal basis |
|---|---|
| Provide the service (nutrition tracking, calorie targets, weight programs) | Performance of a contract (GDPR Art. 6(1)(b)) |
| AI food recognition & coaching | Performance of a contract (GDPR Art. 6(1)(b)) |
| Manage subscriptions & payments | Performance of a contract (GDPR Art. 6(1)(b)) |
| Usage analytics & app improvement | Legitimate interest (GDPR Art. 6(1)(f)) |
| Error tracking & crash reporting | Legitimate interest (GDPR Art. 6(1)(f)) |
| Customer support diagnostics | Consent (GDPR Art. 6(1)(a)) |
| Processing body & health data for personalised targets | Explicit consent (GDPR Art. 9(2)(a)) |
You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. AI & Automated Processing
We use Google Gemini and OpenAI to recognise food, transcribe voice recordings, estimate nutritional content, generate meal feedback, and provide AI coaching. Depending on the feature, the data sent for processing may include photos, audio, transcripts, food and meal-log details, coach messages and recent conversation history, profile and program context, and relevant Apple Health workout information. Google and OpenAI process this data under their API terms.
AI-generated nutritional data is an estimate. It may contain inaccuracies and does not constitute medical or dietary advice.
5. Third-Party Services
We share data with the following third parties solely to operate the service:
| Service | Purpose | Data shared |
|---|---|---|
| Google Firebase Authentication | Authentication | Email, sign-in credentials |
| Google Firebase Analytics | Usage analytics | App events, pseudonymous user and backend identifiers, selected user properties, app and device information |
| Google Firebase Crashlytics | Crash and error diagnostics | Crash reports, diagnostic logs, pseudonymous user and backend identifiers, app and device information |
| Google Gemini AI | Food recognition & coaching | Photos, food descriptions, meal and coach context, profile and program details, relevant workout information |
| OpenAI | Voice transcription, food recognition, AI processing | Voice recordings, transcripts, photos, food descriptions, edit instructions, coach messages and relevant context |
| Apple | Sign-in with Apple, In-App Purchases | Apple ID, subscription data |
| Yookassa | Web payments | Payment transaction data |
| PostHog | Analytics (EU servers) | App events, pseudonymised user properties (e.g. age group, BMI category, goal type) |
| Sentry | Website and backend error tracking | Error details, stack traces, and related service, request, browser, and device information |
| Chatwoot | Customer support | Support messages, contact and device details, and diagnostics you choose to send |
| AWS S3 | Private file storage | Uploaded food and coach-chat photos, and support diagnostics you choose to send |
We do not sell your personal data to any third party.
6. Data Storage & Security
- All data is transmitted over HTTPS / TLS encryption.
- Data is stored on cloud servers with role-based access controls.
- Food photos are stored in encrypted cloud storage (AWS S3).
- Payment card details are never stored on our servers — they are handled entirely by Apple and Yookassa.
7. Data Retention
- Account data and food logs are retained for as long as your account is active.
- When you delete data within the app it is marked as deleted and retained for up to 30 days for recovery purposes, after which it is permanently removed.
- You can delete your account directly from the app (Profile → Delete Account). All associated data will be permanently removed. You may also request deletion by emailing hello@g10app.com.
- Analytics and error-tracking data is retained according to each provider’s own retention policy.
- Support diagnostic logs you choose to send are scheduled for deletion 72 hours after upload and removed by our cleanup process.
8. Your Rights
Depending on your jurisdiction you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to or restrict processing
- Receive your data in a portable format
- Withdraw consent at any time
To exercise any of these rights, email us at hello@g10app.com.
9. Children’s Privacy
MacroLab is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. International Data Transfers
Your data may be processed in countries other than your country of residence. We take reasonable steps to ensure appropriate safeguards are in place for such transfers. Analytics data sent to PostHog is processed on EU servers; other providers may process data internationally under their safeguards and contractual terms.
11. Changes to This Policy
We may update this policy from time to time. The current version is always available at g10app.com/privacy. Continued use of the app after changes constitutes acceptance of the updated policy.
12. Contact
For questions about this Privacy Policy or your personal data:
- Email: hello@g10app.com
- Website: g10app.com