Consumer Health Data Privacy Policy
Version: VERSION · Effective date: EFFECTIVE DATE Published by: LEGAL ENTITY NAME, REGISTERED ADDRESS Requests and questions: privacy@zmacros.com
Who this is for
This policy is for people in Washington State, Nevada and Connecticut, and for anyone who wants a plain account of what ZMacros does with health data. It sits alongside our Privacy Policy; for consumer health data, this policy applies.
1. The health data we collect
"Consumer health data" is personal information, linked or reasonably linkable to you, that identifies your past, present or future physical or mental health. In ZMacros:
| Category | What it covers |
|---|---|
| Weight | Each weigh-in, with its date |
| Age | Your year of birth (not a full date of birth) |
| Food log | Foods, amounts, meals and times, with their calories and nutrients; saved meals, presets, favourites and custom foods |
| Body details and goals | Sex, height, activity level, goal, goal weight, rate of change, targets and your weekday calorie schedule |
| Exercise | Workouts you log, and walks, runs, rides and hikes you record |
| Health app data | From Apple Health, only the types you allow: steps, active energy, exercise minutes, workouts and body fat, plus walking and running distance and flights climbed, each with its own switch. On Android (later), the same from Health Connect |
| Pregnancy or breastfeeding | Only if you choose it in the nutrient settings, to set your nutrient reference values. Kept on your phone only, never sent to our servers, and included in your export |
| Fasting | Fasting timer sessions and their history, kept on your phone |
| Edits and picks | Entries you changed (with the old amount) or deleted (with its calories), entries added for an earlier day, and which search result or suggestion you tapped, with the meal and hour (never the words you searched). Kept on your phone only, up to 180 days, never sent to our servers, and included in your export |
| Activity location | GPS route while you record an activity you started |
| Meal photos | A photo you choose to scan with the AI scanner |
| AI corrections | What the AI suggested for a photo and what you changed it to |
| Estimates | Figures we calculate from the above, such as your energy needs |
| Usage records | Only if you turn on in-app analytics: that you logged a food (not what), that you saved a meal scan and how much you changed its calories (Privacy Policy section 2.10) |
Apart from the pregnancy or breastfeeding setting above, we do not collect data about reproductive or sexual health or gender-affirming care. We do not collect biometric or genetic data, diagnoses, prescriptions, or data from a healthcare provider. ZMacros has no direct link to Google Fit, Fitbit, Garmin, Strava, Oura or other fitness services.
2. Why we use it
To run the features you ask for: your diary and trends, targets, nutrient reference values and energy estimates, activity recording, syncing between your devices if you have an account, and naming the foods in a photo you choose to scan. We also use your corrections to AI results to check and improve how scanned foods are matched to our food database (see the AI Features Notice), and we use your data to apply fair-use limits and keep the service secure. If you turn on in-app analytics, the usage records count how the app is used, so we can fix what does not work.
We do not use it for advertising, marketing profiles, research or training AI models, or to make decisions about you such as credit, insurance or employment.
3. Where it comes from
From you; from Apple Health (or Health Connect), with your permission, which you can withdraw in your phone's settings (ZMacros only reads and writes nothing back); from your phone's location, only while you record an activity you started; and from our own calculations.
4. Your consent
We ask before collecting health data: on the "Before you start" page when you first use the app ("Store my food, weight and activity"), in your phone's permission screens for Apple Health and location, and separately before your first AI photo scan.
Withdraw any of these in Settings → Privacy and consents. Withdrawing the health-data consent pauses the app, so nothing new is saved. What you saved before stays, on your phone and (with an account) on our servers, until you delete it; the app offers to delete it straight away.
With an account, we record each consent and withdrawal on our servers, with the date and the version of the wording. Without one, the record stays on your phone.
5. We do not sell it
We do not sell consumer health data, and we do not ask for the signed authorisation a sale would need. We do not use geofencing to track people or send them messages or ads.
6. Who receives it
6.1 Service providers acting on our instructions
| Provider | What they receive | Why |
|---|---|---|
| Supabase (on AWS, United States) | Your account's data. Some server functions run in the Supabase location nearest you | Storage and sync |
| OpenAI (United States) | Up to 3 meal photos per scan, with the meal you are logging, the hour on your phone, your country (two letters) and up to 8 names of foods you log often from our public food database (and a note, only if you write one). No name, account ID, body data or foods you created | To name the foods. We keep no copy of the photo on our servers and ask OpenAI not to store it; OpenAI may keep it for up to 30 days to check for abuse |
| RevenueCat (United States) | A random ID (your account ID once you sign in), device and app details, and your purchases. No health data | To check your plan |
6.2 Coaches
ZMacros has no coaching features in this version, so no coach can see your data.
6.3 Others
- Apple and Google handle purchases as app stores and get no health data from us.
- Apple Health data is never sent to our servers or anyone else.
- Food databases. Food searches and barcodes go to Open Food Facts (from your phone or through our server) and, where available, to the USDA database through our server, without account details.
- Maps. Routes are stored only on your phone. To draw a map, the app loads map images from Apple Maps on iPhone (Google Maps on Android), which sees the area shown and your IP address.
- The law. We disclose data when the law requires it, and tell you unless we may not.
We do not give anything you log to a data broker, ad network or analytics company.
Ads. On the free plan ZMacros shows non-personalised ads from Google AdMob. To show and count them, Google receives your device and network details (such as your IP address and device type) and the fact that the ad appears in ZMacros. It receives nothing you log, no ZMacros account ID and no advertising ID, and ads are not chosen using your food, weight, health or location.
6.4 Tracking over time
No third party collects your consumer health data over time and across other apps or websites through ZMacros.
Google's ad code in the free plan collects device and network information, which Google may use across apps, but it receives nothing you log in ZMacros.
7. How long we keep it
On your phone, until you delete it, remove the app, or sign out and remove your data from the phone. The record of your edits and picks drops anything older than 180 days. On our servers, until you delete your account, except:
- Usage records (if analytics is on) are deleted after 13 months, or with your account if sooner.
- Single entries you delete leave the app at once, but our server keeps a hidden "deleted" marker, which can still hold the entry's details, until you delete your account. This lets the deletion reach your other devices.
- Banned or suspended accounts. If your account was suspended or banned when you deleted it, we keep a scrambled (salted, one-way) copy of your email with the reason, for 6 months to 6 years depending on your country and the seriousness, so staff can spot a repeat application. It holds no health data.
- Audit records of consent changes, security events and staff actions are kept for 7 years, including after deletion, to show what happened and defend legal claims. They hold account IDs, the action and the time, not health values.
- OpenAI may keep a scanned photo for up to 30 days.
Copies in our hosting provider's backups are deleted when those backups expire on their normal cycle, within 7 days. We never restore data from a backup without first deleting again everything that was deleted after that backup was made.
8. Your rights
You can:
- Know and access. Ask whether we collect, share or sell your consumer health data, and get a copy: Settings → Data & Privacy → Export my data, or write to privacy@zmacros.com for a full copy including server-only data. On request we also send you a list of every third party and affiliate that has received your consumer health data (we have no affiliates), with an email address or web form for each.
- Correct it. Edit or delete entries in the app, or ask us at privacy@zmacros.com to correct anything you can't change yourself.
- Withdraw consent to collecting or sharing it, at any time (section 4).
- Delete it in Settings → Account → Delete my account, or by writing to privacy@zmacros.com from your account's email address. We delete it from our servers, subject to section 7, and pass the deletion on to service providers that hold it. Meal photos reach OpenAI without your name, email or account ID, so we cannot ask it to find yours.
- Not be treated differently for using these rights.
We reply within 45 days, and may extend once by 45 more days, telling you why before the first period ends. We may need to confirm a request comes from the account holder, and ask for no more than that needs.
Appeals. If we refuse, reply to our decision or write to privacy@zmacros.com with "Appeal" in the subject. We answer within 45 days with our reasons. If we still refuse, you can complain to the Attorney General of Washington (https://www.atg.wa.gov/file-complaint), Nevada (https://ag.nv.gov/) or Connecticut (https://portal.ct.gov/ag). Washington residents can also sue under the Consumer Protection Act for breaches of the My Health My Data Act.
9. Security
Data is encrypted in transit and stored encrypted by our hosting provider. Database rules limit each account to its own data. Our staff tools show no health data and log every change staff make; only the people who run the database can reach it directly, to run, secure or repair the service. Report security problems to security@zmacros.com. If a breach affects your health data, we will tell you and the authorities as the law requires, including under the FTC's Health Breach Notification Rule.
10. HIPAA does not apply
ZMacros is a consumer app. We are not a health plan, clearinghouse or healthcare provider and do not act for one, so HIPAA does not cover data in ZMacros; the laws named here, the FTC Act and the Health Breach Notification Rule do.
11. Changes
Before a material change takes effect, we post the new version here with a new effective date and, if you have an account, email you. If a change adds a recipient or purpose, or keeps data longer, we ask for your consent again.
12. Contact
LEGAL ENTITY NAME, REGISTERED ADDRESS · privacy@zmacros.com