Service Providers (Sub-processors)
Version: VERSION · Last updated: EFFECTIVE DATE Published by: LEGAL ENTITY NAME, REGISTERED ADDRESS
These companies process personal information on our behalf to run ZMacros. Each works on our instructions under a data processing agreement that requires it to protect your data at least as well as our Privacy Policy does. We will update this page before we add or replace a provider that receives personal information. See the Privacy Policy for how we use your data.
| Provider | What it does | Data it receives | Location | Transfer safeguard (EU, UK, Switzerland) |
|---|---|---|---|---|
| Supabase, Inc. (on Amazon Web Services) | Database, sign-in, server functions | Your account and everything you sync: email, logs, weights, workouts, synced settings, consents, subscription status, referral record, feedback, safety and audit records | United States; server functions may run in the Supabase region nearest you | Standard contractual clauses, with UK and Swiss addenda |
| OpenAI | Reading meal photos you choose to scan | The photo (location and camera details removed), any note you typed, the meal and rough time, your two-letter country code and up to 8 public names of foods you log often. No name, email or account ID | United States | Standard contractual clauses |
| RevenueCat, Inc. | Tracking whether you have a paid plan | A random ID (your account ID once signed in), device platform, app version, IP address, purchases and renewals from the store. No health data | United States | Standard contractual clauses, with UK and Swiss addenda |
| Resend | Sending account emails, such as sign-in links and password resets | Your email address and the email's content. No health data | United States | EU-US Data Privacy Framework and UK Extension; standard contractual clauses for Switzerland |
| Vercel Inc. | Hosting our website and website dashboards | Your IP address, browser details and the pages you request | United States and Vercel's global network | Standard contractual clauses |
Other parties
These receive data under their own terms and privacy policies when you use a feature that involves them. They are not our processors.
| Party | When | What they receive |
|---|---|---|
| Apple | Downloads, purchases, Apple Health permission, Sign in with Apple on our website dashboards | Purchase details (Apple is the seller). ZMacros only reads from Apple Health and sends Apple nothing from it |
| Google Play, Health Connect, Sign in with Google on our website dashboards | Purchase details on Android (Google is the seller). ZMacros only reads from Health Connect and sends Google nothing from it | |
| Apple Maps (iPhone) or Google Maps (Android) | When the app shows a route map | The map area, your IP address and device details |
| Google ML Kit (code in the app) | When the app reads a nutrition label's text on your phone | Technical usage reports: device and app details, performance and error codes, an ID for the installation. Not the photo or its text |
| Google AdMob | Ads on the free plan | IP address and device details, to show and measure non-personalised ads and confirm rewarded ads. No health, food, weight, location or photo data and no account ID |
| Open Food Facts | Text searches, and barcodes when your phone asks directly | Search words or barcode with your IP address; from our server, the barcode only |
| USDA FoodData Central | Searches of USDA data | Search words, sent from our server with no account details |
No data broker receives personal information from ZMacros, and our in-app analytics goes to no analytics company.