This Privacy Notice explains how GainMacro collects, uses, stores, discloses, and protects personal data when you use the GainMacro mobile application, create an account, use AI features, purchase a subscription, or contact support. It also explains your choices and privacy rights.
Key Points
- GainMacro processes account, nutrition, fitness, body-measurement, preference, photo, and app-usage data to provide the features you choose to use.
- AI features send only the content and personalized context needed for that request to OpenAI or Anthropic after the applicable consent flow.
- GainMacro does not sell personal data or share it for cross-context behavioral advertising.
- Data may be stored on your device, in GainMacro’s Supabase cloud, and temporarily by service providers. In-app controls let you export, clear, or delete data.
Scope and Who Is Responsible
This Notice applies to GainMacro’s app, account services, AI features, subscriptions, and direct support communications. “GainMacro,” “we,” “us,” and “our” refer to the operator of the GainMacro service.
GainMacro determines why and how personal data is processed for the App. Our vendors process data for us under their own contracts and privacy terms. This Notice does not control third-party services you choose to use independently, such as Apple, Google, Discord, or an external website.
Account and Identity Data
We process identifiers and account information such as:
- Clerk user ID and GainMacro account ID
- Email address and account verification status
- First and last name
- Sign-in method, such as email, Apple, or Google
- Authentication, session, security, and legal-consent records
Clerk manages sign-in credentials and authentication. GainMacro does not receive or store your Apple or Google password. If you use email sign-in, credential handling is performed by Clerk.
Profile, Health, Fitness, and Nutrition Data
Depending on what you enter and the features you use, GainMacro processes data that may be considered health or sensitive personal data, including:
- Date of birth or age, biological sex selection, height, current weight, goal weight, and weight history
- Fitness goal, activity level, planned training frequency, calorie target, macro targets, and measurement units
- Favorite foods, foods to avoid, diet style, restaurant preference, and meal priorities
- Food logs, meal type and time, serving information, calories, protein, carbohydrates, fat, fiber, sugar, sodium, cholesterol, potassium, ingredients, health scores, and corrections you make to AI results
- Workout logs, dates, exercise names, muscle groups, sets, repetitions, lifted weight, RPE, notes, cardio type, duration, distance, intensity, estimated calories, saved movements, workout drafts, and workout split
- Streaks, activity history, custom foods, recent foods, progress trends, and generated insights
Food preferences can reveal sensitive information, including possible dietary, allergy, cultural, or religious preferences. Do not enter information you do not want processed.
Photos, Camera, and Media
GainMacro accesses the camera or photo library only after permission and only when you choose a photo feature.
Food Snap and barcode features. A food image is prepared on your device and sent through a GainMacro server function to OpenAI for food identification and nutrition estimation. If you save a snap-based food entry, its image may be uploaded to a private Supabase “food-snaps” storage folder associated with your account, and the image path, detected ingredients, nutrition result, and your corrections may be stored with the food log.
Physique Check-In. A selected physique image is sent through a GainMacro server function to Anthropic for feedback. In the current version, check-in images, local image references, timestamps, and analysis results are kept in the App’s local device storage, with up to 20 saved check-ins. Device temporary files may also be managed by the operating system.
Profile photo. In the current version, your profile-photo reference is stored locally on your device.
GainMacro does not use photos for facial recognition, identity verification, or creation of biometric templates.
AI Inputs, Context, and Outputs
When you use an AI feature, GainMacro sends the provider the information needed to generate that result:
- Max AI Coach: Your message, relevant conversation history, daily calorie goal, calories logged, estimated workout calories, current streak, and fitness goal
- Meal Suggestions: Fitness goal, remaining daily macros, food preferences, foods to avoid, and meal priorities
- Macro Insights: Aggregate logged-day totals, daily averages, and nutrition targets for the selected period
- Physique Check-In: The selected photo and an analysis instruction
- Food Snap: The selected food image and an analysis instruction
AI responses and chat history may be saved locally so the feature can show prior results. Usage totals and rate-limit records are stored in Supabase. GainMacro does not train its own AI models on your content.
As of this Notice’s effective date, OpenAI and Anthropic state that standard API inputs and outputs are not used to train their models by default. They may retain API content for safety or abuse monitoring, generally for up to 30 days under standard settings, and may retain it longer for legal, security, or policy-enforcement reasons. Their practices and available retention controls may change.
Location and Nearby Search Data
Healthy Nearby uses location only when you open the feature and choose to use your current location. Foreground coordinates are sent to the Overpass API to locate nearby food businesses. If you type a city, ZIP code, or address, that search is sent to OpenStreetMap Nominatim for geocoding.
GainMacro does not intentionally save precise coordinates or manual location searches to your GainMacro profile or food logs. The location providers receive the request and may receive technical information such as your IP address under their own policies. You can use manual search instead of device location or remove location permission in device settings.
Device, Usage, Analytics, and Diagnostic Data
We process technical and usage data needed to operate, secure, and improve GainMacro, which may include:
- App version, operating system, platform, device or installation identifiers, language, and general network information
- Permission status and locally saved preferences for theme, accent color, units, reminders, UI settings, onboarding, and tutorial progress
- Feature events such as opening a feature, logging a meal or workout, completing a scan, viewing a paywall, starting a subscription, or encountering an error
- Event timestamps, plan tier, usage counts, approximate request size, and performance data
- IP address or coarse location inferred by service providers from network traffic
PostHog receives product-analytics events linked to a GainMacro/Clerk account identifier after sign-in. GainMacro’s analytics sanitizer is designed to block names, email, messages, search queries, coordinates, photos, food names, and body measurements from event properties, but no automated filter can guarantee that every unexpected value is removed.
Sentry processes production crash reports, stack traces, app/device context, and sampled performance traces. If diagnostic replay is enabled, GainMacro configures it to mask displayed text and images.
Subscriptions and Transaction Data
Apple or Google processes your payment method and store transaction. GainMacro does not receive full card or bank details.
RevenueCat and the applicable app store process purchase identifiers, product and offering identifiers, subscription status, renewal or expiration information, entitlement tier, original app-user identifier, country/store information, and limited device or transaction metadata. GainMacro stores your current tier and API usage so paid features and limits work correctly.
Support and Communications
If you email support or contact GainMacro through Discord, we process the information you provide, such as your contact details, message, screenshots, account details needed to investigate, and our response.
Discord communications are also governed by Discord’s terms and privacy policy. Do not post sensitive health information in a public Discord channel.
How We Obtain Data
We obtain data:
- Directly from you when you create an account, complete onboarding, enter logs, upload media, send AI messages, set preferences, make corrections, or contact support
- Automatically from the App, device, SDKs, and service requests when you use GainMacro
- From Clerk, Apple, or Google during authentication
- From Apple, Google, and RevenueCat for purchases and entitlements
- From food and mapping sources such as USDA FoodData Central, Open Food Facts, OpenStreetMap Nominatim, and Overpass in response to searches
Food and barcode queries sent to food databases are not intentionally sent with your health profile, though those services may receive normal request metadata.
Why We Use Personal Data
We use personal data to:
- Create, authenticate, secure, and support your account
- Calculate targets and provide food, nutrition, workout, progress, streak, and personalization features
- Process photos, messages, and metrics for AI features you request
- Save and sync logs, settings, subscription access, consent, and usage limits
- Find nearby food businesses when requested
- Provide support and respond to privacy requests
- Detect abuse, prevent fraud, enforce limits, troubleshoot, measure performance, and improve reliability and usability
- Comply with law, enforce our Terms, and protect users, GainMacro, and others
Where a law requires a legal basis, we rely on performance of our agreement with you, your consent for optional or sensitive processing, our legitimate interests in operating and securing the App, and compliance with legal obligations. You may withdraw consent for AI features in Settings, but prior lawful processing is not undone.
When and With Whom We Disclose Data
We disclose data only as reasonably needed for the purposes described above:
- Clerk, Apple, and Google: Authentication and account identity
- Supabase: Database hosting, private file storage, server functions, access control, and API usage records
- OpenAI: Food-photo analysis
- Anthropic: AI coach, meal suggestions, macro insights, and physique analysis
- PostHog: Account-linked product analytics
- Sentry: Crash, error, and performance diagnostics
- RevenueCat and Apple/Google app stores: Subscriptions, entitlements, and transactions
- USDA FoodData Central and Open Food Facts: Food and barcode lookup
- OpenStreetMap Nominatim and Overpass: Geocoding and nearby-business search
- Professional advisers, authorities, or transaction counterparties when required by law, needed to protect rights and safety, or involved in a financing, merger, acquisition, reorganization, or sale of assets
These recipients process only the categories relevant to their function. Their independent processing is governed by their own notices and agreements.
No Sale, Targeted Advertising, or Data Brokerage
GainMacro does not sell personal data, physique photos, food photos, or health and fitness records. We do not share personal data for cross-context behavioral advertising, use third-party advertising SDKs, or create advertising profiles from your nutrition or fitness activity.
We use service providers for analytics, diagnostics, hosting, AI, and subscriptions. These operational disclosures are not intended as a sale. If our practices materially change, we will update this Notice and provide any notice or choice required by law before the new practice begins.
Where Data Is Stored
On your device. GainMacro uses app-local storage and caches for profile details, goals, preferences, logs, drafts, saved movements, recent foods, chat history, generated tips, consent state, profile-photo references, and physique check-ins. Local app data is protected by your device’s operating-system sandbox, but it is not a dedicated encrypted vault and may be included in device backups depending on your settings.
In GainMacro’s cloud. Supabase stores account-linked profile fields, food logs, workout logs, weight logs, custom foods, streaks, app settings, subscription entitlements, legal consent, corrections, reports, and API usage. Saved Food Snap images may be stored in a private Supabase bucket under your account folder.
With processors. Clerk, OpenAI, Anthropic, PostHog, Sentry, RevenueCat, Apple, Google, and lookup providers process or retain limited data in their systems as described in this Notice and their own policies. Data may be processed in the United States and other countries where those providers operate.
Retention and Deletion
We generally keep account and synced app data while your account is active and as needed to provide the App. Specific retention depends on the data and storage location:
- Local cache remains until you clear it, sign out where applicable, delete the App, or delete your account. Operating-system backups may persist separately.
- Food and workout logs remain until you delete entries, clear history, or delete the account.
- Saved Food Snap images may remain in private cloud storage until account deletion or backend cleanup.
- Local Physique Check-Ins are limited to the 20 most recent saved items and remain until you delete a check-in, clear app data, uninstall without restoring a backup, or delete the account.
- Local chat history remains until sign-out, account deletion, or local app-data removal.
- Consent, transaction, security, and legal records may be kept as reasonably necessary to document compliance, resolve disputes, prevent fraud, and meet legal obligations.
- Analytics and diagnostics follow PostHog’s and Sentry’s configured retention. AI requests follow the provider practices described above.
Account deletion initiates deletion of your Clerk identity, GainMacro database rows, user-folder cloud files, and local App data. Deletion from active systems may take time, and limited copies may remain temporarily in encrypted backups, security logs, provider systems, or records we must retain by law.
Security
GainMacro uses safeguards designed for the sensitivity of the data, including TLS for data in transit, authenticated server requests, private storage buckets, user-scoped storage paths, Supabase Row Level Security, server-side provider secrets, rate limits, and account-authentication controls.
No storage or transmission system is completely secure. Protect your device and account credentials, use a strong unique password, keep the App updated, and contact us if you suspect unauthorized access.
If a security incident triggers a legal notification duty, GainMacro will provide notices to affected users and regulators as required by applicable law.
Your Choices and Privacy Rights
You can:
- Review and edit profile, goals, preferences, and logs in the App
- Export core profile, goal, preference, food-log, and workout-log data from Settings → Privacy & Legal; contact us for a broader account-data request
- Clear food or workout history from Settings
- Delete individual entries and Physique Check-Ins where that control is available
- Withdraw AI consent from Settings → AI Data Consent
- Disable camera, photo-library, or location permission in device settings
- Manage subscriptions in the applicable app store
- Delete your account and associated GainMacro data from Settings → Delete Account
Depending on where you live, you may have rights to confirm processing, access, obtain a portable copy, correct, delete, restrict or object, withdraw consent, and appeal a denied request.
Email support@gainmacro.com from your account email. We may verify your identity and may deny or limit a request where permitted by law. We will not discriminate against you for exercising a privacy right.
United States State Privacy Disclosures
California
The categories collected in the preceding 12 months are identifiers, customer-record information, commercial/subscription information, internet or electronic activity, approximate or precise location when requested, audio/visual information, inferences, and sensitive information such as account credentials, health/fitness details, precise location, and content of private communications with AI features.
We collect and disclose these categories for the business purposes described in this Notice. We do not sell them, share them for cross-context behavioral advertising, or offer a financial incentive for personal data. Sensitive data is used to provide requested features, secure the service, and other legally permitted purposes rather than to infer unrelated characteristics.
Texas and Other Applicable States
Residents may have rights to access, correct, delete, obtain a portable copy, and opt out of sale, targeted advertising, or qualifying profiling. GainMacro does not currently conduct those opt-out activities.
If we deny a request, you may appeal by replying to the decision email with “Privacy Appeal” in the subject.
Children and Teen Users
GainMacro is not directed to children under 13, and we do not knowingly collect personal data from a child under 13. You must be at least 13 to create an account. Users under the age of majority in their location must have permission from a parent or legal guardian.
If you believe a child under 13 provided data, email support@gainmacro.com so we can investigate and delete it. We may restrict or remove an account if age requirements are not met.
Health Privacy, HIPAA, Biometrics, and Automated Decisions
GainMacro is a consumer wellness app and is not a healthcare provider, health plan, or healthcare clearinghouse. Data you provide directly to GainMacro generally is not protected health information under HIPAA. Other consumer-health and privacy laws may still apply.
GainMacro does not derive face geometry or biometric identifiers from photos. AI outputs are not used to make decisions about employment, housing, credit, insurance, education, healthcare eligibility, criminal justice, or access to essential services. GainMacro does not provide medical diagnosis or treatment.
International Processing
GainMacro and its providers may process data in the United States and other countries with different privacy laws. Where required, transfers will rely on recognized legal mechanisms or contractual safeguards.
By using the App, you understand that data will be processed in locations where GainMacro and its providers operate, subject to applicable law.
Changes to This Notice
We may update this Notice when the App, providers, laws, or data practices change. We will update the effective date and provide additional in-app or email notice for material changes when required.
If a change requires new consent, we will request it before the relevant processing begins.
Contact and Requests
For privacy questions, rights requests, appeals, or complaints, email support@gainmacro.com. Use the subject “Privacy Request” and send the request from the email connected to your account when possible.
GainMacro is based in Texas, United States. You may also have the right to contact your state attorney general or local data-protection authority.
Please do not send sensitive health information through public Discord channels.