MacroSnap is an AI-powered food scanning and nutrition tracking app. This policy explains what data we collect, how it is used, and your rights regarding that data.
MacroSnap is operated from the United Kingdom and complies with the UK GDPR and the Data Protection Act 2018. MacroSnap is intended for users aged 18 and over.
User accounts are created and managed through Supabase Auth, a secure third-party authentication service. When you create an account, your email address and authentication credentials are held by Supabase.
We use Supabase to provide secure authentication and cloud data storage for your MacroSnap account. Your profile information, nutrition goals, meal history, streaks, and progress data may be stored in Supabase so that your data is available across devices and sessions.
App data is also cached in your device's browser storage (localStorage) for offline access and performance.
When you scan a food item, the image is sent through our secure serverless backend (hosted on Netlify) to Anthropic's Claude API for AI-powered nutrition analysis. MacroSnap does not store, log, or retain food images — they are processed in transit and discarded. Anthropic processes the image solely to return nutrition data.
See Anthropic's Privacy Policy for how they handle API requests.
MacroSnap Pro subscriptions are handled by Stripe, a PCI-compliant payment processor. MacroSnap does not store, see, or have access to your full payment card details. All billing data is managed securely by Stripe.
See Stripe's Privacy Policy for details.
Emails such as password reset instructions are sent via Resend, a transactional email service. Your email address is used solely to deliver account-related communications — not for marketing without your consent.
We use browser localStorage to cache your data on-device for offline access. We do not use tracking cookies. Any data stored in your browser remains on your device and can be cleared by clearing your browser storage.
If you enable daily reminders, we request browser notification permission. Reminders are scheduled locally — no personal data is sent to a remote server for this feature.
You have the right to access, correct, export, and delete your personal data. You can:
When you delete your account in-app, your meal history, goals, and profile data stored in Supabase are removed immediately. Your Supabase authentication record is also queued for deletion.
Under UK GDPR you also have the right to object to or restrict processing, to withdraw consent at any time, and to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
Account and meal data is retained while your account is active. After you delete your account, personal data is removed within 30 days, except where we are legally required to retain it (for example, payment records retained for up to 7 years for UK tax and accounting purposes).
Some of our service providers (such as Anthropic and Stripe) are based outside the UK. When we transfer data internationally, we rely on appropriate safeguards including Standard Contractual Clauses and adequacy decisions where available.
We take reasonable technical measures to protect your data. Supabase provides encrypted storage and access control. All data in transit uses HTTPS. However, no system is completely secure — please use a strong, unique password for your MacroSnap account.
For privacy questions or data requests, please visit our contact page or email us at hello@macrosnap.live.
We may update this policy occasionally. The "Last updated" date above reflects the most recent revision. Continued use of MacroSnap constitutes acceptance of the updated policy.