Privacy Policy

Last updated: June 13, 2026

Macro Marmot ("Macro Marmot", "we", "us", or "our") is a nutrition and macro tracking app and website operated by RoushTech, LLC. This policy explains what we collect, why, how we use it, and the choices you have. It covers the Macro Marmot mobile apps, the website at macromarmot.com, and the app backend at app.macromarmot.com.

We try to collect as little as the app needs to work, and we do not sell your data.

The short version

• We store the account and nutrition data you put into the app so it syncs across your devices.
• Nutrition and body metrics are personal health information, and we treat them that way.
• Payments are handled by Google Play. We never see your card details.
• You can export or delete your data at any time. See Account and data deletion.
• We do not run advertising trackers, and we do not sell or rent your data.

Information we collect

Account information. Your email address, a hashed password, and an optional display name. We never store your password in readable form.

Nutrition and health data you enter. The foods, meals, recipes, and quantities you log; your body weight entries; goals; and body metrics (for example height, target weight, and activity level) that you choose to provide. This is the core of the app and is tied to your account so it can sync.

Photos. If you attach photos to foods, meals, or recipes, we store them in our object storage so they sync to your devices.

Health Connect (Android, optional). If you connect Android Health Connect, the app reads the data types you approve (for example steps, active energy, or weight) to inform your tracking. We only access what you grant, and you can revoke access in Health Connect at any time.

Barcode and food lookups. When you scan a barcode or search for a food, the barcode or search term is sent to our backend and may be forwarded to public food databases (such as the USDA FoodData Central and Open Food Facts) to find a match. These lookups do not include your identity.

Diagnostics and technical data. App version, device type and operating system version, crash reports, and error diagnostics (via Sentry), along with server logs that include IP address and timestamps. We use these to keep the app working and to fix bugs.

Website data. If you join the waitlist or use the contact form, we collect the email address and any message you submit. The site uses Cloudflare Turnstile to block spam, and Cloudflare may process limited technical data to do so.

Payment data. Subscriptions are processed by Google Play (and, where applicable, our subscription management provider). We receive confirmation that a subscription is active and its renewal status. We do not receive or store your full payment card details.

How we use your information

• To provide the app: storing, syncing, and displaying your nutrition data across your devices.
• To calculate the things the app exists for: trends, maintenance estimates, projections, and goal tracking.
• To operate accounts, authentication, and security.
• To process and manage your subscription.
• To diagnose crashes and improve reliability and performance.
• To respond to support requests and waitlist or contact messages.
• To comply with legal obligations.

Legal bases (EEA and UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the app you signed up for), consent (for example connecting Health Connect, which you can withdraw), legitimate interests (security, fraud prevention, and improving the app), and legal obligation where required.

How we share information

We do not sell your personal data. We share it only with service providers that help us run Macro Marmot, and only as needed:

• Google Play for subscription billing and management.
• Our subscription management provider (for example RevenueCat) if used, to validate purchases and track entitlements. [Confirm before launch.]
• Sentry for crash and error diagnostics.
• Cloudflare for the website, content delivery, and spam protection (Turnstile).
• Resend to deliver waitlist and contact emails.
• DigitalOcean (United States) where the backend, database, and photo storage run.
• Public food databases (USDA FoodData Central, Open Food Facts) for food and barcode lookups, which do not include your identity.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer.

Sharing you choose to do

Macro Marmot lets you share recipes, foods, and your profile through public links. Anything you mark as public can be viewed by anyone who has the link, and may be indexed by search engines. Public pages do not reveal your email or account credentials. You can make shared items private again, though cached or previously saved copies may persist for a time.

Data retention

We keep your account and nutrition data for as long as your account is active. If you delete your account, we delete your personal data as described in Account and data deletion, except where we must retain limited records (for example transaction records) to meet legal, tax, or fraud-prevention obligations. Backups are rotated and purged on a regular schedule.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your data, to object to or restrict certain processing, and to withdraw consent. Macro Marmot includes in-app export and deletion, and you can also contact us at privacy@macromarmot.com.

• Access and export: request a copy of your data in a portable format.
• Deletion: see Account and data deletion.
• Correction: edit your data in the app, or contact us.
• California (CCPA/CPRA): you have the right to know, delete, and correct, and the right not to be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising.

We will not charge you for exercising these rights, and we will not deny you service for doing so.

Security

We protect data in transit with encryption (HTTPS/TLS), store passwords using strong one-way hashing, and limit access to production systems. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

International transfers

We operate from the United States, and your data may be processed there or wherever our service providers operate. Where required, we use appropriate safeguards for international transfers.

Children

Macro Marmot is not directed to children under 13 (or the minimum age required in your country, such as 16 in parts of the EEA). We do not knowingly collect data from children under that age. If you believe a child has provided us data, contact us and we will delete it.

Cookies and tracking

The website uses only what it needs to function, including Cloudflare Turnstile for spam protection. We do not run advertising or cross-site tracking cookies. The mobile app does not use advertising identifiers.

Changes to this policy

We may update this policy as the app evolves. We will revise the "Last updated" date above and, for significant changes, provide a more prominent notice.

Contact us

Questions or requests: privacy@macromarmot.com

RoushTech, LLC