Macronaut Privacy Policy

How we look after your information, in plain language.

Last updated: 12 June 2026 · Applies to: the Macronaut app and getmacronaut.com

The short version

Macronaut helps you and your partner track meals, macros, and what is in your kitchen. To do that, we collect the details you give us, the meals you snap or speak, and basic usage information.

We use trusted services to run the app and to read your meal photos and voice notes. We do not sell your personal information. You stay in control: you choose exactly what a partner can see, and you can view, download, correct, or delete your data at any time, directly from within the app.

Macronaut is an Australian product. Section 11 sets out the regional rights that apply where we currently offer the service. Questions? Email us at privacy@getmacronaut.com.

1. Who we are

Macronaut ("we", "us", or "our") is a health and nutrition app. It is built and operated by RDJ Labs Pty Ltd (ABN 96 698 396 011, ACN 698 396 011), an Australian company that operates the Macronaut app and brand.

This policy explains what personal information we collect when you use the Macronaut app or visit getmacronaut.com, why we collect it, and the choices you have. It is written to be easy to read. If anything is unclear, just ask us.

We follow the Australian Privacy Principles under the Privacy Act 1988 (Cth) as our baseline, plus the additional privacy laws of the other countries where we currently offer Macronaut, as described in section 11.

2. Where Macronaut is offered

Macronaut is currently available to residents of:

• Australia
• New Zealand
• The United States (including California)
• Canada
• India

We are not currently offered in any other country. If you are accessing the service from a country that is not listed above, please do not create an account — we may have to close it.

For users in the countries where Macronaut is available, your information may be handled in more than one country, including Australia, Singapore, and the United States. We explain this in section 8.

3. The information we collect

We only collect what we need to make the app work well for you. Here is the full picture.

• Account details — Your email address and a password, or, through Google sign-in, your name, email address, profile picture, and Google user ID. A display name so your partner can recognise you.
• Your goals and preferences — The goal you pick (for example Lean Down, Build Up, Stay Balanced, or Lean Kitchen). Dietary needs, allergies, and food preferences you tell us. Reminder and notification settings.
• Health and body information — Optional details like height, weight, age, sex, and activity level. We only use these to estimate your calorie and macro targets, and only if you choose to share them.
• Meals you log — Photos of meals you snap, voice notes you record, and meals you type in. The food items, portions, and macros worked out from them. Meal photos are stored in your account for as long as you keep the meal record; if you delete a meal, the associated photo is deleted with it. Voice notes are converted to text and then deleted from our servers; we keep the resulting text on your meal record but not the audio.
• Your kitchen — Items you add to your fridge, freezer, and pantry, what you use, and what you throw away.
• Conversations with our in-app assistant — Questions and requests you send to our text and voice assistant, and the responses we give you. We keep these on your account so you can see your meal history and so the assistant learns your food preferences. If you delete a meal that was logged by voice, the corresponding transcript is deleted with it. We do not use these conversations to train AI models.
• Partner and household — If you link with a partner, the connection between your accounts and the information you each choose to share.
• Usage and device information — Basic technical details such as app version, app interactions, and general activity, used to keep the app reliable and to fix problems. We do not use third-party analytics or session-recording services.
• Payment information — If you subscribe, your payment is handled by our subscription provider (RevenueCat, based in the United States) which coordinates with the Apple App Store (iOS), Google Play (Android), or a web payment processor for browser purchases. We receive confirmation of your subscription, not your full card number.

Providing health and body information is always optional. If you skip it, the nutrition features simply use sensible defaults instead.

Health, dietary, and allergy details are treated as sensitive information under the Australian Privacy Act and as sensitive personal information / consumer health data under United States state laws. By choosing to provide them, you consent to us using them for the purposes described in this policy. You can withdraw that consent at any time (see section 10).

On mobile, we ask your permission to use the camera (to snap meals), the microphone (to record voice notes), and to send you notifications (for reminders). You can change these in your phone's settings at any time.

4. How we use your information

We use your information to:

• Set up and run your account.
• Work out the macros and calories in the meals you log.
• Estimate calorie and macro targets that suit your goal.
• Show you what is in your kitchen, what is expiring, and ideas for what to cook.
• Power the Cook Once, Split Smart feature so one meal can be split between two partners with different goals.
• Answer your questions through the in-app assistant and voice features.
• Send reminders and updates you have asked for.
• Keep the app secure, fix bugs, and improve how it works.
• Handle subscriptions and meet our legal and tax obligations.

We do not sell your personal information, and we do not use it to show you third-party ads.

5. How our smart features handle your data

Some Macronaut features use artificial intelligence to save you time. We want to be honest about how this works and about the limits of what we can promise.

Reading your meal photos. When you snap a meal, the photo is sent to Google's Gemini Vision service, which identifies the foods in the picture and estimates their portions. Google processes the photo on our behalf under their standard API terms, which require them to process your data only on our instructions and not to use it to train their own models.

Transcribing voice notes. When you record a voice note, the audio is sent to OpenAI's Whisper service, which turns it into text. OpenAI processes the audio on our behalf under their standard API terms, which require them not to use API inputs to train their own models.

The in-app assistant. When you ask the assistant a question, your request and the relevant context from your account are sent to Anthropic's Claude model, with Google's Gemini as a fallback. Both providers process your conversation on our behalf under their standard API terms and are not permitted to use it to train their general AI models.

Improving your food matches. When you correct a food or portion in the app, we create a short numerical representation (an "embedding") of that food's name using OpenAI's embedding service. The embedding is used only to improve your own future food matching. It is not used to train anyone's general AI model.

Honest estimates and no automated decisions about you. Our estimates are exactly that — estimates. We show confidence ranges instead of pretending to be perfectly precise, and you can review, correct, or reject every estimate before it is logged. Because you can override every estimate, Macronaut does not make automated decisions about you that have legal or similarly significant effects.

What we can and can't promise about providers. Our agreements with these providers require them to act only on our instructions and not to use your information for their own unrelated purposes. We review their terms when we sign on and when those terms change. We cannot, however, guarantee what a provider will do in breach of those terms, or claim that any AI service will be perfectly accurate.

6. Sharing with your partner (Couple Mode)

Macronaut is built for couples, so sharing is a core feature. It is always your choice.

• When you link with a partner, you control exactly what they can see, field by field. For example, you can share your macros but keep your weight private.
• You can change what you share, or unlink from your partner, at any time in your settings.
• Shared meals (Cook Once, Split Smart) show each partner their own portion against their own goal.
• One subscription can cover both partners, but each of you keeps your own separate account and data.
• If you unlink, your data stays with your own account. Information your partner already saw or saved before unlinking may remain with them, including in their own notes or screenshots. We are the controller of your data inside Macronaut; once a partner has seen a piece of your data, we cannot recover any independent record they may have kept. Only share what you are comfortable with.

7. The services we share data with

To run Macronaut we rely on a small number of trusted providers. They only handle your data to provide their service to us, under agreements that require them to protect it.

• Supabase — Stores your account and app data securely. Hosted in Sydney, Australia.
• Vercel — Hosts our website and app front end.
• Railway — Runs our app's back end (servers based in Singapore).
• Cloudflare — Provides DNS for getmacronaut.com. Cloudflare resolves the domain name and does not receive your account data.
• Google Fonts — Serves the fonts used on our website. When fonts load, your browser's IP address is exposed to Google's font CDN.
• Google (Gemini API) — Reads your meal photos to identify foods, and provides a fallback model for the in-app assistant.
• Google (Sign-in) — Provides Google sign-in if you choose that option.
• OpenAI — Converts your voice notes into text (Whisper) and helps match the foods you log (embedding service).
• Anthropic — Powers the in-app assistant's main responses (Claude).
• RevenueCat — Manages subscriptions across web, iOS, and Android, based in the United States. RevenueCat receives a Macronaut subscriber identifier, plan and entitlement state, and event timestamps. It does not receive your full payment card number.
• Apple App Store and Google Play — Process subscription payments on iOS and Android respectively. Your use of either store is also subject to its own terms and privacy policy. In every case we receive confirmation of your subscription, not your full card details.

We may also share information if the law requires it, to protect the safety and rights of our users or our business, or as part of a business sale or reorganisation. If that ever happens, we will make sure your information stays protected.

8. Where your information is stored and sent

Your core account and app data is stored in Australia (Sydney) with Supabase. Some processing happens overseas:

• Our app's back end runs in Singapore (Railway).
• The service that reads your meal photos (Google) may process them in the United States.
• The service that transcribes your voice notes and matches your foods (OpenAI) may process them in the United States.
• The service that powers the in-app assistant (Anthropic) may process your requests in the United States.
• Our subscription provider (RevenueCat) processes subscriber identifiers and entitlement state in the United States.

Whenever your information crosses a border, we take reasonable steps to keep it protected to a standard consistent with the Australian Privacy Principles and any other law that applies to you.

9. How long we keep your information

We retain different types of information for different periods, depending on what it is and what we need it for.

• Your account profile — for the life of your account, plus a short period after you delete it to handle reversal and any obligations we have.
• Meal logs, photos, and voice transcripts — for the life of your account. If you delete a meal, the photo and transcript are deleted within a reasonable period.
• Kitchen inventory transactions — active items stay until you mark them used or discarded; once moved to history they are kept for up to 90 days for KPIs, then deleted.
• Aggregate monthly KPIs — kept in anonymous form for trend analysis. Not tied back to individual identities.
• Subscription and payment records — kept for as long as required by Australian tax and accounting law (currently seven years).
• In-app assistant transcripts — kept on your meal records for as long as you keep those records. If you delete the meal, the transcript is deleted.
• Telemetry and audit logs — kept for up to 12 months for security and reliability, then deleted, unless we need to keep them longer for a specific security or fraud investigation.
• Scan quota records — kept for 30 days then deleted automatically.

If you delete your account, we delete or anonymise your personal information within a reasonable period, unless we are required to keep some of it by law.

10. Your rights and choices

You are in control of your information. In each country where Macronaut is currently offered, at any time you can:

• Access the personal information we hold about you.
• Correct anything that is wrong or out of date — much of this you can edit yourself in the app.
• Download a copy of your data, in a portable format, directly from the app (Settings → Account → Export my data).
• Delete your account and your data directly in the app (Settings → Account → Delete account), or by emailing us.
• Change what you share with a partner, or unlink entirely.
• Turn reminders and notifications on or off.
• Withdraw consent for optional features, such as sharing body information.

To make any of these requests, email us at privacy@getmacronaut.com. We aim to respond within 30 days, which meets or exceeds the timeframes set by the Privacy Act 1988 and the CCPA. Where the law allows an extension, we will tell you within the initial window if we need it. We may need to confirm your identity first to keep your account safe.

11. Your extra rights by region

The rights in section 10 apply to everyone. Depending on where you live, you may have extra rights under local law. We honour these. To use any of them, email us at the address in section 10.

Australia (Privacy Act 1988). As an Australian company, we handle your information in line with the Australian Privacy Principles. You can ask to access the personal information we hold about you and to have it corrected, and we will deal with your request as the Privacy Act requires. If you are not happy with how we have handled your information or a request, you can complain to us first, and then to the Office of the Australian Information Commissioner (oaic.gov.au). We treat your health, dietary, and allergy details as sensitive information, which we only collect with your consent.

New Zealand (Privacy Act 2020). As a New Zealand user, you have rights to access and correct the personal information we hold about you. We handle your information in line with the New Zealand Information Privacy Principles. If you are not satisfied with how we have responded to a request, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

California (CCPA and CPRA). If you are a California resident, you can ask us to tell you what personal information we have collected about you and how we use it, to delete it, to correct it, and to limit how we use sensitive personal information. You can also opt out of the sale or sharing of personal information. We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We will never treat you differently, or give you a worse service, for using your privacy rights. As a business that operates exclusively online and has a direct relationship with our users, we accept California requests by email at privacy@getmacronaut.com. We will respond within 45 days, extendable by a further 45 days where the law allows.

Washington (My Health My Data Act). If you are a Washington resident, the My Health My Data Act treats the information you give us about your body, your meals, and your dietary needs as consumer health data. We collect this data only with your consent at the moment you choose to enter it. We use it only for the purposes set out in section 4. We share it only with the processors listed in section 7. We retain it on the timeline in section 9. You can withdraw consent at any time by deleting your account or by emailing privacy@getmacronaut.com.

Nevada (SB 370). If you are a Nevada resident, you can opt out of the sale of certain consumer information. We do not sell your personal information.

Other United States states. If you live in a US state with its own comprehensive privacy law — currently including Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Delaware, Iowa, Indiana, Montana, New Hampshire, New Jersey, and Minnesota, among others — you have rights to access, correct, delete, and obtain a copy of your information, and to opt out of targeted advertising and any sale of your data. We treat your health, dietary, and allergy information as sensitive, only use it for the purposes in this policy, and only with your consent.

Canada (PIPEDA + Quebec Law 25). If you are in Canada, you can ask to access and correct your personal information. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA), and if you are in Quebec we additionally follow Quebec's Law 25. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

India (Digital Personal Data Protection Act, 2023). If you are in India, we process your personal data on the basis of the consent you give when you create an account and when you choose to enter information like meals, body details, or dietary needs. You can withdraw consent at any time by deleting the relevant information, deleting your account, or emailing us. You have the right to access a summary of the personal data we hold about you, to have it corrected, completed, updated, or erased, to nominate another person to exercise your rights if you are unable to, and to an accessible way of raising a grievance. Our Grievance Officer can be reached at privacy@getmacronaut.com and will acknowledge your grievance promptly and respond within the time the law requires. If you are not satisfied with our response, you may escalate to the Data Protection Board of India. Your information is processed outside India (see section 8); we apply the same protections wherever it is handled.

12. How we protect your information

We take security seriously and use reasonable measures to keep your information safe, including:

• Encryption of data in transit between your device and our servers.
• Strict database access rules so you (and a partner you have approved) can only see your own data.
• Secure sign-in, including the option to use Google sign-in.
• Limiting who on our side can access personal information.

No system can be guaranteed to be completely secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the relevant authority as required by law. In Australia we follow the Notifiable Data Breach scheme under the Office of the Australian Information Commissioner, notifying both the OAIC and affected individuals as soon as practicable. We will also take steps to contain and fix the problem.

13. Children and young people

Macronaut is intended for people aged 16 and over.

Where the law where you live sets a higher age for handling health information or for consenting to terms like these, that higher age applies. Where local law sets a lower age, we still require users to be at least 16.

When you sign up, we ask you to confirm you are at least 16. We do not actively verify your age. If we become aware that an account belongs to someone under the applicable minimum age, we will close it and delete the data within a reasonable period.

If you are a parent or guardian who believes a child has signed up for Macronaut, please email privacy@getmacronaut.com and we will delete the account.

14. Cookies and local storage

Macronaut uses only essential local storage — the kind needed to keep you signed in, remember your settings, and recognise your device when you return.

Specifically, we store a device identifier in your browser so we can recognise you on future visits, and a session identifier so we can keep your in-app session active. We do not use advertising cookies, and we do not use third-party analytics, session recording, or tracking cookies.

You can clear these from your browser at any time. Doing so will sign you out and may reset settings tied to your device. If we ever introduce non-essential cookies or third-party analytics in future, we will update this section and, where the law requires it, ask for your consent first.

15. Links to other services

Macronaut may link to other websites or services we do not control, such as nutrition databases. This policy does not cover those services. We encourage you to read their own privacy policies.

16. Changes to this policy

We may update this policy from time to time as the app grows or the law changes. When we make a material change — meaning a change that affects how we collect, use, or share your information — we will update the date at the top and, where appropriate, let you know in the app or by email. The latest version will always be available in the app and on our website.

17. Special situations

If a Macronaut user dies. If a Macronaut user passes away and their next of kin or executor needs access to or deletion of their account, contact privacy@getmacronaut.com with proof of authority (such as a death certificate plus letters of administration or similar). We will handle the request in line with the law of the country where the user lived.

If you lose access to your account. Email us at privacy@getmacronaut.com and we will help you regain access or delete the account, after verifying your identity.

18. How to contact us

If you have a question, a request, or a concern about your privacy, please get in touch. We would rather hear from you and put things right.

RDJ Labs Pty Ltd (trading as Macronaut) ABN: 96 698 396 011 · ACN: 698 396 011 Email: privacy@getmacronaut.com

If you are not satisfied with how we have handled your privacy, you can contact the Office of the Australian Information Commissioner (oaic.gov.au), or, if you are in another region where we currently offer the service, your local privacy authority as described in section 11.

This policy is governed by the laws of New South Wales, Australia, without limiting any rights you have under the privacy laws of the country where you live and that apply to you because we have offered the service to you there.