1. Nutrition label photos

When you use "Scan label", the photo is sent to our server and forwarded to Anthropic (Claude API) for text recognition. Once recognition completes, the photo is discarded — we store no photos. It is used only for that single recognition.

2. Data that stays on your device

Your logged food, calories, protein, weight and preferences are stored in your device's local storage and never leave your device; we cannot see them. You can export a backup at any time; that file is yours to keep.

3. Scan credits and your identifier

Scan credits have to be held on a server — a number kept on the phone could simply be edited — so we need a key that tells us whose credits they are.

That key is a hash of the app-specific identifier Apple provides (appTransactionID). It is created the first time you open the App, whether or not you ever buy anything, because free credits also have to be recorded somewhere.

Against that key our server holds only an irreversible hash and a credit count. It cannot be traced back to your identity, and we never see your Apple account itself.

A useful side effect: because the key comes from your Apple account rather than this handset, your remaining credits follow you when you reinstall the App or move to a new phone — with no account to create and no "restore purchases" to tap.

4. Purchases

Credit-pack purchases are handled by the Apple App Store; we do not receive your name, email or payment details. We receive only an Apple-signed transaction receipt, which we use to confirm the purchase is genuine and add the credits to the key above.

5. Advertising

The App offers an option to watch an ad in exchange for free scan credits (subject to a daily cap). Ads are served by Google AdMob, which may collect device identifiers to serve them. On iOS we ask first via App Tracking Transparency — you may decline, and declining does not affect any App feature; ads are simply less relevant to you.

6. Abuse prevention

To prevent abuse, our server transiently reads your IP address for rate limiting when processing scans. It is used in the moment only, not linked to your identity and not retained.

7. What we don't do

• No accounts, no sign-up, no passwords.
• We do not sell or share your personal data with data brokers.
• No behavioural tracking beyond the advertising above, and no analytics tooling of any kind.

8. Third-party services

• Anthropic — label recognition
• Apple — in-app purchases and the app identifier
• Google AdMob — advertising
• Vercel, Upstash — server and storage (only the hash and credit count above)

9. Retention and deletion

On-device data: deleting the App or clearing its data removes everything. Server-side credit data: to delete it, email support@fit-the-makro.com.

10. Children

The App is not directed to children under 13 and does not knowingly collect their data.

11. Changes

We update the "Last updated" date on this page when the policy changes. Material changes will be announced in-app.

12. Contact

Questions? Email support@fit-the-makro.com.