PRIVACY POLICY.

1. Who this policy covers

This privacy policy covers the PRIMALMACRO iOS nutrition-tracking app and this informational website. The app is intended for adults aged 18 or over. This page describes the app's current features; information may be updated if the service changes.

2. Information you provide

PRIMALMACRO lets you enter age, height, weight, activity level and fitness goal to estimate calorie and macro targets. You can also record meals, nutrition estimates, and weight measurements. This profile, diary and weigh-in data is stored locally within the app's private storage on your device.

3. Sign in with Apple and subscriptions

PRIMALMACRO uses Sign in with Apple for membership and Apple's StoreKit for subscriptions. Your Apple user identifier is saved locally to identify your app session. When you use AI scanning, our server validates an Apple identity confirmation and checks your subscription with Apple's App Store Server API. Subscription transaction identifiers and limited account-related identifiers are used to verify eligibility. Payment details are processed by Apple; PRIMALMACRO does not handle your payment-card number.

4. AI photo scanning

If you choose to use Analyse with AI, the selected food, menu or packaging photograph is sent securely to our scanner hosted on Cloudflare and forwarded to OpenAI for food recognition and nutritional estimation. This transfer happens only when you choose to request analysis, not during ordinary diary use. A photo may contain unintended personal information in its background; check it before submitting.

AI estimates may be wrong and should be reviewed before adding them to your diary. Avoid including confidential or sensitive information in uploaded photographs.

5. Server information and usage controls

For security and service operation, the scanner processes limited request details, such as account-related session information, subscription checks, usage counters and network information used for rate limiting. The scanner uses Cloudflare infrastructure for verification, anti-abuse protection and scan usage limits. The app stores its scanner access session in the iOS Keychain.

6. Service providers

• Apple: account sign-in, subscription status, purchases and payments.
• Cloudflare: hosting, request handling and scanner usage/rate-limit controls.
• OpenAI: AI processing of the photo and analysis instructions you submit.

These providers may process information according to their own terms and privacy notices. The app does not contain an advertising network or use your food diary for targeted advertising.

7. Why information is processed

The purposes are to provide the services you request, calculate and display nutrition targets, verify membership, safeguard the scanner and prevent misuse, and respond to support enquiries. Where required by applicable privacy laws, processing must have an appropriate lawful basis, including performing a service requested by you or protecting the service.

8. Data retention and deletion

Your diary, profile and recorded weights stay in the app's local storage until you erase them or remove the app's data. Within the app, choose Plan → Delete all local data to erase local records and sign out. Apple subscription records remain with Apple, and cancelling the subscription must be done separately.

Scanner sessions, anti-replay data and usage controls operate on the server; their retention depends on the relevant technical purpose and provider. Photographs are transmitted for analysis and are not maintained as a PRIMALMACRO photo album. Processing or retention by Cloudflare and OpenAI is governed by the applicable service arrangements. For questions or deletion requests relating to server-held information, contact us using the email above.

9. Your privacy choices and rights

You can decline AI photo analysis and avoid sending a photograph, use the app's data-deletion control, and manage subscriptions through Apple. You may contact us to request access to, correction of, or deletion of personal information where applicable law provides those rights. We may need to verify a request before responding. If you are in the United Kingdom, you can also raise a concern with the Information Commissioner's Office.

10. International processing

Our service providers may process or transfer information outside your country. Where legally required, appropriate safeguards must be in place for those transfers. Contact us for more information about relevant processing arrangements.

11. Security

We use HTTPS for network requests and keep API secrets on the server, rather than in the iPhone app. No online service can guarantee perfect security; please avoid sharing sensitive information unnecessarily.

12. Changes and contact

We may update this policy if features or service providers change. The date at the top will be updated when changes are published. For support, privacy enquiries or deletion requests, email gpaul755@gmail.com.