Privacy Policy

Effective Date: April 12, 2026

1. Introduction

GRND Labs LLC (“we”, “our”, or “us”), doing business as Macromaxxing, operates the Macromaxxing mobile application (the “App”) and the website at macromaxxing.app (the “Website”). This Privacy Policy explains what information we collect, how we use it, the legal bases for processing, and your rights regarding your data. It applies to all users of the App and Website worldwide.

2. Information We Collect

2.1 Information You Provide

Account information: email address, display name, and profile photo (optional).
Nutrition data: food logs, macro entries, meal photos, and daily nutrition totals (calories, protein, carbs, fat).
Fasting data: fasting timer start/end timestamps and fasting window preferences.
Body metrics: weight, body measurements, and fitness goals (if provided).
Workout data: exercise type, duration, and intensity logged through the App.
Voice input: audio recordings when using voice food logging (processed in real-time via speech-to-text, not stored as audio).
Social content: posts, comments, and interactions on the community feed.

2.2 Information Collected Automatically

Device type, operating system version, and app version.
Anonymous usage analytics (screens viewed, features used).
Crash reports and performance diagnostics.
IP address (used for approximate location and security purposes; not stored long-term).
Advertising identifiers (e.g., IDFA on iOS), if you have granted tracking permission.

2.3 Information from Food Photos

When you use the AI food scanner, your photo is sent to Anthropic's servers for analysis by Claude AI. Photos are processed to estimate nutritional content and are not retained by Anthropic after analysis is complete. If you choose to save a meal to your food log, the photo thumbnail is stored in your account.

2.4 Consumer Health Data Notice

Certain information we collect — including nutrition data, fasting data, body metrics, and workout data — may constitute “consumer health data” under the Washington My Health My Data Act and similar state laws, or “sensitive personal information” under the California Privacy Rights Act (CPRA). We collect this data solely to provide the App's core nutrition tracking functionality. We do not sell consumer health data. We do not use consumer health data for advertising purposes. We share consumer health data with Anthropic (Claude AI) only as necessary to provide the AI food analysis feature, and with Firebase (Google) only as necessary to store and sync your data.

3. How We Use Your Information

To provide and improve the App's core features, including nutrition tracking, fasting timers, and workout adjustments.
To analyze food photos and voice descriptions using Claude AI and estimate macro/calorie content.
To display your nutrition history, streaks, and leaderboard rankings.
To power social features, including displaying your display name, profile photo, streak count, Aura XP level, and any content you post to the community feed.
To send you notifications (e.g., fasting reminders, streak alerts) if you opt in.
To process and verify subscription and in-app purchase entitlements through the Apple App Store.
To serve advertisements via Google AdMob (subject to your tracking preferences).
To diagnose bugs and improve app performance.
To comply with legal obligations and respond to lawful requests.

4. AI Processing & Automated Decision-Making

The App uses artificial intelligence (Anthropic's Claude Haiku and Sonnet models) to analyze food photos and voice descriptions and estimate nutritional content. This processing is automated but does not produce legal or similarly significant effects — it generates nutrition estimates that you can review, edit, and override before saving. No decisions about access to services, pricing, or other significant outcomes are made based on AI outputs.

You always have the option to manually enter or correct any macro values. AI-generated estimates are provided as a convenience and should not be relied upon for medical or clinical nutrition decisions.

5. Third-Party Services

We use the following third-party services to operate the App. Each has its own privacy policy governing how it handles data:

Firebase (Google): Authentication, cloud database (Firestore), analytics, and crash reporting. Data may be stored on Google servers in the United States. Firebase Privacy Policy
Anthropic (Claude AI): All AI food photo analysis and voice input processing is handled exclusively by Anthropic's Claude models (Haiku and Sonnet). Photos and text are sent to Anthropic's API for analysis. Anthropic does not use API inputs to train its models. No other third-party AI services are used. Anthropic Privacy Policy
Google AdMob: In-app advertising, including banner, interstitial, and rewarded ads. AdMob may collect device identifiers (such as the Advertising ID), IP address, and interaction data to serve and measure ads. Ad data is processed by Google. Google Ads Privacy

6. Subscriptions & In-App Purchases

The App offers optional paid subscriptions and one-time in-app purchases to unlock additional features. All transactions are processed by Apple through the App Store; we do not collect or store your payment card details, banking information, or Apple ID password.

6.1 AI Features Subscription

The App offers an optional auto-renewable monthly subscription (“AI Pro”) that unlocks AI-powered features, including the AI food photo scanner, AI voice meal logging, AI Meal Planner, and AI Nutrition Coach. The subscription is billed at $9.99/month through your Apple ID account and renews automatically unless canceled at least 24 hours before the end of the current billing period. You can manage or cancel your subscription at any time in your Apple ID account settings.

6.2 One-Time In-App Purchases

The App also offers optional consumable (one-time) purchases related to the streak system:

Streak Extension: Extends your macro logging streak by 7 days without requiring daily logging during that period.
Streak Shield: Restores a broken streak one time.
Cheat Day: Allows you to skip logging for one day without breaking your streak.

6.3 Information We Collect Related to Purchases

When you make a purchase, Apple provides us with a transaction receipt that includes your transaction identifier, product purchased, purchase date, and subscription status (active, expired, or canceled). We use this information solely to verify your entitlements and deliver the features you purchased. We do not receive your payment method details.

For more information about how Apple handles your purchase data, see Apple's Privacy Policy.

7. Data Sharing

We do not sell your personal information to third parties. We share data only in the following circumstances:

With the third-party services listed above, solely to provide App functionality.
With other users, if you participate in social features. The following information may be publicly visible: your display name, profile photo, streak count, Aura XP level, leaderboard rank, and any content you post to the community feed. You control what you post.
With Google AdMob for advertising purposes, subject to your App Tracking Transparency preferences (see Section 11).
If required by law, regulation, subpoena, court order, or other valid legal process.
In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case you will be notified via the App or email.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the App's services. Specific retention periods by category:

Account information: Retained until you delete your account.
Nutrition, fasting, and workout data: Retained until you delete your account or delete individual entries.
Food photos: Retained only if saved to your food log; deleted when you remove the entry or delete your account. Photos sent for AI analysis are not retained after processing.
Voice input: Processed in real-time via speech-to-text; audio is not stored.
Community posts: Retained until you delete the post or delete your account.
Subscription & purchase data: Transaction receipts and entitlement records are retained for the duration of your account or as required for financial record-keeping and legal compliance.
Analytics data: Anonymous, aggregated analytics may be retained indefinitely.

If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

9. Your Rights

Regardless of where you live, you have the right to:

Access your data — view all nutrition logs, fasting history, and account information within the App.
Export your data — export a full copy of your data in JSON format directly from Account > Privacy & Data > Export My Data in the App.
Delete your data — delete your account and all associated data from within the App settings or by contacting us.
Correct your data — edit or update any information you have provided.
Withdraw consent — where processing is based on consent (e.g., photo analysis, ad tracking), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
Opt out of notifications at any time through your device settings.

To exercise any of these rights, use the in-App settings or contact us at support@grnd-lab.com. We will respond within 30 days (or sooner if required by applicable law). You may also designate an authorized agent to submit a request on your behalf, subject to identity verification.

10. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS 1.2+) and at rest. Authentication is handled through Firebase Authentication with secure token management. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users via email and/or in-App notification without undue delay, and no later than required by applicable law (72 hours under GDPR, or as required by state law). We will also notify relevant supervisory authorities as required.

12. Cookies, Advertising & Tracking

12.1 Cookies on the Website

When you visit macromaxxing.app we use cookies and similar technologies (including browser localStorage) to operate the site and — only with your consent — to measure usage, remember preferences, and support marketing activities. On your first visit you will see a cookie banner allowing you to accept all, reject all non-essential cookies, or customize your choices by category. You can change or withdraw your consent at any time by clicking “Cookie settings” in the website footer.

We classify cookies and similar technologies into four categories:

Strictly necessary: Required for the Website to function. This includes a single entry in your browser's local storage that records your own cookie-consent choices so we do not show you the banner on every page. These are active by default and do not require consent because the site could not operate without them.
Preferences: Remember non-essential choices you make on the site, such as UI preferences. Opt-in only.
Analytics: Help us understand how visitors use the site (for example, which pages are viewed and which buttons are clicked) so we can improve it. Opt-in only.
Marketing: Used to measure advertising effectiveness and, where applicable, to show relevant ads on other sites. Opt-in only.

Current status: As of the effective date of this policy, the Website does not set any Preferences, Analytics, or Marketing cookies. The only item we store is the strictly necessary record of your consent choice. If we add analytics or marketing technologies in the future, they will be gated behind your consent and disclosed in an updated version of this policy.

Legal basis (EU/UK/EEA). Where the GDPR, UK GDPR, and ePrivacy rules apply, we rely on your consent as the legal basis for setting any non-essential cookies. Strictly necessary cookies are set on the basis of our legitimate interest in operating the site. You may withdraw consent at any time via the Cookie settings link; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Browser-level controls. In addition to our in-site controls, most browsers let you block or delete cookies and site data through their settings. Blocking strictly necessary cookies may cause parts of the site to stop working.

12.2 In-App Advertising (Mobile App)

The App itself does not use cookies. We display advertisements within the App using Google AdMob, including banner ads, interstitial ads, and rewarded ads. Google AdMob may collect device identifiers (such as your Advertising ID), IP address, and ad interaction data to serve and measure personalized ads. You can opt out of personalized advertising by adjusting your device settings:

iOS: Settings > Privacy & Security > Tracking, and disable “Allow Apps to Request to Track.” You may also decline the App Tracking Transparency prompt when first launching the App.
Web: Manage your choices via the cookie banner on first visit, the “Cookie settings” link in our footer, or your browser's cookie and site-data controls.

12.3 Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. There is currently no industry standard for how to respond to DNT signals. Our Website does not currently respond to DNT signals, but you can manage tracking preferences through the Cookie settings link described above or through your browser.

13. Children's Privacy

The App is not intended for children under 13 (or under 16 in jurisdictions where GDPR applies, unless the member state has set a lower age of consent). We do not knowingly collect personal information from children under these age thresholds. If we learn that we have collected data from a child below the applicable age threshold, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@grnd-lab.com.

14. International Data Transfers

Your data may be processed and stored on servers located in the United States and other countries where our service providers operate (including Google and Anthropic).

For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States, we rely on (a) the EU-U.S. Data Privacy Framework and UK Extension (where our processors are certified), (b) Standard Contractual Clauses approved by the European Commission, or (c) other lawful transfer mechanisms as applicable. We take steps to ensure that your data receives an adequate level of protection wherever it is processed, consistent with the requirements of applicable data protection laws.

By using the App, you acknowledge that your data will be transferred to and processed in the United States and other jurisdictions that may have different data-protection laws than your country of residence.

15. Your Privacy Rights Under Applicable Law

Depending on where you live, you may have additional rights under local privacy laws. Below is a summary of key jurisdictions. If your jurisdiction is not listed, contact us at support@grnd-lab.com to learn about your specific rights.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”):

Right to Know: You may request details about the categories and specific pieces of personal information we have collected, used, disclosed, and sold (if any) in the past 12 months.
Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt Out of Sale/Sharing: We do not sell your personal information. We share limited data with Google AdMob for ad delivery, which may constitute “sharing” under the CCPA. You can opt out of personalized ads by declining the App Tracking Transparency prompt or adjusting your preferences in Account > Privacy & Data > Ad Tracking Permissions.
Right to Limit Use of Sensitive Personal Information: Nutrition data, body metrics, and health-related information may constitute sensitive personal information under the CPRA. We use this data only to provide the App's core nutrition tracking services — not for advertising, profiling, or any purpose beyond what is necessary to deliver the service.
Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
Authorized Agent: You may designate an authorized agent to submit requests on your behalf. We may require proof of authorization and identity verification.

Washington Residents (My Health My Data Act)

Nutrition data, fasting data, body metrics, and workout data may constitute “consumer health data” under the Washington My Health My Data Act.
We collect this health data with your consent to provide the App's nutrition tracking functionality. We do not sell consumer health data.
You have the right to access, delete, and withdraw consent for the collection of your consumer health data.
Consumer health data is shared with Anthropic (for AI food analysis) and Google Firebase (for data storage) only as necessary to provide the service.

Virginia, Colorado, Connecticut, Texas, Oregon & Other U.S. States

If you reside in a state with a comprehensive privacy law (such as the Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Texas Data Privacy and Security Act, or Oregon Consumer Privacy Act), you generally have the right to:

Access, correct, and delete your personal data.
Obtain a portable copy of your data.
Opt out of targeted advertising, the sale of personal data (we do not sell your data), and profiling in furtherance of decisions that produce legal or similarly significant effects.
Appeal a denial of your privacy request by contacting us at support@grnd-lab.com.

EU/UK Residents (GDPR)

Legal Basis: We process your data based on: (a) your consent (e.g., photo analysis, ad tracking — which you may withdraw at any time), (b) contractual necessity (e.g., providing App features you requested), and (c) legitimate interests (e.g., improving the App, preventing fraud, and ensuring security), where those interests are not overridden by your rights.
Data Portability: You may request a copy of your data in a structured, machine-readable format (JSON export is available in-App).
Right to Restriction: You may request that we restrict processing of your data in certain circumstances (e.g., while we verify a correction request).
Right to Object: You may object to processing based on legitimate interests.
Automated Decision-Making: The App uses AI to estimate nutritional content from food photos and voice descriptions. This does not constitute automated decision-making with legal or similarly significant effects under Article 22 of the GDPR, as you can review, edit, and override all AI outputs.
Withdrawal of Consent: Where processing is based on your consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal.
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@grnd-lab.com. We will respond within the timeframe required by applicable law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or on our Website with a revised effective date. Where required by law, we will obtain your consent before making material changes to how we process your data.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or wish to file a complaint, contact us at:

GRND Labs LLC
support@grnd-lab.com