Privacy policy
In short. We only store what is needed to make the app work: your account, your profile and what you log. Your data is stored in the EU, other users cannot access it (except friends you add yourself: they only see your name and your weekly score), we sell nothing and show no ads. You can export or permanently delete everything at any time.
Who is responsible?
MacroMatrix is run by DivineNet. For any question about your data, email privacy@divinenet.online.
What data do we store?
| Data | Why |
|---|---|
| Email address and password (stored encrypted, we cannot read it) | Logging in, confirming your email address and choosing a new password |
| Profile: sex, year of birth, height, weight, activity, goal and preferences | Calculating your personal targets |
| Allergies you choose to enter (you may leave this empty) | Warning you when a product contains something you are allergic to, and not suggesting such products |
| Your scanned products: barcode, product name and time (the last 100), and how many different products you have ever scanned. The product details of your last 200 scans are also kept on your device only, so scanning works offline | Showing your scan history, scanning without internet and keeping track of the scanner badge |
| Diary: what and how much you ate, time, notes, recipes, your own products and your supplements | Showing your day, your trends and your history |
| Measurements: weight, blood pressure, glucose and other measurements you enter yourself, exercise and fasting | Showing your progress and estimating your energy use |
| Only if you use the friends feature: a name of your choice, your profile photo or avatar, your level, your chosen title and your showcase badges, your friend code, your friends, your battles and, per week, your average Nutrient Score (0–100) with the number of days logged and your battle points | Adding friends and showing each other's weekly score |
| The moment you accepted the terms and this policy | Showing that you gave consent |
Some of this is health data. We only process it because you explicitly consent to it when you create your account (Article 9(2)(a) GDPR), and only to make the app work for you. You can withdraw that consent at any time by deleting your account.
Friends
The friends feature is off until you open it yourself. After that, people you accept (or people you add who accept you) can see your name, your profile photo or avatar, your level, your title, your showcase badges and your average Nutrient Score per week, plus the number of days you logged that week. If you start a battle, your opponent also sees your battle points for that week (the sum of your daily scores). A photo is resized to 192 by 192 pixels before it leaves your device. They never see your email address, your diary, your weight or any other data. You can remove a friend at any time; from then on they see nothing.
Health Connect (Android)
Only if you turn it on in the settings, MacroMatrix reads your steps, workouts (with the energy burned and distance) and weight from Health Connect on your phone, for the last 7 days. They become measurements and exercise in your diary, just as if you had entered them yourself, and are stored and synced like the rest of your data. MacroMatrix never writes to Health Connect and does not use this data for anything else. You can turn it off at any time in the settings or in Health Connect.
Battle notifications (Android)
To notify you when a friend challenges you, your phone gets a random device code. About every 15 minutes, your phone uses that code to ask our database whether there are new challenges for you; the answer only contains the challenger's name. The code is removed when you log out or delete your account.
Voice, reminders and the widget
If you use "Quick log" with your voice, the speech recognition of your device or browser (on Android usually Google's) turns your words into text. MacroMatrix only receives that text and does not store any audio. On phones without their own speech recognition (for example GrapheneOS), the app records up to 15 seconds itself and sends that recording, only when you tap the microphone, to our server on Cloudflare, where Whisper (Cloudflare Workers AI) turns it into text. Only the text comes back; the recording is not stored. Reminders are scheduled on your device itself; nothing is sent to our server for that. The home screen widget only shows data that is already on your phone.
What we do not do
- We do not sell or rent out your data.
- We do not show ads and do not use your data for marketing.
- We do not use tracking cookies or analytics on the website or in the app.
- We do not make decisions about you based on automated profiling.
Where is your data?
| Service | What | Where |
|---|---|---|
| Supabase | Account, database and sync | Ireland (EU) |
| Brevo | Sending the emails with your code | France (EU) |
| Cloudflare | Hosting the website and the web version of the app; passing on barcode lookups to USDA. Cloudflare does not store your account data | Worldwide network, company in the US (EU standard contractual clauses) |
| Open Food Facts | Searching branded products: only your search term or barcode, without your account | France (EU) |
| USDA FoodData Central | Only if Open Food Facts does not know a product: the barcode, through our own server, so without your account or IP address | United States |
These services only process your data on our behalf, under their data processing agreement (DPA), and may not use it for anything else. A copy of your data is kept on your own device, so the app also works without internet.
How long do we keep it?
As long as your account exists. If you delete your account, your account and all your data are deleted right away. Copies in backups disappear within 30 days. An account you never confirmed is deleted after 30 days.
Security
- All connections are encrypted (HTTPS).
- The database only lets each user see and change their own data.
- Passwords are never stored in readable form.
Your rights
- Access and portability: in the app via Profile → Settings → Export diary (CSV). If you want everything, email us.
- Correction: you can change everything yourself in the app.
- Deletion: Profile → Settings → Delete account.
- Objection and restriction: email us; we reply within a month.
- Complaint: with the Belgian Data Protection Authority, dataprotectionauthority.be, or the authority in your own EU country.
Age
The app is meant for adults (18 or older). The reference values do not apply to children, nor during pregnancy or breastfeeding.
Changes
If we change this policy, you will see it in the date at the top. For important changes, we will let you know in the app.