Macrometer Consumer Health Data Privacy Policy

Effective date: October 25, 2026
Who we are: Tauren James Brown, an individual developer in California, maker of Macrometer.
Contact: admin@sl3.org

This policy is for Washington's My Health My Data Act and Nevada's consumer health data law (SB 370), and for anyone who wants the health-data picture on one page. It covers the same facts as the Privacy Policy, in the order those laws ask for. Where the two differ, this one controls for consumer health data. Security and breach notice are described in the Privacy Policy, section 13.

"Consumer health data" is personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health. In Macrometer that's mostly about eating and going to the gym. This policy covers the features that exist today and any we add later that collect consumer health data.

1. What consumer health data we collect, and why

We may collect the following categories of consumer health data. The table describes what the current version of the app collects and why. "AI features" means the choice the app asks you to make when you first open it (section 6).

Category	What it is	Why we collect it
Voice audio for speech to text (AI features)	What the microphone hears while you ramble, which can include what you ate or anything else you say.	To write down your words. Your iPhone streams it straight to ElevenLabs; it never reaches our server. ElevenLabs keeps it with the transcript in our account's request history until deleted (backups up to 30 days more, and some of it in its debugging and moderation logs), and we've turned off its setting that lets it use our data to improve its models. Neither we nor ElevenLabs on our behalf make voiceprints from it or use it to identify you.
Food and nutrition descriptions sent for an estimate (AI features)	The words you say or type in a Ramble, meal photos (shrunk, without camera or location details), a LiDAR depth reading of the plate, labels you say, and food names and amounts when nutrient details are filled in.	To turn them into foods and nutrition for your log. Our server passes them along and doesn't keep them. Anthropic, which runs the AI models, processes them under its commercial terms, which don't allow training on them and, as of this date, provide for deleting them after about 30 days unless its safety systems flag a request.
Logged days	Dates on which you logged at least one meal, over the last 60 days. Not the meals.	Streaks, rings and the crew trail with the friends you've connected with, and the gym list.
Gym check-ins and gym membership	Days you marked a snap as a gym check-in (the app doesn't check your location for it), and the gym you joined.	Gym streaks, the gym list and duels with friends.
Snaps and selfies	Food photos and optional selfies you choose to send to friends or Ringo.	So the people you pick can see them for about a day; with AI features on, to name the food for the 50-50 game (the food photo only). We don't create faceprints or run face recognition on selfies.
Chats with Ringo (AI features)	Messages and snaps you send Ringo, and its replies. Free-form chat may contain whatever you choose to say about your health, mood or day.	To run the AI bot you're talking to, and to answer a message that reads like a crisis with a fixed referral instead of the AI.
Ringo coaching block (its own switch, off by default)	Today's and the last 7 days' meals and times, your totals against your targets, your goal, the app's weekly balance check, and your last few rambles word for word.	So Ringo can coach you on how you actually eat. Sent for one reply and not written to our database.
Status ideas (its own switch, off by default)	The words of a ramble or a photo label, and the time of day on your phone, when the app offers a status to post.	To suggest a status. Passed along for the answer and not kept by our server.
Messages and statuses	What you write to friends and post by your name, which may mention your eating, weight or health if you choose to.	To deliver them to the people you pick.
Inferences	Streaks, trail progress, nutrient estimates and Ringo's coaching replies drawn from the above.	To show you and your friends the features you use.

We don't ask for diagnoses, medications, reproductive or sexual health information or biometric data, and have no feature built around them; Macrometer isn't designed to store medical records or to manage a medical condition. What you choose to say in a ramble, message or Ringo chat is up to you, and we process it as described here. We don't collect your precise location: the gym finder uses it on your iPhone to find the gym you're in and sends the gym you pick, not your location fix; the gym indicates a place you were when you joined it.

Barcode numbers and food search words go from your iPhone directly to Open Food Facts and USDA FoodData Central, public databases that aren't under contract with us, together with your IP address. We don't receive or keep them.

In the current version, the rest of what the app knows about your health, such as your weight, height, age, sex, calorie and macro targets, weigh-ins and your full food log, stays on your iPhone and reaches us only through the Ringo coaching block if you turn it on.

2. Where it comes from

From you, through the app: what you say, type, photograph and tap. From your iPhone: the LiDAR depth reading, the dates your meals were logged, and, for coaching, the log block. From our service providers: the estimates, food names, status suggestions and Ringo replies generated from what you sent. From other users: reports about you and copies of messages or snaps you sent that someone reported. We don't buy consumer health data or get it from data brokers.

3. How we use it

We use consumer health data to provide the feature you used it in: to return an estimate, run Ringo, deliver what you send, and show streaks and gym lists to the people you connect with; to keep the service working and safe (rate limits, blocks, reviewing reports, keeping removed people from signing back in, error logs, security, enforcing our terms, answering crisis messages to Ringo with a referral and counting how often that happens, without any personal data in the count); and to meet legal obligations and protect our and others' rights. We don't use the words, photos or depth readings you send for an estimate to improve or evaluate the service unless you turn on Help improve estimates, a separate setting that asks you first and isn't in the app yet. Aggregated or de-identified information that can't reasonably be linked to you isn't consumer health data, and we may use it for any lawful purpose.

We don't use consumer health data for advertising or marketing, don't build marketing profiles, don't disclose it to advertisers, data brokers or information resellers, and don't train AI models on it unless you opt in through a setting made for that purpose. The inferences we draw are the streaks, estimates and coaching you see in the app.

We sell no consumer health data.

We share consumer health data with people you choose: friends, crewmates and people at your gym see what the Privacy Policy, section 6, describes (whether you logged, streaks, gym check-in days, your status, and the snaps and messages you send). You pick who, by sharing invite codes, joining a gym, accepting friend requests and choosing a snap's recipients. The sign-in card says what friends will see before you sign in, the gym page says what people there will see before you join, and the Me → What friends see switches hide today or your streaks from everyone.

We disclose consumer health data to processors who handle it for us under written terms that bind them to confidentiality and to acting only on our instructions; they can't use it for their own purposes or sell it. We may change processors or add ones that do similar work; the current ones are:

Processor	Role	Contact
Cloudflare, Inc., San Francisco, CA	Hosting, database, photo storage, notification relay, server logs, backups	privacyquestions@cloudflare.com
Anthropic, PBC, San Francisco, CA	AI models and web search behind estimates, nutrient details, status ideas, the 50-50 game and Ringo	privacy@anthropic.com
Eleven Labs Inc., New York, NY	Speech to text while you ramble (AI features on)	dpo@elevenlabs.io

Apple processes some data under its own privacy policy rather than on our instructions: Sign in with Apple, push notification delivery (the notification text we send can say that a friend logged or snapped, and the first part of a message), and speech recognition when it doesn't run on your iPhone (before iOS 26, or when the on-device model isn't ready). You choose these by signing in, allowing notifications and using voice when recognition isn't on your iPhone.

We may also disclose consumer health data where the law requires or permits it, for example in response to legal process, to protect someone's safety, to enforce our terms, or in a sale or transfer of Macrometer to a new owner who takes it on under this policy.

Apart from the people you choose and Apple as described above, we share consumer health data with no third parties or affiliates. If that changes, we'll ask for your separate consent first, as the law requires, and update this list.

5. Your rights

You have the right to:

Confirm and access whether we're collecting, sharing or selling your consumer health data, to get a copy, and to get a list of the third parties and affiliates it's been shared with (above) and processors it's been disclosed to (above).
Withdraw consent. Turn off AI features or Status ideas in Me → Privacy & terms; turn off Ringo coaching in Me → Ringo; stop sending snaps, messages or rambles; hide today or your streaks in Me → What friends see; leave your gym from its page; or delete your account.
Delete. In Friends, tap … next to "Signed in as" → Delete account. This removes your account and the data tied to it from our live systems at once; copies may remain in backups for a limited time, within the limits your state's law sets, and we keep what the law allows us to keep for the reasons in the Privacy Policy, section 9 (for example, a copy of a message someone else reported, until it's reviewed). Data our processors hold for us on our servers is deleted with it; anything a processor keeps briefly on its own systems is deleted under its terms. Meals on your iPhone are yours to delete by deleting the app.

By email. Deleting your account in the app is the surest path, because it's done from your signed-in account. For anything else, write to admin@sl3.org and say what you want. Before we send you a copy of your data, change it or delete it, we'll ask you to prove you control the account from inside the signed-in app (for example, by posting a status with a short code we send you); a first name and emoji aren't enough, because many people share them. If you've lost access to the account, we'll tell you what we can do without that proof. We respond within 45 days; if we need up to 45 more, we'll tell you why. A deletion request is completed within the time your state's law sets once we've confirmed it's you. We won't charge for up to two requests in a 12-month period. You won't be treated differently for asking.

Appeals. If we decline a request, reply to our email and say you want to appeal. A fresh look, with a written answer, comes within 45 days. If you're still unhappy, you may contact the Washington Attorney General (atg.wa.gov/file-complaint) or the Nevada Attorney General (ag.nv.gov). This appeal process is also posted on our legal site's front page.

The app asks for consent separately from the Terms and this policy, in the app, before the collection it covers:

AI features. When you first open the app, after the Terms, a separate screen asks whether to stream your voice to ElevenLabs to be written down, and to send what you say, your meal photos and depth readings, Ringo chats and (for the 50-50) snap photos through our server to Anthropic's Claude, with the buttons Turn on AI features and Not now. The screen says what's sent, where, what it's used for and how to turn it off (Me → Privacy & terms). Nothing goes to either provider until you say yes, and the app records your answer, its date and the version of the screen on your phone. When we add a provider or send something new, the screen asks again anyone who had said yes. Logging by barcode, search or by hand sends no consumer health data to the AI.
Status ideas, Ringo coaching (Me → Ringo) and Your face in snaps (Me → What friends see) are each off until you turn them on, and each setting says what it sends.
Sharing with people you choose. The sign-in card says what friends will see before you sign in, and the gym page says what people there will see before you join. Sending a snap or message to someone is how you share it with them.

Using Macrometer's logging and social features is how you ask for them; we collect the consumer health data needed to provide them, as listed above. We won't collect or share consumer health data for a purpose not described in this policy without first asking for your separate consent, as the law requires.

7. Geofencing

We don't use geofences. The gym finder takes one location reading on your iPhone when you open it at a gym and sends only the gym you pick. The current version doesn't track your location or send location-based notifications.

8. Changes

We may change this policy. When we do, we'll update the date above and post the new version here, and tell you in the app for a material change. A change that expands collection or sharing of consumer health data beyond what you've consented to takes effect for you only after you agree to it in the app, where the law requires that.