MacroFactor Privacy Notice

Last Updated: September 1, 2024

この通知の日本語バージョンは こちら 

Introduction

Welcome to MacroFactor!

Stronger by Science Technologies LLC, which we will call “MacroFactor,” really cares about keeping your personal information, which we will refer to as “Personal Data,” safe. This is our privacy notice (“Privacy Notice” or simply “Notice”), and it is here to explain what we do with your Personal Data, how we protect it, and what rights you may have under applicable data protection and privacy laws.

Summary of Our Privacy Notice

At MacroFactor, we take your privacy seriously. We want you to know that:

1. We Don’t Sell Your Personal Data: We do not sell your Personal Data to third parties. 

2. No Cross-Behavioral Advertising: Unlike many other apps, we do not share your data for cross-behavioral advertising purposes. We are a premium app, and we do not need to engage in such practices.

3. You Have Control: We want you to manage your Personal Data easily. Some of the things you can do yourself with your Personal Data include:

• Delete Your Data: You have the right to request the deletion of your personal data. Simply go to Data & Privacy and select “Delete Your Account.” Please note that this will not cancel your subscription, which you can manage through your phone’s app store.
• Edit Your Data: If you need to correct or update your personal information, you can do so in your Profile tab or by contacting our support team.
• Download Your Data: You can also request a copy of your data through the app. To do this, visit Data & Privacy and select “Generate Spreadsheet.”
• Unsubscribe to Emails: If you no longer want to receive our emails, look for the Unsubscribe option at the bottom of the email.

4. List of Third Parties That Process Your Personal Data:

If you download or use the app, including its customer support, Knowledge Base and roadmap features:

• RevenueCat, Inc. (USA)
• Athlete Body KK (Japan)
• App Global GK (Japan)
• Google, LLC (USA)
• Gleap GmbH (Austria)
• OpenFoodFacts (France)
• Apple Inc (USA)
• Retool, Inc. (USA)

If you visit the website:

• Google, LLC (USA)
• DigitalRelevance, Inc. (USA)
• Cloudways Ltd. (USA)
• Cloudflare (USA)

If you are an affiliate:

• PayPal Holdings, Inc. (USA)
• RevenueCat, Inc. (USA)
• Notion Labs, Inc. (USA)
• Everflow Technologies Inc. (USA)

If you engage with us on social media or see our ads:

• Meta Platforms, Inc. (USA)
• Microsoft Corp. (USA)
• reddit Inc. (USA)
• X Corp (USA)
• TikTok Inc (USA)
• Athlete Body KK (Japan)
• App Global GK (Japan)

If you subscribe to our newsletter:

• Athlete Body KK (Japan)
• App Global GK (Japan)
• ConvertKit LLC (USA)

If you share a success story with us for publication on the website:

• Cloudways Ltd. (USA)
• Cloudflare (USA)
• Athlete Body KK (Japan)
• App Global GK (Japan)

1. If you share a success story with us for publication on social media:

1. Cloudways Ltd. (USA)
2. Meta Platforms, Inc. (USA)
3. Microsoft Corp. (USA)
4. reddit Inc. (USA)
5. X Corp (USA)
6. TikTok Inc (USA)

5. You Can Contact Us At Any Time: If you have any questions or privacy concerns, feel free to reach out to:

• Us by emailing [email protected], or contacting the support team within the app;
• Our Data Protection Officer (DPO);
• Our UK Data Protection Representative; or
• Our EU Data Protection Representative.

6. Your Privacy Matters To Us. This sounds like a cliché, but we are truly committed to transparency and implementing the best privacy practices. If you want to learn more about how we handle your data, please refer to our detailed privacy notice below.

What Does this Privacy Notice Cover?

This Privacy Notice covers your interactions with us in various ways, such as: 

• Using Our App: When you use MacroFactor, we collect and process your Personal Data to provide you with our services.
• Getting Help and Providing Feedback: If you need assistance, you might visit our help center or use our feedback portal and roadmap portal to share your thoughts. We handle your Personal Data there too.
• Visiting Our Website: When you visit macrofactorapp.com, this Privacy Notice applies to your data. 
• Social Media: We may engage with you on our social media sites, and we want you to know how we handle your data there. This includes our Facebook pages (English, Japanese), our Twitter accounts (Japanese, English), our Instagram accounts (English, Japanese), our TikTok accounts (English, Japanese), our YouTube channels (English, Japanese), and our LinkedIn page. However, in case you decide to interact with us through those means, this Notice describes what happens to your Personal Data.
• Partnering with Businesses: Sometimes, we collaborate with business partners. We will clarify how your data is involved in such partnerships.
• Staying in Touch: When we communicate with you about our products and services, your Personal Data is treated with care.
• Participating in the MacroFactor Affiliate Referral Program: When you join our Affiliate Referral Program, we collect and process your Personal Data as necessary to facilitate this program.

What This Privacy Notice Does Not Cover

This Privacy Notice does not apply to:

• MacroFactor Personnel: Except indicated otherwise, this notice does not cover the Personal Data of our employees, interns, job applicants, contractors (excluding participants of our Affiliate Referral Program), business owners, directors, officers, and medical staff. They have their own privacy arrangements.
• Non-Personal Data: If the information we have cannot identify an individual or household, this Notice does not apply. However, we will do our best to describe our processing of non-Personal Data, such as aggregate data.
• The Use of Your Personal Data Determined by Others: For instance, when you interact with us on social media or open a PayPal account to receive payment for your participation to the Affiliate Referral Program, we cannot control what the social media platform or PayPal do with your Personal Data beyond our requests. This Notice includes links to the privacy notices of third parties who might collect and use your Personal Data during your interactions with MacroFactor, so you can review them.

Our Role With Respect to Your Personal Data

In the context of this Notice, MacroFactor plays the role of a “data controller” or “business” for the Personal Data we process. What this means is that we decide how and why your Personal Data is collected and used. 

Legal Justifications for Processing Your Personal Data

To use your Personal Data, we must have a valid reason, which under some laws is called the “lawful basis for processing” or “legal grounds for processing.” We may process your Personal Data based on these reasons: 

• Your Consent: Sometimes, we will use your Personal Data because you actively indicated it is okay that we do so. This includes, for example, when you agree to receive our newsletter or choose to share any non-mandatory information in our app.
• Keeping Our Agreement Obligations: This includes using your Personal Data to fulfill our agreement with you by, for example, providing requested customer support or informing you of changes to our terms or to your subscription, or pay you for your participation in the Affiliate Referral Program.
• Legitimate Interests: We sometimes use your Personal Data because we believe it is in our best interest or the interest of someone else. Legitimate interests work when we use your Personal Data in ways that make sense and do not intrude on your privacy much. Or when we have a very good reason for it. Here is what it normally means for us:
  • Product Improvement: MacroFactor may use data to enhance its app’s features and functionality, making it more useful and user-friendly.
  • Customer Engagement: Keeping users, subscribers and others informed about updates, new features, and nutrition-related content that may interest them.
  • Research and Development: Using aggregated and anonymized data to conduct research on nutrition trends and user behavior to improve the app.
  • Marketing and Promotion: Promoting the app to a wider audience and providing tailored recommendations based on user data.
  • Security and Fraud Prevention: Protecting the app and its users from security threats, fraud, and abuse.
  • Legal Compliance: Ensuring compliance with relevant laws and regulations, including the rules from other countries besides yours.
  • Business Operations: Managing day-to-day operations and ensuring the app’s sustainability and growth.
• Following the Law: This includes processing your Personal Data to follow the law, such as keeping records of your cookie choices to comply with EU law, such as the e-Privacy Directive and the General Data Protection Regulation.
• Other Reasons: This includes using your data for any other reason that the law allows.

If we use legitimate interests as the reason for using your Personal Data, you can ask us for more details about why we think it is a good idea. Just get in touch using the contact details here.

When we use your Personal Data because you gave us permission (consent), you can change your mind at any time. However, this will not undo the things we did with your data before you changed your mind. It also will not change the things we are allowed to do with your data based on other reasons.

What Personal Data We Collect and Process and Why, How Long We Keep It, and With Whom We Share It

At MacroFactor, we collect and process personal data for various purposes. Here is a breakdown of the Personal Data we process, how we obtain it, why we use it, how long we keep it, and who else might handle it.

MacroFactor Newsletter

• Purpose: We use your data to share our newsletter with you.
• How We Get It: We get your email when you subscribe to our newsletter or from our MacroFactor app user base.
• Valid Reason to Use Your Personal Data: For subscribed recipients, you gave us your consent to send you the newsletter. For data from our app users, we have a legitimate interest. You can unsubscribe at any time.
• Who It Concerns:  Newsletter subscribers and users of the MacroFactor app.
• Categories of Personal Data: We only collect your email address.
• How Long Your Personal Data Is Kept: Your data (except for the fact that you unsubscribed) will be retained for as long as you remain subscribed to the newsletter
• Who Handles Your Personal Data On Our Behalf
  • We use a service called ConvertKit LLC to help us with email marketing. They are in the USA.

Social Media Engagement

• Purpose: We use your data to provide support, boost brand recognition, and engage with you on platforms like Instagram, Reddit, Facebook, and LinkedIn.
• How We Get It: We directly receive your data from your social media interactions. Additionally, Meta Platforms, Inc., Microsoft Corp., and Google, LLC, may collect and provide some of your data.
• Valid Reason to Use Your Personal Data: Our legitimate interest in promoting brand awareness and engaging with our audience. To learn the legal basis for the processing of your Personal Data by Meta Platforms, Inc., Microsoft Corp., and Google, LLC., please read their privacy notices (which we have hyperlinked below).
• Who It Concerns:  Individuals interacting with MacroFactor’s social media profiles on platforms such as Instagram, Reddit, Facebook, and LinkedIn.
• Categories of Personal Data: User profile information, communications, and data volunteered by social media users. This data may include social media usernames (which may include real names), profile pictures, profile information, social media activity, direct messages with MacroFactor, posts where MacroFactor has been tagged, and any other information volunteered by social media users. In some cases, this volunteered information may include information related to app usage, recipes, dietary preferences, allergies, success stories, photos, and, in certain instances, even medical history.
• How Long Your Personal Data Is Kept: Personal data in social media posts is retained as long as those posts exist. Personal data exchanged with MacroFactor through messages is kept as long as it is stored by MacroFactor.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Athlete Body KK and App Global GK, a user support team located in Japan (only for our Japanese social media accounts, channels and pages).
• Other Parties Involved in the Processing:
  • Social media platforms:
    • Meta Platforms, Inc. (Instagram, Facebook) (USA)
    • Microsoft Corp. (LinkedIn) (USA)
    • reddit Inc. (Reddit) (USA)
    • Google LLC (YouTube) (USA)
    • X Corp (Twitter) (USA)
    • TikTok Inc (TikTok) (USA)

MacroFactor App Account Registration and Authentication

• Purpose: We use your data to create and safeguard your MacroFactor App account.
• How We Get It: When you sign up, you provide information such as your email and authentication credentials. If you use Google or Apple Single Sign-On (SSO), we also gather data from these sources during registration.
• Valid Reason to Use Your Personal Data: Our obligation to fulfill our agreement with you.
• Who It Concerns:  All MacroFactor App users.
• Categories of Personal Data: Email address, password (hashed, salted, unencrypted and not accessible to MacroFactor), authentication tokens, user UUID.
• How Long Your Personal Data Is Kept: For as long as your account exists (regardless of the status of your subscription).
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Firebase Cloud Firestore) (USA)

MacroFactor App User Support and Assistance

• Purpose: We gather specific details to address your concerns promptly and effectively when you encounter issues or require assistance while using the MacroFactor App.
• How We Get It: We obtain your data through various methods:
  • First, when you report an issue or contact us through the app, you actively share information with us. This includes written descriptions of the issue or request, as well as any uploads like screenshots or recordings that you may choose to provide for clarity.
  • Second, the app automatically collects device information, such as device logs and hardware details. This information is essential for diagnosing and resolving technical problems.
• Valid Reason to Use Your Personal Data: We process your data for user support based on:
  • Contractual obligations: To fulfill our commitment to assist you with any issues or requests related to the use of the MacroFactor App.
  • Legitimate interest: To enhance the overall user experience.
• Who It Concerns:  This user support provision is available to all MacroFactor App users.
• Categories of Personal Data: As part of our user support activities, we process the following categories of personal data
  • User account information: unique ID, name (if available), email, language, last activity date, last feedback date, state and country, user message history with timestamps and contents.
  • Device/environment data: total disk space (GB), phone charging status, user locale language, free disk space (GB), device pixel ratio, system name (Android or iOS), build version, build mode, device identifiers, release version, device name, last screen, screen height, energy-saving mode, bundle ID, session duration, device model, screen width, SDK type.
  • Ticket information: user’s support ticket, email, timestamps for specific actions, any uploaded screenshots or recordings.
• How Long Your Personal Data Is Kept: Personal Data included in support requests will be retained for as long as the related user account is active and as long as the support requests remain open and actively being addressed. Archived customer support tickets are deleted within one year.
• Parties that May Handle Your Personal Data on Our Behalf: We engage (a) Gleap GmbH a support ticket management software located in Austria; (b) Athlete Body KK and App Global GK, a user support team located in Japan (only for Japan users based on device locale and having Japanese as the language for your operating system); and (c) Retool, Inc. the provider of a low-code visualization tool, located in the USA.

MacroFactor App Personalized User Features:

• Purpose: We gather and process your Personal Data to provide you with personalized meal planning, tracking, and recommendations, enhancing your app experience and functionality.
• How We Get It: You can manually enter this information, and sometimes, you grant us access to some data from Apple Health, Fitbit, Google Fit or Health Connect. Additionally, we may write data back to these services to ensure synchronization and provide a seamless experience across platforms.
• Valid Reason to Use Your Personal Data: We process your data based on:
  • Your Consent: When you voluntarily provide specific information or grant access to third-party services.
  • Our Legitimate Interests: For mandatory app functionality.
• Who It Concerns:  MacroFactor App users.
• Categories of Personal Data: We collect and process various categories of Personal Data, including:
  • User information, such as your name, date of birth, and email.
  • Your sex (male/female).
  • User preferences and settings, like your dashboard, food logging, timeline and period tracking and check-in day settings.
  • App-usage information, like interactions with the app, onboarding steps completions, and disclaimers.
  • User goals.
  • Customized calorie target and macro program .
  • Body metrics (e.g., weight, height, body fat level, measurements like waist, hips, arms, legs, and ratios like waist-to-height).
  • Macro and micronutrient intake.
  • Protein, carbs, and fat percentages.
  • Lifestyle information, such as cardio experience, exercise frequency, activity level, and strength sports experience.
  • Integration information from Apple Health, Fitbit, Google Fit and Health Connect (with your permission). 
  • Progress photos (further details below).
• Additional Information: The use of information received from Health Connect and Apple Health will adhere to their respective permissions policies, including those outlined by Google LLC and Apple Inc.
• How Long Your Personal Data Is Kept: For as long as your account is not deleted or do not delete your entries. Additionally, please note that in the future, we may implement an automatic data deletion policy for users who have not been subscribed or active for an extended period. Do not worry though, we will give you several warnings before deleting your data.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Firebase Cloud Firestore) (USA)

User Subscription Management:

• Purpose: We process some of your data to, to the extent allowed by the app stores, manage and consult user subscriptions for the MacroFactor App, including sign-ups, refunds, cancellations, billing, and renewals.
• How We Get It: Information related to your subscription is obtained through the App Store or Play Store.
• Categories of Personal Data: Email, user UUID, country, affiliate code used to purchase the app, subscription status, subscription length, past purchases, purchase ID, location, currency, and transaction history. Please note that we do not have access to sensitive payment information like credit card numbers, as these are managed by Apple Inc. and Google, LLC’s purchase systems.
• Valid Reason to Use Your Personal Data: We process your data to fulfill our agreement obligations with you.
• How Long Your Personal Data Is Kept: Information regarding your subscription is stored in Google Play and the App Store according to the retention policies of Google LLC and Apple Inc. Additionally, data in RevenueCat, Inc., is retained by MacroFactor until a user deletes their MacroFactor app account.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • We engage RevenueCat, Inc., a provider of subscription management software in the USA.
  • We engage Athlete Body KK and App Global GK, a user support team located in Japan, who will review and respond to app reviews in Japanese.
• Other Parties Involved in the Processing:
  • Google LLC (Google Play) (USA)
  • Apple Inc (App store) (USA)

MacroFactor App Analytics

• Purpose: We gather and observe data for the purpose of identifying trends and making data-driven decisions to enhance app improvements and marketing strategies.
• How We Get It: Your data is automatically collected by Firebase from your interactions with the app.
• Valid Reason to Use Your Personal Data: We process your data based on our legitimate interest in improving the user experience and making data-driven enhancements.
• Who It Concerns:  All MacroFactor App users.
• Categories of Personal Data: We collect app usage data, including user behavior data. This data is presented in an aggregated format and includes timestamps of app interactions, screen views, user actions, and retention data.
• How Long Your Personal Data Is Kept: Aggregated data remains accessible to MacroFactor indefinitely.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Firebase Cloud Firestore) (USA)

MacroFactor App Mailing List

• Purpose: We collect your data to provide informative communications and app-related news. We may also introduce promotional content as additional app products by MacroFactor or its partners become available.
• How We Get It: Users provide this information during registration or account customization.
• Valid Reason to Use Your Personal Data: We process your data based on our legitimate interest in keeping users informed about app features and sharing interesting content.
• Who It Concerns:  MacroFactor App users.
• Categories of Personal Data: We collect and process contact information (email address), subscription status (active/cancelled), and data about interactions with emails (opens, clicks, and unsubscribes per email).
• How Long Your Personal Data Is Kept: As long as users maintain their subscription or choose to unsubscribe from email communications.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • We engage ConvertKit LLC, a provider of email marketing software in the (USA).
• Other Parties Involved:
  • Influencers, organizations and companies mentioned in our communications, such as:
    • Stronger by Science, LLC (Fitness media and coaching company) (USA)

MacroFactor App Hosting and Backend Infrastructure

• Purpose: We collect data to securely host and maintain app data, including user information and app content. Additionally, we manage the backend infrastructure for optimal performance and scalability.
• How We Get It: Data is collected from users during the registration process and through app usage.
• Valid Reason to Use Your Personal Data: This is based on our agreement obligations.
• Who It Concerns:  MacroFactor users.
• Categories of Personal Data: All Personal Data processed for the provision of the app.
• How Long Your Personal Data Is Kept: We retain your data as long as your MacroFactor App account exists.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Firebase Cloud Firestore) (USA)

MacroFactor App Infrastructure Monitoring

• Purpose: We continuously monitor the app’s infrastructure to identify security threats, performance issues, and ensure reliability and security for users.
• How We Get It: The app automatically observes certain information from users. 
• Valid Reason to Use Your Personal Data: This is based on our legitimate interest, specifically, our interest in providing users with a secure and dependable experience.
• Who It Concerns:  All MacroFactor users.
• Categories of Personal Data: All Personal Data processed for the provision of the app.
• How Long Your Personal Data Is Kept: As long as users maintain their accounts.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Firebase Cloud Firestore, Firebase Firestore Analytics, Crashlytics) (USA)

Cookie Consent Management for macrofactorapp.com

• Purpose: We collect your data to record and remember your cookie consent choices on macrofactorapp.com.
• How We Get It: We obtain it when you interact with our cookie banner. 
• Valid Reason to Use Your Personal Data: This data is necessary to comply with the legal obligation to obtain and record user consent for the use of trackers (cookies) on macrofactorapp.com.
• Who It Concerns:  Visitors to the macrofactorapp.com website.
• Categories of Personal Data: This data includes specifics of your consent choices (opt-out/opt-in for each cookie category), pageviews, IP address (with the last three digits masked), consent timestamp, whether you interacted with the cookie banner, cookie identifier, and region.
• How Long Your Personal Data Is Kept: Currently, this data is retained indefinitely.

MacroFactor Feedback and Roadmap Portal

• Purpose: The MacroFactor Feedback and Roadmap Portal, powered by Gleap, serves as a platform for users to submit feedback, ideas for feature requests, and upvote/downvote feature requests related to the MacroFactor app. We use this feedback to make the app better.
• How We Get It: We obtain it when users interact with the feedback and roadmap portals.
• Valid Reason to Use Your Personal Data: This is based in our legitimate interest in improving the functionality of the MacroFactor app by collecting user feedback and using this feedback to enhance app features. Users have the option to provide feedback and can delete their posts or votes at any time.
• Who It Concerns:  MacroFactor users who provide us with feedback and website visitors of our feedback portal.
• Categories of Personal Data: The data collected includes feedback submissions, aggregate user information, and upvotes/downvotes. User IDs (incremented) and email addresses are associated with down/upvotes.
• How Long Your Personal Data Is Kept: As long as the feedback content is not deleted.
• Parties that May Handle Your Personal Data On Our Behalf:
  • We engage Gleap GmbH, the provider of roadmap software. They are in Austria.
  • We also engage Athlete Body KK and App Global GK, a user support team located in Japan (only for Japan users based on device locale and having Japanese as the language for your operating system).

Social Media Advertising for macrofactorapp.com

• Purpose: We process some data to run online advertising campaigns on social media platforms, specifically Facebook and Instagram through the Meta Ads Platform. The primary purpose is to promote the MacroFactor app and its website, foster user engagement, conduct market research, and assess the effectiveness of marketing campaigns.
• How We Get It: The data required for these activities is obtained from Meta Platforms, Inc.
• Valid Reason to Use Your Personal Data: This is based in our legitimate interests in promoting the MacroFactor App and its website, analyzing user engagement, and conducting market research. Meta may rely on a different legal basis for processing your information as detailed in their privacy notice.
• Who It Concerns:  Users of Facebook and Instagram who interact with our advertising campaigns.
• Categories of Personal Data: Online identifiers, behavioral data, and marketing data, such as social media user IDs, demographic data, interests, and online behavior.
• How Long Your Personal Data Is Kept: As long as Meta makes the Personal Data available.
• Parties that May Handle Your Personal Data On Our Behalf:
  • We also engage Athlete Body KK and App Global GK, a team located in Japan who will manage our ads in the Japanese market.
• Other Parties Involved in the Processing:
  • Social media platforms:
    • Meta Platforms, Inc. (Instagram, Facebook) (USA)

Website Content Management for macrofactorapp.com

• Purpose: Creating, managing and publishing both educational and promotional material on the macrofactorapp.com website. The content includes information about the product and its features, articles, case studies, videos, web versions of MacroFactor Monthly, and release notes. 
• How We Get It: We obtain information through various means, including user-provided data such as email addresses volunteered through support forms, success stories, and progress photos shared by users who initially contributed their stories and images to MacroFactor’s communities. Additionally, we collect data from user interactions with macrofactorapp.com.
• Valid Reason to Use Your Personal Data: In the case of volunteered data, such as testimonials and success stories, we rely on your consent to use it for the purposes mentioned above.
• Who It Concerns:  MacroFactor app users who choose to share their story with the public.
• Categories of Personal Data: User success stories and information volunteered by individuals.
• How Long Your Personal Data Is Kept: We retain your personal data for as long as the content is published on the website.
• Parties that May Handle Your Personal Data On Our Behalf:
  • We engage Cloudways Ltd, based in the USA, and utilize Cloudflare for enhanced security and performance.
  • We also engage Athlete Body KK and App Global GK, a team located in Japan who will manage the website content in Japanese.

Knowledge Base for MacroFactor

• Purpose: We gather some data to allow users to interact with the Knowledge Base for MacroFactor, powered by Gleap. This is accessible to users from within the app or via the website (https://help.macrofactorapp.com/). Its primary purpose is to provide users with relevant and accurate information, recommendations, and support. Users can optionally consult the Knowledge Base using a GPT-4 AI model.
• How We Get It: Data used in this activity includes user-provided information, such as email addresses or user IDs, and user interactions with the MacroFactor Knowledge Base.
• Valid Reason to Use Your Personal Data: Our legitimate interest in helping our users get the most of our app. 
• Who It Concerns:  MacroFactor app users and website visitors who access the MacroFactor Knowledge Base for information and support.
• Categories of Personal Data: User provided information, user IDs, and user interactions with the Knowledge Base, including search queries.
• How Long Your Personal Data Is Kept: We retain your personal data until your MacroFactor App user account is deleted.
• Parties that May Handle Your Personal Data On Our Behalf:
  • We engage Gleap GmbH, our provider of knowledge base software. They are in Austria.

MacroFactor App Progress Photos

• Purpose: We process data to facilitate the functionality that enables users to capture or upload front, side, and back progress photos for the purpose of comparing before and after images or viewing individual photos. Additionally, our features enable users to share or download individual progress cards for before and after comparisons.
• How We Get It: We process the photos that users manually upload.
• Valid Reason to Use Your Personal Data: The user’s consent.
• Who It Concerns:  MacroFactor app users who choose to utilize the progress photo feature.
• Categories of Personal Data: User-provided progress photos, specifically front, side, and back progress photos.
• How Long Your Personal Data Is Kept: The photos are retained for as long as the user MacroFactor App account exists, or until the user chooses to delete their  photos.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Firebase Cloud Firestore, Crashlytics) (USA)

Gathering and Social Media Posting of User Testimonials

• Purpose: We collect data to gather user testimonials to enhance our marketing efforts and increase user engagement. This data is used to create testimonial content for our website (as described under the section Website Content Management) and social media platforms.
• How We Get It: User data is collected directly through a orm on our website. Users voluntarily provide their name, email address, testimonial content, and images. 
• Valid Reason to Use Your Personal Data: We rely on the user’s explicit consent to process the information contained in their testimonials.
• Who It Concerns: MacroFactor users who voluntarily choose to provide testimonials.
• Categories of Personal Data: User’s name, email address, testimonial content, and images.
• How Long Your Personal Data Is Kept: As long as the content is posted on social media.
• Other Parties Involved in the Processing:
  • Social media platforms:
    • Meta Platforms, Inc. (Instagram, Facebook) (USA)
    • Microsoft Corp. (LinkedIn) (USA)
    • reddit Inc. (Reddit) (USA)
    • Google LLC (YouTube) (USA)
    • X Corp (Twitter) (USA)
    • TikTok Inc (TikTok) (USA)
  • Cloudways Ltd. (USA) (Website Hosting) (USA)

Food Data Integration and Contribution to OpenFoodFacts

• Purpose: We have created a feature to empower users of the MacroFactor App to contribute food data (which is not Personal Data) to OpenFoodFacts. This is achieved by enabling them to create their own custom food entries for barcodes not yet present in OpenFoodFacts and allowing them to track which of their food submissions have been accepted.
• How We Get It: The unique user ID for record keeping is generated by the MacroFactor App. 
• Valid Reason to Use Your Personal Data: We rely on the user’s consent. 
• Who It Concerns:  MacroFactor App users who choose to contribute food data to OpenFoodFacts.
• Categories of Personal Data: Unique user ID, which does not contain any identifiable information.
• How Long Your Personal Data Is Kept: Your personal data is retained for as long as you maintain a MacroFactor App account. Foods that you submit to OpenFoodFacts will continue to reference this ID (which is different from your MacroFactor app ID) as the contributor.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Firebase Cloud Firestore) (USA)
• Other Parties Involved in the Processing:
  • OpenFoodFacts, a non-profit database of food products located in France. 

User Feedback, Communication Outreach, and User Interviews (Japan only)

• Purpose: We collect and process your data to collect valuable user feedback to improve the MacroFactor App. This process involves soliciting feedback, conducting communication outreach, carrying out user interviews and reviewing the user responses.
• How We Get It: We gather this information directly from users.
• Valid Reason to Use Your Personal Data: Consent from users who select to provide feedback.
• Who It Concerns:  MacroFactor App users in Japan. 
• Categories of Personal Data: We process contact information, user feedback and comments, and interview notes and recordings (if applicable).
• How Long Your Personal Data Is Kept: Indefinitely. 
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Google Forms) (USA)
  • Athlete Body KK (User support team) (Japan)
  • App Global GK (User support team) (Japan)

Affiliate Referral Program

• Purpose: We collect and process Personal Data of influencers who agree to collaborate with us on promoting MacroFactor and sign up on to the Affiliate Referral Program. We process Personal Data to communicate with them regarding program updates, provide them with a unique referral code, track and calculate affiliate earnings, provide performance reports to affiliates.
• How We Get It: In the past, we got the information directly from affiliates, and now we obtain it from the tool Everflow when the affiliates sign up to our Everflow instance.
• Valid Reason to Use Your Personal Data: Our obligations under the Affiliate Agreement to communicate program updates, track and pay earnings.
• Who It Concerns:
  • Affiliates participating in the program.
  • Users who join MacroFactor through affiliate referrals
• Categories of Personal Data:
  • Affiliates participating in the program:
    • Contact details (such as name , phone number, and email address, including an email address associated with PayPal)
    • Company information
    • Affiliate code
    • Advertising methods
    • Payable amount
    • Number of users brought by the affiliate
    • Performance data
    • Account status (active/inactive/suspended)
    • Currency
    • Time zone
    • Affiliate offer
  • Users who join MacroFactor through affiliate referrals:
    • Unique affiliate code used to join MacroFactor
• How Long Your Personal Data Is Kept: Your Everflow data will be retained indefinitely. We reserve the right to remove affiliates that are not actively promoting MacroFactor’s products or not performing as intended. We will notify you before deactivating your code.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Google Drive) (USA)
  • Notion Labs, Inc. (Project management software) (USA)
  • Everflow Technologies Inc. (Affiliate management software) (USA)
  • Athlete Body KK (Japanese Affiliate management) (Japan) (Performance data only)
  • App Global GK (Japanese Affiliate management) (Japan) (Performance data only)´
  • RevenueCat, Inc. (Subscription management software) (USA)
• Other Parties Involved in the Processing: 
  • PayPal Holdings, Inc. (PayPal) (USA)

Web Analytics for macrofactorapp.com

• Purpose: Google Analytics collects your data and aggregates it to allow us  analyze web visitor behavior and improve the user experience of the website.
• How We Get It: The data is collected through the Google Analytics Site Kit, which then aggregates it and makes it available in aggregated form to SBST through the Google Analytics portal.
• Valid Reason to Use Your Personal Data: Your consent as expressed in our website cookie banner.
• Who It Concerns:
  • Visitors of macrofactorapp.com.
• Categories of Personal Data: Google collects the following types of personal data at individual level, but then these are aggregated and not visible to MacroFactor:
  • Location information 
  • Device information 
  • Referral information
  • User behavior data 
  • Demographic data 
  • Identifiers
• How Long Your Personal Data Is Kept: We keep data in Google Analytics for two months.
• Parties that May Handle Your Personal Data on Our Behalf: 
  • Google LLC (Google Analytics) (USA)
  • DigitalRelevance, Inc. (PR and search-engine optimization agency ) (USA) (Aggregate data only)

Additional Information

Additionally, please note the following important information:

• When you use the Services, certain third parties may collect Personal Data about your online activities over time and across different websites or online services. Please refer to the policies of these third parties to learn more about the way in which they collect and process information about you. 
• We might share your Personal Data when required by law or if we believe it is necessary for official investigations or legal cases, whether from government/law enforcement or private parties. Keep in mind, if we share your data with government/law enforcement, we cannot guarantee they will keep it private and secure.
• We may also share your data if we sell part of our business or assets, or during a corporate change. We might also share it with subsidiaries or affiliates when necessary for business reasons, as explained above.
• We reserve the right to use, transfer, sell, and share aggregated or anonymous data for any purpose. Such data does not include any Personal Data. The purposes may include analyzing usage trends or seeking compatible advertisers, sponsors, and customers.
• We only use and disclose your Personal Data as described in this Notice.

Cookies

A “cookie” is a small file on your device with device info. We use cookies for server-load balancing purposes, and to remember your cookie choices. We use two types of cookies:

• Session cookies: They are gone when you close your browser.
• Persistent cookies: They might stay after you close your browser but have an expiration date.

Some are ours (first party). Others, like Complianz BV, might add their cookies (third-party). Check their policies for info.

If you do not want cookies, adjust your browser settings to reject all or some cookies. Keep in mind, some features may not work if you block certain cookies. For more information, please visit https://www.aboutcookies.org/.

You can also set your browser to send a Do Not Track (DNT) signal. For more information, please visit https://allaboutdnt.com/. 

Please note that our website is set to respect “Do Not Track“ and “Global Privacy Control” signals received from web browsers. However, please note that the technology to detect whether a website honors Do Not Track and Global Privacy Control signals does not always work as intended.

How Long We Keep Your Personal Data

We keep your Personal Data for as long as needed for the purpose we collected it and in accordance with our data retention policies. For specific retention periods for each use of your Personal Data, refer to this section.

We retain and use your Personal Data as required to meet legal obligations, resolve disputes, and enforce our agreements and policies. If we use your data for multiple purposes, we keep it until the purpose with the longest retention period expires, discontinuing use for shorter periods. Our retention periods align with our business needs and industry standards.

International Transfers of Your Personal Data

Our company is based in the USA, and our service providers operate globally. When your Personal Data is safeguarded by EU or UK General Data Protection Regulation, before sending it to parties outside the European Economic Area or the UK, we will do one of two things:

• Seek your consent; or
• Demand privacy and security: We will ensure the third party maintains the same level of privacy and security for your data as we do.

We are accountable for the protection of your Personal Data when we transfer it to others. We use safeguards like the Data Privacy Framework or the Standard Contractual Clauses (also known as the “SCCs”) approved by the European Commission under Article 46.2 of the GDPR. In some cases, the authorities of a country may have determined that the laws of other countries provide a level of protection equivalent to domestic law. You can see here the list of countries that the European Commission recognized as providing an adequate level of protection to personal data, and here the list of countries recognized by the UK.

What Privacy Rights Do You Have? 

You have specific rights regarding your Personal Data that we collect and process. In this section, we first describe those rights and then we explain how you can exercise those rights.

Right to Know What Happens to Your Personal Data

This is also known as the right to be informed. It means that you can ask you for all the information about how we handle your Personal Data. This includes, for example, how we collect and use it, how long we will keep it, and who it will be shared with, among other things.

We are informing you of how we process your Personal Data with this Notice.

We will make every effort to let you know how we use your Personal Data. Yet, if we did not get your data directly from you, the GDPR does not require us to inform you in these cases: (1) When it is impossible or too costly to provide the information. (2) When the law obliges us to gather or share the data. (3) If the Personal Data must stay confidential because of professional or other secrecy obligations.

Right to Know What Personal Data MacroFactor Has About You

This is called the right of access. This right allows you to (1) get confirmation of whether we process Personal Data about you (2) ask for full details of the Personal Data we hold about you; (3) get a copy or access to the Personal Data, 

Once we receive and confirm that the request came from you or your authorized agent, you can ask us for:

• The categories of your processed Personal Data.
• The categories of sources for your Personal Data.
• Our purposes for processing your Personal Data.
• Where possible, the retention period for your Personal Data, or, if not possible, the criteria used to determine the retention period.
• The categories of third parties with whom we share your Personal Data.
• Details on automated decision-making and its implications.
• The specific pieces of Personal Data we process about you in a shareable format.
• Disclosure details if we sold or disclosed your data.
• Specific legitimate interests if we rely on them for processing.
• The appropriate safeguards used to transfer Personal Data from the EEA or the UK to a third country, if applicable.

To obtain a copy of your data, go to Data & Privacy and select Generate Spreadsheet. Note that we are working on adding all types of Personal Data to the spreadsheets.

Under some circumstances, we may deny your access request and provide for the denial. 

For security and legal compliance, we cannot disclose certain sensitive information like Social Security numbers, driver’s license numbers, financial account numbers, health insurance or medical IDs, passwords, or security questions and answers. However, we can inform you if we have such information without disclosing specific details.

Right to Change Your Personal Data 

This is called the right to rectification. It gives you the right to ask us to correct without undue delay anything that you think is wrong with the Personal Data we have on file about you, and to complete any incomplete Personal Data.

If you are having trouble changing the information yourself in your Profile tab or editing your entries, please contact us and we will do our best to change the Personal Data for you or help you edit it yourself.

Right to Delete Your Personal Data

This is called the right to erasure, right to deletion, or the right to be forgotten. This right means you can ask for your Personal Data to be deleted. To delete your account and data, go to Data & Privacy and select Delete Your Account. This will not cancel your subscription, which you can manage through your phone’s app store. 

Sometimes we can delete your information, but other times it is not possible for either technical or legal reasons. If that is the case, we will consider if we can limit how we use it. We will also inform you of our reason for denying your deletion request.

Right to Ask Us to Limit How We Process Your Personal Data

This is called the right to restrict processing. It is the right to ask us to only use or store your Personal Data for certain purposes. You have this right in certain instances, such as where you believe the data is inaccurate or the processing activity is unlawful. 

Right to Ask Us to Stop Using Your Personal Data

This is called the right to object. This is your right to tell us to stop using your Personal Data. You may have this right where we rely on a legitimate interest of ours (or of a third party). You may also object at any time to the processing of your Personal Data for direct marketing purposes. If you receive a mass email from us and no longer wish to receive communications, simply look for the “Unsubscribe” option at the bottom of the email.

We will stop processing the relevant Personal Data unless: (i) we have compelling legitimate grounds for the processing that override your interests, rights, or freedoms; or (ii) we need to continue processing your Personal Data to establish, exercise, or defend a legal claim.

Right to Port or Move Your Personal Data

This is called the right to data portability. It is the right to ask for and receive a portable copy of your Personal Data that you have given us or that you have generated by using our services, so that you can:

• Move it;
• Copy it;
• Keep it for yourself; or
• Transfer it to another organization.

We will provide your Personal Data in a structured, commonly used, and machine-readable format. When you request this information electronically, we will provide you a copy in electronic format.

To obtain a copy of your data, go to Data & Privacy and select Generate Spreadsheet. Note that we are working on adding all types of Personal Data to the spreadsheets.

Right Related to Automated Decision Making

We sometimes use computers to study your Personal Data. We might use this Personal Data so we know how you use our services. For decisions that may seriously impact you, you have the right not to be subject to automatic decision-making, including profiling. But in those cases, we will always explain to you when we might do this, why it is happening, and the effect.

Right to Withdraw Your Consent

Where we rely on your consent as the legal basis for processing your Personal Data, you may withdraw your consent at any time. In most cases, this will mean deleting your entry from your profile. If you withdraw your consent, our use of your Personal Data before you withdraw is still lawful.

If you have given consent for your details to be shared with a third party and wish to withdraw this consent, please also contact the relevant third party in order to change your preferences.

Generally, you will just need to delete the entry or profile information to withdraw your consent.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. Unless the applicable data protection laws permit it, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties;
• Provide you a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

How Can You Exercise Your Privacy Rights?

To exercise any of the rights described above, please submit a request by either:

1. Contacting us by email at [email protected]; or
2. Contacting our support team within the app;

Verifying Your Identity

In order to correctly respond to your privacy rights requests, we need to confirm that YOU made the request. Consequently, we may require additional information to confirm that you are who you say you are.

If you submit requests through your password-protected accounts, your identity is already confirmed. However, for requests sent through other methods, we will verify your identity by asking a few questions.

We will only use the Personal Data you provide us in a request to verify your identity or authority to make the request.

Verification of Authority

If you are making a request on someone else’s behalf, we need to verify your authority to act for them. Please provide proof that the individual authorized you to make this request. This can include:

• Signed permission from the individual.
• A valid power of attorney.
• Proof of parental responsibility or legal guardianship.

Alternatively, you may ask the individual to directly contact us by using the contact details above to verify their identity with MacroFactor and confirm with us that they gave you permission to submit this request

Response Timing and Format of Our Responses

We aim to acknowledge the receipt of your request within ten (10) business days. In this communication, we will describe our identity verification process (if required) and provide an estimated response time, unless the request has already been approved or denied.

Please allow us up to a month to reply to your requests from the day we received your request. If we need more time (up to 90 days in total), we will inform you of the reason and the extension period in writing. 

If we cannot satisfy a request, we will explain why in our response. 

We will not charge a fee for processing or responding to your requests. However, if we find that your request is excessive, repetitive, or groundless, we may charge a fee. In such cases, we will explain the reason for the fee and provide a cost estimate before proceeding.

Privacy of Children

The MacroFactor app is not directed at, or intended for use by, children under the age of thirteen.

Data Integrity & Security

We are strongly committed to keeping your Personal Data safe. We have implemented and will maintain technical, administrative, and physical measures that are reasonably designed to help protect your Personal Data from unauthorized processing. Unauthorized processing includes unauthorized access, exfiltration, theft, disclosure, alteration, or destruction. Some of those measures include encryption, access control measures, and we also have dedicated teams to look after privacy. However, it is important to note that we cannot guarantee full security if you continue to use a deprecated version of the app. To ensure the best protection for your Personal Data, we recommend keeping your app up-to-date.

Right to Lodge a Complaint with a Supervisory Authority

If the EU or the UK General Data Protection apply to our processing of your Personal Data, you have the right to lodge a complaint with a supervisory authority if you are not satisfied with how we process your Personal Data. 

Specifically, you can lodge a complaint in the Member State of the European Union of your habitual residence, place of work, or the alleged violation of the GDPR. In the UK, you can lodge a complaint with the UK Information Commissioner’s Office.

Changes to this Notice

If we make any material change to this Notice, we will post the revised Notice to this web page and notify our users. We will also update the “Effective” date. By continuing to use our Services after we post any of these changes, you accept the modified Notice.

Contact Us

If you have any questions about this Notice or our processing of your Personal Data, or want to submit a privacy right request, please email us at [email protected] or use the support feature within the app.

Please allow up to four weeks for us to reply.

European Union Representative

We have appointed VeraSafe as our representative in the EU for data protection matters. While you may also contact us, VeraSafe can be contacted on matters related to the processing of Personal Data. To contact VeraSafe, please use this contact form or via telephone at: +420 228 881 031.

Alternatively, VeraSafe can be contacted at:

VeraSafe Ireland Ltd
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland

United Kingdom Representative

We have appointed VeraSafe as our representative in the UK for data protection matters. While you may also contact us, VeraSafe can be contacted on matters related to the processing of Personal Data. To contact VeraSafe, please use this contact form or via telephone at: +44 (20) 4532 2003.

VeraSafe United Kingdom Ltd. 
37 Albert Embankment
London 
SE1 7TL
United Kingdom

Data Protection Officer

We have appointed VeraSafe as our Data Protection Officer (DPO). While you may contact us directly, VeraSafe can also be contacted on matters related to the processing of Personal Data. VeraSafe’s contact details are:

VeraSafe LLC
100 M Street S.E., Suite 600 
Washington, D.C. 
20003
USA

Email: [email protected]
Web: https://www.verasafe.com/about-verasafe/contact-us/