Privacy
What we keep, and why.
Last updated 29 September 2026.
The short version
- We collect what the product needs to work, plus page-view analytics.
- No advertising pixel, and nothing that follows you to other sites.
- Nothing is sold, rented or shared with anyone for their own purposes.
- You can delete your account and everything in it from Settings, or by asking.
If you joined the waitlist
The waitlist closed on 24 September 2026, when the app opened to everyone. If you joined before then, we hold your email address, when you joined, which form you used and — if you arrived from a link that carried them — the referring page and campaign tags. It is used to tell you the app is open, and to reply if you write to us. It is not used for anything else.
If you have an account
Signing in. Accounts are by email link or by Google sign-in. With Google we receive your email address and name and nothing else; we never see your password. Authentication is handled by Supabase.
What you enter. Your recipes, your meal plans, your shopping lists, your food diary and your targets. If you use the Body tab: your sex, age, height, weight, goal weight and weigh-ins. That is health information, and it is held only to work out your own figures — it is never used for anything else and never shown to anyone but you.
Sharing a recipe. A recipe you share becomes a public page behind an unguessable link, showing the recipe, its figures and your first name. You can turn any link off from Settings, and it goes dark immediately.
What we never do. We do not read your diary. We do not build a profile of you. We do not sell, rent or share any of it.
Analytics
Every page carries Google Analytics 4, which records page views, the rough location and device they came from, and how visitors move between pages. It sets its own cookies to tell one visit from the next. We use it to see which pages are read and where visitors arrive from; it does not see anything you type into the app, and we do not feed it your diary, your plans or your body figures. Google processes that data under its own terms. Blocking it — with a browser setting or an extension — costs you nothing on the site.
The front page is also testing two ways of stating the price. Your browser is given one of them at random, remembered in its local storage so you see the same one next time, and Google Analytics is told which one you saw and whether you clicked through to sign in. Nothing else about you is attached to it.
Cookies and storage
One session cookie keeps you signed in. One optional preference cookie exists for the developer’s own preview account and does nothing on any other. The front page keeps one value in your browser’s local storage: which version of the price you were shown, described above. Google Analytics sets its own, described above. The installed app caches the catalogue and the app shell on your device so it opens without reception; your own data is never cached after you sign out.
The Android app
The app is being tested with a small group before it goes on Google Play. It holds the same account data as the website and reads it from the same place; it does not collect anything the website does not.
On your phone. Your sign-in is kept encrypted, with the key in Android’s secure key store. The public catalogue is cached so the app opens without reception. A meal you are building but have not saved is kept on the phone, under your account, until you save or discard it — including after you sign out. Nothing else of yours is stored on the device after you sign out.
What it asks for. Internet access and vibration, for the small tap you feel on some buttons. No location, contacts, camera, microphone or files.
What it does not do. The app carries no analytics and no advertising identifiers, and it sends no crash reports. Signing in is by email only for now.
Where it lives
Your data is stored by Supabase in Sydney, Australia. The site is served by Netlify, whose servers process each request in the United States; sign-in emails are sent through Resend; page-view analytics go to Google. Each of them handles data on our instructions and under their own privacy terms. The public catalogue — products, panels, prices — is not personal data and is the same for everyone.
How long, and how to delete it
Account data is kept until you delete the account. You can do that yourself, in the app or on the web: Settings → Delete my account, which takes effect straight away. How to delete your account walks through it without signing in.
Waitlist addresses are kept until you have been told the app is open, or until you ask for them to be removed. To delete either by asking instead, or to get a copy of what we hold, email hello@macronomics.dev from the address on the account. Deleting an account removes everything under it, including any shared links.
Your rights
Macronomics operates in Australia under the Privacy Act 1988 and the Australian Privacy Principles. You can ask what we hold, ask for it corrected, ask for it deleted, or complain — first to us at the address above, and if you are not satisfied, to the Office of the Australian Information Commissioner.
If this page changes, the date at the top changes with it. The terms are the other half.