This resource contains specific information about how Stronger by Science Technologies LLC, the providers of MacroFactor, process your personal data (“Personal Data”) in the context of the MacroFactor app, including its support, Knowledge Base, feedback portal, and roadmap features. If you want a copy of the Personal Data that we process about you, you can request a copy of your data through the app by visiting “Data & Privacy” and selecting “Generate Spreadsheet.”
If you want to obtain more information about how Stronger by Science Technologies LLC processes your Personal Data in other contexts (for example, in the context of social media or website interactions), read the privacy notice available at our website. That privacy notice also contains more detailed information.
What Personal Data We Collect and Process and Why, How Long We Keep It, and With Whom We Share It
At MacroFactor, we collect and process Personal Data for various purposes. Here is a breakdown of the Personal Data we process, how we obtain it, why we use it, how long we keep it, and who else might handle it, in each context.
MacroFactor App Account Registration and Authentication
- Purpose: We use your data to create and safeguard your MacroFactor App account.
- How We Get It: When you sign up, you provide information such as your email and authentication credentials. If you use Google or Apple Single Sign-On (SSO), we also gather data from these sources during registration.
- Valid Reason to Use Your Personal Data: Our obligation to fulfill our agreement with you.
- Who It Concerns: All MacroFactor App users.
- Categories of Personal Data: Email address, password (hashed, salted, unencrypted and not accessible to MacroFactor), authentication tokens, user UUID.
- How Long Your Personal Data Is Kept: For as long as your account exists (regardless of the status of your subscription).
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Firebase Cloud Firestore) (USA)
MacroFactor App User Support and Assistance
- Purpose: We gather specific details to address your concerns promptly and effectively when you encounter issues or require assistance while using the MacroFactor App.
- How We Get It: We obtain your data through various methods:
- First, when you report an issue or contact us through the app, you actively share information with us. This includes written descriptions of the issue or request, as well as any uploads like screenshots or recordings that you may choose to provide for clarity.
- Second, the app automatically collects device information, such as device logs and hardware details. This information is essential for diagnosing and resolving technical problems.
- Valid Reason to Use Your Personal Data: We process your data for user support based on:
- Contractual obligations: To fulfill our commitment to assist you with any issues or requests related to the use of the MacroFactor App.
- Legitimate interest: To enhance the overall user experience.
- Who It Concerns: This user support provision is available to all MacroFactor App users.
- Categories of Personal Data: As part of our user support activities, we process the following categories of Personal Data
- User account information: unique ID, name (if available), email, language, last activity date, last feedback date, state and country, user message history with timestamps and contents.
- Device/environment data: total disk space (GB), phone charging status, user locale language, free disk space (GB), device pixel ratio, system name (Android or iOS), build version, build mode, device identifiers, release version, device name, last screen, screen height, energy-saving mode, bundle ID, session duration, device model, screen width, SDK type.
- Ticket information: user’s support ticket, email, timestamps for specific actions, any uploaded screenshots or recordings.
- How Long Your Personal Data Is Kept: Personal Data included in support requests will be retained for as long as the related user account is active and as long as the support requests remain open and actively being addressed. Archived customer support tickets are deleted within one year.
- Parties that May Handle Your Personal Data on Our Behalf: We engage (a) Gleap GmbH a support ticket management software located in Austria; (b) Athlete Body KK and App Global GK, a user support team located in Japan (only for Japan users based on device locale and having Japanese as the language for your operating system); and (c) Retool, Inc. the provider of a low-code visualization tool, located in the USA.
MacroFactor App Personalized User Features
- Purpose: We gather and process your Personal Data to provide you with personalized meal planning, tracking, and recommendations, enhancing your app experience and functionality.
- How We Get It: You can manually enter this information, and sometimes, you grant us access to some data from Apple Health, Fitbit, Google Fit or Health Connect. Additionally, we may write data back to these services to ensure synchronization and provide a seamless experience across platforms.
- Valid Reason to Use Your Personal Data: We process your data based on:
- Your Consent: When you voluntarily provide specific information or grant access to third-party services
- Our Legitimate Interests: For mandatory app functionality.
- Who It Concerns: MacroFactor App users.
- Categories of Personal Data: We collect and process various categories of Personal Data, including:
- User information, such as your name, date of birth, and email.
- Your sex (male/female).
- User preferences and settings, like your dashboard, food logging, timeline and period tracking and check-in day settings.
- App-usage information, like interactions with the app, onboarding steps completions, and disclaimers.
- User goals.
- Customized calorie target and macro program .
- Body metrics (e.g., weight, height, body fat level, measurements like waist, hips, arms, legs, and ratios like waist-to-height).
- Macro and micronutrient intake.
- Protein, carbs, and fat percentages.
- Lifestyle information, such as cardio experience, exercise frequency, activity level, and strength sports experience.
- Integration information from Apple Health, Fitbit, Google Fit and Health Connect (with your permission).
- Progress photos (further details below).
- Additional Information: The use of information received from Health Connect and Apple Health will adhere to their respective permissions policies, including those outlined by Google LLC and Apple Inc.
- How Long Your Personal Data Is Kept: For as long as your account is not deleted or do not delete your entries. Additionally, please note that in the future, we may implement an automatic data deletion policy for users who have not been subscribed or active for an extended period. Do not worry though, we will give you several warnings before deleting your data.
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Firebase Cloud Firestore) (USA)
User Subscription Management
- Purpose: We process some of your data to, to the extent allowed by the app stores, manage and consult user subscriptions for the MacroFactor App, including sign-ups, refunds, cancellations, billing, and renewals.
- How We Get It: Information related to your subscription is obtained through the App Store or Play Store.
- Categories of Personal Data: Email, user UUID, country, affiliate code used to purchase the app, subscription status, subscription length, past purchases, purchase ID, location, currency, and transaction history. Please note that we do not have access to sensitive payment information like credit card numbers, as these are managed by Apple Inc. and Google, LLC’s purchase systems.
- Valid Reason to Use Your Personal Data: We process your data to fulfill our agreement obligations with you.
- How Long Your Personal Data Is Kept: Information regarding your subscription is stored in Google Play and the App Store according to the retention policies of Google LLC and Apple Inc. Additionally, data in RevenueCat, Inc., is retained by MacroFactor until a user deletes their MacroFactor app account.
- Parties that May Handle Your Personal Data on Our Behalf:
- We engage RevenueCat, Inc., a provider of subscription management software in the USA.
- We engage Athlete Body KK and App Global GK, a user support team located in Japan, who will review and respond to app reviews in Japanese.
- Other Parties Involved in the Processing:
- Google LLC (Google Play) (USA)
- Apple Inc (App store) (USA)
MacroFactor App Analytics
- Purpose: We gather and observe data for the purpose of identifying trends and making data-driven decisions to enhance app improvements and marketing strategies.
- How We Get It: Your data is automatically collected by Firebase from your interactions with the app.
- Valid Reason to Use Your Personal Data: We process your data based on our legitimate interest in improving the user experience and making data-driven enhancements.
- Who It Concerns: All MacroFactor App users.
- Categories of Personal Data: We collect app usage data, including user behavior data. This data is presented in an aggregated format and includes timestamps of app interactions, screen views, user actions, and retention data.
- How Long Your Personal Data Is Kept: Aggregated data remains accessible to MacroFactor indefinitely.
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Firebase Cloud Firestore) (USA)
MacroFactor App Mailing List
- Purpose: We collect your data to provide informative communications and app-related news. We may also introduce promotional content as additional app products by MacroFactor or its partners become available.
- How We Get It: Users provide this information during registration or account customization.
- Valid Reason to Use Your Personal Data: We process your data based on our legitimate interest in keeping users informed about app features and sharing interesting content.
- Who It Concerns: MacroFactor App users.
- Categories of Personal Data: We collect and process contact information (email address), subscription status (active/canceled), and data about interactions with emails (opens, clicks, and unsubscribes per email).
- How Long Your Personal Data Is Kept: As long as users maintain their subscription or choose to unsubscribe from email communications.
- Parties that May Handle Your Personal Data on Our Behalf:
- We engage ConvertKit LLC, a provider of email marketing software in the (USA). Other Parties Involved: Influencers, organizations and companies mentioned in our communications, such as:
- Stronger by Science, LLC (Fitness media and coaching company) (USA)
- We engage ConvertKit LLC, a provider of email marketing software in the (USA). Other Parties Involved: Influencers, organizations and companies mentioned in our communications, such as:
MacroFactor App Hosting and Backend Infrastructure
- Purpose: We collect data to securely host and maintain app data, including user information and app content. Additionally, we manage the backend infrastructure for optimal performance and scalability.
- How We Get It: Data is collected from users during the registration process and through app usage.
- Valid Reason to Use Your Personal Data: This is based on our agreement obligations.
- Who It Concerns: MacroFactor users.
- Categories of Personal Data: All Personal Data processed for the provision of the app.
- How Long Your Personal Data Is Kept: We retain your data as long as your MacroFactor App account exists.
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Firebase Cloud Firestore) (USA)
MacroFactor App Infrastructure Monitoring
- Purpose: We continuously monitor the app’s infrastructure to identify security threats, performance issues, and ensure reliability and security for users.
- How We Get It: The app automatically observes certain information from users.
- Valid Reason to Use Your Personal Data: This is based on our legitimate interest, specifically, our interest in providing users with a secure and dependable experience.
- Who It Concerns: All MacroFactor users.
- Categories of Personal Data: All Personal Data processed for the provision of the app.
- How Long Your Personal Data Is Kept: As long as users maintain their accounts.
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Firebase Cloud Firestore, Firebase Firestore Analytics, Crashlytics) (USA)
MacroFactor Feedback and Roadmap Portal
- Purpose: The MacroFactor Feedback and Roadmap Portal, powered by Gleap, serves as a platform for users to submit feedback, ideas for feature requests, and upvote/downvote feature requests related to the MacroFactor app. We use this feedback to make the app better.
- How We Get It: We obtain it when users interact with the feedback and roadmap portals.
- Valid Reason to Use Your Personal Data: This is based on our legitimate interest in improving the functionality of the MacroFactor app by collecting user feedback and using this feedback to enhance app features. Users have the option to provide feedback and can delete their posts or votes at any time.
- Who It Concerns: MacroFactor users who provide us with feedback and website visitors of our feedback portal.
- Categories of Personal Data: The data collected includes feedback submissions, aggregate user information, and upvotes/downvotes. User IDs (incremented) and email addresses are associated with down/upvotes.
- How Long Your Personal Data Is Kept: As long as the feedback content is not deleted.
- Parties that May Handle Your Personal Data On Our Behalf:
- We engage Gleap GmbH, the provider of roadmap software. They are in Austria.
- We also engage Athlete Body KK and App Global GK, a user support team located in Japan (only for Japan users based on device locale and having Japanese as the language for your operating system).
Knowledge Base for MacroFactor
- Purpose: We gather some data to allow users to interact with the Knowledge Base for MacroFactor, powered by Gleap. This is accessible to users from within the app or via the website (https://help.macrofactor.com/). Its primary purpose is to provide users with relevant and accurate information, recommendations, and support. Users can optionally consult the Knowledge Base using a GPT-4 AI model.
- How We Get It: Data used in this activity includes user-provided information, such as email addresses or user IDs, and user interactions with the MacroFactor Knowledge Base.
- Valid Reason to Use Your Personal Data: Our legitimate interest in helping our users get the most of our app.
- Who It Concerns: MacroFactor app users and website visitors who access the MacroFactor Knowledge Base for information and support.
- Categories of Personal Data: User provided information, user IDs, and user interactions with the Knowledge Base, including search queries.
- How Long Your Personal Data Is Kept: We retain your Personal Data until your MacroFactor App user account is deleted.
- Parties that May Handle Your Personal Data On Our Behalf:
- We engage Gleap GmbH, our provider of knowledge base software. They are in Austria.
MacroFactor App Progress Photos
- Purpose: We process data to facilitate the functionality that enables users to capture or upload front, side, and back progress photos for the purpose of comparing before and after images or viewing individual photos. Additionally, our features enable users to share or download individual progress cards for before and after comparisons.
- How We Get It: We process the photos that users manually upload.
- Valid Reason to Use Your Personal Data: The user’s consent.
- Who It Concerns: MacroFactor app users who choose to utilize the progress photo feature.
- Categories of Personal Data: User-provided progress photos, specifically front, side, and back progress photos.
- How Long Your Personal Data Is Kept: The photos are retained for as long as the user MacroFactor App account exists, or until the user chooses to delete their photos.
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Firebase Cloud Firestore, Crashlytics) (USA)
Food Data Integration and Contribution to OpenFoodFacts
- Purpose: We have created a feature to empower users of the MacroFactor App to contribute food data (which is not Personal Data) to OpenFoodFacts. This is achieved by enabling them to create their own custom food entries for barcodes not yet present in OpenFoodFacts and allowing them to track which of their food submissions have been accepted.
- How We Get It: The unique user ID for record keeping is generated by the MacroFactor App.
- Valid Reason to Use Your Personal Data: We rely on the user’s consent.
- Who It Concerns: MacroFactor App users who choose to contribute food data to OpenFoodFacts.
- Categories of Personal Data: Unique user ID, which does not contain any identifiable information.
- How Long Your Personal Data Is Kept: Your Personal Data is retained for as long as you maintain a MacroFactor App account. Foods that you submit to OpenFoodFacts will continue to reference this ID (which is different from your MacroFactor app ID) as the contributor.
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Firebase Cloud Firestore) (USA)
- Other Parties Involved in the Processing:
- OpenFoodFacts, a non-profit database of food products located in France.
User Feedback, Communication Outreach, and User Interviews (Japan users only)
- Purpose: We collect and process your data to collect valuable user feedback to improve the MacroFactor App. This process involves soliciting feedback, conducting communication outreach, carrying out user interviews and reviewing the user responses.
- How We Get It: We gather this information directly from users.
- Valid Reason to Use Your Personal Data: Consent from users who select to provide feedback.
- Who It Concerns: MacroFactor App users in Japan.
- Categories of Personal Data: We process contact information, user feedback and comments, and interview notes and recordings (if applicable).
- How Long Your Personal Data Is Kept: Indefinitely.
- Parties that May Handle Your Personal Data on Our Behalf:
- Google LLC (Google Forms) (USA)
- Athlete Body KK (User support team) (Japan)
- App Global GK (User support team) (Japan)
International Transfers of Your Personal Data
Stronger by Science Technologies LLC is based in the USA, and our service providers operate globally. When your Personal Data is safeguarded by EU or UK General Data Protection Regulation, before sending it to parties outside the European Economic Area or the UK, we will do one of two things:
- Seek your consent; or
- Demand privacy and security: We will ensure the third party maintains the same level of privacy and security for your data as we do.
We are accountable for the protection of your Personal Data when we transfer it to others. We use safeguards like the Data Privacy Framework or the Standard Contractual Clauses (also known as the “SCCs”) approved by the European Commission under Article 46.2 of the GDPR. In some cases, the authorities of a country may have determined that the laws of other countries provide a level of protection equivalent to domestic law. You can see here the list of countries that the European Commission recognized as providing an adequate level of protection to Personal Data, and here the list of countries recognized by the UK.
We can provide you with specific information on the safeguards for transferring Personal Data outside the European Economic Area or the UK upon request: just reach out to [email protected]
Other Data Protection Rights
Right to Change Your Personal Data
This is called the right to rectification. It gives you the right to ask us to correct without undue delay anything that you think is wrong with the Personal Data we have on file about you, and to complete any incomplete Personal Data.
If you are having trouble changing the information yourself in your Profile tab or editing your entries, please contact us and we will do our best to change the Personal Data for you or help you edit it yourself.
Right to Delete Your Personal Data
This is called the right to erasure, right to deletion, or the right to be forgotten. This right means you can ask for your Personal Data to be deleted. To delete your account and data, go to Data & Privacy and select Delete Your Account. This will not cancel your subscription, which you can manage through your phone’s app store.
Sometimes we can delete your information, but other times it is not possible for either technical or legal reasons. If that is the case, we will consider if we can limit how we use it. We will also inform you of our reason for denying your deletion request.
Right to Ask Us to Limit How We Process Your Personal Data
This is called the right to restrict processing. It is the right to ask us to only use or store your Personal Data for certain purposes. You have this right in certain instances, such as where you believe the data is inaccurate or the processing activity is unlawful.
You also have the right to direct businesses to limit the use and disclosure of your sensitive Personal Data. This includes data such as your social security number, financial account details, precise geolocation data, or health information. You can exercise this right to ensure that such information is only utilized for specific purposes, such as providing you with the services you requested. In our case, we only process health information and solely use it to provide the functions you requested.
Right to Ask Us to Stop Using Your Personal Data
This is called the right to object. This is your right to tell us to stop using your Personal Data. You may have this right where we rely on a legitimate interest of ours (or of a third party). You may also object at any time to the processing of your Personal Data for direct marketing purposes. If you receive a mass email from us and no longer wish to receive communications, simply look for the “Unsubscribe” option at the bottom of the email.
We will stop processing the relevant Personal Data unless: (i) we have compelling legitimate grounds for the processing that override your interests, rights, or freedoms; or (ii) we need to continue processing your Personal Data to establish, exercise, or defend a legal claim.
Right to Port or Move Your Personal Data
This is called the right to data portability. It is the right to ask for and receive a portable copy of your Personal Data that you have given us or that you have generated by using our services, so that you can:
- Move it;
- Copy it;
- Keep it for yourself; or
- Transfer it to another organization.
We will provide your Personal Data in a structured, commonly used, and machine-readable format. When you request this information electronically, we will provide you a copy in electronic format.
To obtain a copy of your data, go to Data & Privacy and select Generate Spreadsheet. Note that we are working on adding all types of Personal Data to the spreadsheets.
Right Related to Automated Decision Making
We use algorithms to analyze your Personal Data. Specifically, we use them to offer personalized insights into your nutrition intake. Additionally, we might use this data to understand how you utilize our services. If any decisions based on this data could significantly affect you, you have the right to avoid automatic decision-making and profiling. However, we’ll always inform you beforehand if we plan to do this, explain why it’s necessary, and outline its potential impact.
Right to Withdraw Your Consent
Where we rely on your consent as the legal basis for processing your Personal Data, you may withdraw your consent at any time. In most cases, this will mean deleting your entry from your profile. If you withdraw your consent, our use of your Personal Data before you withdraw is still lawful.
If you have given consent for your details to be shared with a third party and wish to withdraw this consent, please also contact the relevant third party in order to change your preferences.
Generally, you will just need to delete the entry or profile information to withdraw your consent.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. Unless the applicable data protection laws permit it, we will not:
- Deny you goods or services;
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties;
- Provide you a different level or quality of goods or services; or
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
How Can You Exercise Your Data Protection Rights?
If you are having trouble to exercise your rights by following the available instructions above, please reach out to us by either:
- Contacting us by email at [email protected]; or
- Contacting our support team within the app.
Right to Lodge a Complaint with a Supervisory Authority
If the EU or the UK General Data Protection apply to our processing of your Personal Data, you have the right to lodge a complaint with a supervisory authority if you are not satisfied with how we process your Personal Data.
Specifically, you can lodge a complaint in the Member State of the European Union of your habitual residence, place of work, or the alleged violation of the GDPR. In the UK, you can lodge a complaint with the UK Information Commissioner’s Office.
How Long Does It Take to Receive the Answer After Making a Data Protection Request?
When you contact us about your Personal Data, we’ll aim to respond as quickly as we can, within a maximum of 45 days or sooner if the law requires it. However, there might be cases where we need more time—up to an extra 45 days, making it a total of 90 days. If this happens, we’ll let you know promptly about the extension.
Have Questions?
If you have any questions about how we protect your data or about this document, feel free to reach out to our Data Protection Officer at [email protected].