Effective 2026-10-01
macro-coach handles health-related information: your weight, what you eat, and your body stats. This page says what is stored, where, who can see it, and how to take it with you or delete it.
What we store
- Your account: name, username, a hashed password (we can't read it), and when you joined.
- Your profile: sex, age, height, activity level, goal, mode, rates, time zone and reminder settings.
- What you log: meals with their foods and macros, weigh-ins, saved meals.
- Your chat with the coach. Meal photos are deleted as soon as they have been read.
- If you connect your own AI account: its key or sign-in, stored in a file only the server can read, never shown back to you or anyone.
- If you subscribe: your Stripe customer ID and subscription status. Card details go to Stripe and never reach us.
- For running the service: how many AI messages you send and what they cost (to enforce limits), sign-in sessions, notification subscriptions, and web server logs with IP addresses.
Where it is
Your data lives on a private server run by William Buck in the United States. Traffic reaches it through a DigitalOcean server that relays it and keeps standard access logs but no account data. Encrypted backups are kept off that server for up to 8 weeks.
Who processes it
- The AI provider. Your messages, meal photos, and the logged data the coach looks up to answer you are sent to the AI that runs your coach: Anthropic for the AI included with a subscription, or the provider you connected yourself, under its terms.
- Food data. Food names are looked up at USDA FoodData Central, and the coach may search the web and read public nutrition pages. These requests come from our server and don't identify you.
- Notifications. If you turn them on, reminders go through your browser's push service (Apple, Google or Mozilla).
- Payments. Stripe, if you subscribe.
We don't sell your data, show ads, or share it with anyone else, except where the law requires.
Who can see it
Only you, in the app, and William Buck as the administrator, who has technical access to everything on the server. He looks at individual data only to run and fix the service, to help you when you ask, or when the law requires. macro-coach is not a healthcare provider, and this data isn't covered by HIPAA.
Keeping and deleting
We keep your data while you have an account. Settings → Download my data gives you a copy of your account, profile, logs, saved meals and chat, as JSON. Settings → Delete my account permanently removes your account and all of it from the server at once; it disappears from backups as they expire, within 8 weeks. Stripe keeps payment records as the law requires.
Security
HTTPS everywhere, hashed passwords, invite-only accounts, rate-limited sign-in, and AI tools that can only read and write your own records. No system is perfectly secure; if a breach affects your data, we'll tell you.
Changes and contact
We'll tell you in the app before material changes. Questions or requests: email support@williambuck.dev.