What GRAMS is

GRAMS is a macro and calorie tracking app. You log meals by photo, by typing a description, or by voice, and AI estimates the protein, carbs, fat, and calories. GRAMS offers a free tier and a paid Premium subscription.

Information we collect

• Account info: your email address, plus either a password or your Google account identity if you sign in with Google. Authentication is handled by Supabase. We never see or store your raw password. If you sign in with Google, we receive your email address, name, and profile picture from Google; we store your email and use it to identify your account.
• Profile info: weight, height, age, sex, activity level, goal, and target weight — used to calculate your daily targets and goal timeline.
• Weigh-ins: the weights you log, used to show your weight trend and for weekly check-ins that suggest updated targets.
• Food preferences (optional): the eating style, allergies, and foods you dislike that you choose to enter — used for allergy warnings on scanned products and to shape recipe ideas.
• Pantry and shopping list: the items you check off, add, or scan into your pantry and shopping list.
• Weekly check-ins and recipe ideas: a record of each check-in you apply or keep (so it can be undone and shown once a week), and the recipe ideas you request (so they stay on screen and count toward the daily limit).
• Meal data: photos you take of food, text you type or dictate describing a meal, and the resulting logged macros and timestamps. Only your 15 most recent meal photos are kept; older ones are automatically deleted.
• Water and streak data: the water you log and the days you log meals, used to show your progress and streak.
• Product scans: when you scan a barcode, we look up the product and keep a small reference photo of the scanned item. Only your 5 most recent scan photos are kept. Nutrition-label photos are sent for AI reading and are never stored.
• Subscription info: if you subscribe to Premium, we store your subscription status and reference IDs from our payment processor (Stripe). We never see or store your card number or full payment details.
• Push notification registration: if you turn on daily reminders, we store the device token needed to send them. You can turn this off at any time from Profile.
• Basic usage data: standard server logs (e.g. request timestamps) generated by our hosting provider (Vercel) for reliability and abuse prevention.

How your data is used and shared

• AI analysis: meal photos and descriptions are sent to Google's Gemini API to identify food items and estimate macros. Some of this processing may run on Gemini's free tier, under which Google may use the content to improve its models. Please only photograph food — not people or personal items.
• Recipe ideas and label reading: when you ask “What can I make?”, your pantry items, food preferences and allergies, and what's left of your day's targets are sent to Gemini to write recipe ideas. Nutrition-label photos are sent to Gemini to read the numbers.
• Voice input: when you dictate a meal, your browser's built-in speech recognition service converts your speech to text (on Chrome, this is Google's service). GRAMS receives only the resulting text, never the audio.
• Barcode lookup: scanned barcode numbers are sent to Open Food Facts, a public food database, to retrieve product and nutrition information.
• Payments: Premium subscriptions are processed by Stripe. Stripe handles your payment details under its own privacy policy; we receive only confirmation of your subscription status.
• Sharing your shopping list: when you tap Share list, your phone's share menu sends the list to the app or person you choose. GRAMS doesn't send it anywhere itself.
• Website analytics: on our public homepage only (not inside the app, and not in the Google Play app), HeyCatch records page visits, clicks, the site that referred you, your browser and device type, and an anonymous visitor ID, so we can see which marketing works. It never receives your name, email, or anything you log. If your browser sends a “Do Not Track” signal, nothing is recorded.
• Where you came from: when you arrive from an ad or a link, our own site notes which source, campaign and ad it was (in a cookie kept for 90 days) and saves that with your account when you sign up, along with a count of visits to our public pages. It stays with us. It's how we know which of our marketing works.
• Advertising measurement (Meta), only if you tap Accept: on our public website pages (homepage, sign-up and log-in), the Meta Pixel records page visits. When you sign up or start a paid plan, we tell Meta that this happened, with your email in scrambled (hashed) form, so Meta can match it to an ad you saw. This shows us which ads work and helps Meta show our ads to similar people. Meta never receives anything you log: no meals, weight, photos or other health information. If you tap Decline, none of this happens. You can change your choice anytime with “Cookie settings” at the bottom of our homepage.
• Error reports: if something in GRAMS breaks, a technical report (what went wrong, on which page, and your browser and device type) is sent to Sentry so we can fix it. It is set up to leave out your account details and what you log.
• Sign in with Google: if you choose it, Google shares your basic account identity with us to create and sign you into your account.

Your information is used only to provide GRAMS's features to you. We do not sell your data. There are no ads or ad trackers inside the GRAMS app, and nothing you log is ever used for advertising. The only advertising measurement is on our public website, and only with your permission, as described above.

Your health information

Some of what you give GRAMS is health information: your weight, height, age, sex, and goals, your weigh-ins, the meals and nutrition you log, and any allergies or eating style you enter. We collect it only to run the features you use, like targets, tracking, check-ins, allergy warnings, and recipe ideas, and we share it only with the service providers listed on this page, to provide those features.

You agree to this when you complete setup. You can withdraw that consent at any time by deleting your account (Profile → Delete account), which permanently removes this information. Wherever you live, you can ask us to confirm what we hold about you, give you a copy, correct it, or delete it by emailing the address below.

Where your data lives

Your account, meal, and scan data are stored in a Supabase database in the United States, so if you live outside the US (including in Canada), your information is stored and processed there and may be subject to US law. Photos are stored in Supabase Storage, accessible only to your own account. Payment records live with Stripe. Transactional emails (signup confirmation, password reset, and reminders about your plan, like your free trial ending) are sent via Resend.

Your choices

You can edit or delete any logged meal at any time from History. You can turn daily reminders on or off from Profile. You can manage or cancel a Premium subscription from Profile → Manage subscription. You can permanently delete your entire account — profile, targets, every logged meal, scans, and all photos — yourself at any time from Profile → Delete account. This takes effect immediately; nothing is held or archived afterward. Deleting your account also cancels any active subscription.

Local storage

GRAMS stores a few small preferences in your browser/device's local storage — your light/dark theme choice and which notices you've dismissed. They never leave your device. On our website we also set small first-party cookies: your cookie choice, and which link or ad brought you (kept 90 days). Meta's cookies are only set if you tap Accept.

Children

GRAMS is not directed at, and should not be used by, anyone under 16.

Changes to this policy

We'll update this policy when features or data practices change, with the date above kept current. See also our Terms of Service.

Contact

Questions about this policy, or a data deletion request? Email support@macrograms.app.