Privacy Policy

Last updated: 17 July 2026

This Privacy Policy explains how MacroFolio (the “Service”) collects, uses, and protects personal data, and the choices and rights available to you. It applies together with the Kingdom of Saudi Arabia’s Personal Data Protection Law and with any equivalent protections available to you under the law of your place of residence.

1. Scope

This Policy applies to personal data processed through your use of MacroFolio, including account registration, onboarding, day-to-day tracking, and the automated report described in Section 5.

2. Categories of personal data

• Account data, including your email address and name.
• Onboarding and profile data, such as gender, age range, height, weight, activity level, training preferences, and timezone.
• Activity data you record, including nutrition totals, body weight, steps, training sessions, body measurements, and personal notes.
• Derived data calculated from the above, such as consistency scores and trends.
• Technical data associated with your use of the Service, such as session information and, where you opt in, push notification details.

3. How data is collected

Personal data is collected directly from you when you register, complete onboarding, and record activity within the Service. Technical data is generated automatically as part of operating the Service, such as when you sign in or enable a notification channel.

4. Purposes of processing

We process personal data to operate your account and the Service you have signed up for, calculate your consistency scores and trends, support the optional social features described in Section 8, generate the automated report described in Section 5 where you have consented, deliver notifications according to your own settings, and maintain the security and integrity of the Service.

5. Automated analysis and generated reports

If you consent, MacroFolio periodically prepares an automated report that reviews your recent activity. The report draws on a limited set of your activity data, calculated at the level of detail reasonably necessary to produce it, and on the notes you have written, which are used only to inform your own report and are not shared with other members. A report is generated only when you request one; MacroFolio does not produce reports automatically or without your action.

Preparing a report may involve an automated analysis provider acting on our instructions, as described in Section 7. Reports depend on the information you have recorded and can be incomplete or contain errors, particularly where that information is limited. They are informational and do not constitute medical, dietary, or clinical advice; see the Medical Disclaimer for further detail.

Consent to this processing is captured separately from your general acceptance of these policies when you register. There is currently no separate setting to disable automated analysis for an existing account while keeping the account active; because reports are generated only at your request, simply not requesting a new report means no further processing of this kind occurs. If you wish to withdraw your consent entirely, including for any future processing, you can do so by deleting your account, which is described in Section 13. Deleting your account does not remove reports already generated and retained as part of your historical record before deletion.

6. Processing grounds

We process account and activity data on the basis that it is necessary to provide the Service you have requested, and we process data for the automated report described in Section 5 on the basis of the consent you provide. Where applicable law requires a different basis for a particular processing activity, we rely on that basis instead.

7. Service providers and categories of recipients

We work with a limited number of service providers to operate MacroFolio, including automated analysis providers that assist in generating the report described in Section 5, hosting and infrastructure providers that run the systems the Service depends on, and communications providers that deliver account and notification emails. These providers process personal data only as necessary to perform their function for us and act under contractual or legal restrictions on their use of it where such restrictions apply. We do not sell personal data.

8. Social and visibility features

Certain profile fields, such as body weight, training performance, and step counts, have a visibility setting that you control: public, friends only, or private. This setting governs what other members of the Service can see; it does not govern access by MacroFolio itself. Authorized personnel may access personal data only where reasonably necessary to operate, secure, support, or comply with legal obligations relating to the Service, subject to applicable internal controls.

9. International data transfers

Some of the providers described in Section 7 may process personal data outside the Kingdom of Saudi Arabia. Where that occurs, we seek to transfer only the data reasonably necessary for the relevant purpose and to rely on appropriate safeguards, such as contractual protections with the recipient, consistent with applicable transfer requirements. We do not represent that all personal data remains within the Kingdom of Saudi Arabia at all times.

10. Retention

We retain personal data for as long as your account remains active and as necessary to provide the Service. Most deletions performed within the Service, such as removing a log entry, are handled by marking the relevant record inactive rather than immediately erasing it, which preserves the integrity of your history. Deleting your account is different: it permanently erases your personal data as described in Section 13.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or loss, including access controls on administrative functions, rate limiting on sensitive actions, and logging of administrative activity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. The rights described in this Policy are intended to be consistent with the Personal Data Protection Law and with equivalent protections under other applicable law. Where a right described here is narrower than a right available to you under applicable law, the broader right governs.

13. Export, correction, and account deletion

You can export your data from Settings in CSV, Excel, or PDF format. You can correct most profile and activity data directly within the Service. You can permanently delete your account from Settings, which erases your personal data; this action cannot be undone, and we recommend exporting your data first if you wish to keep a copy.

14. Children

MacroFolio is not directed at, and may not be used by, anyone under 16 years of age. If we become aware that we hold personal data collected from a child under this age, we will take steps to delete it.

15. Policy changes

We may update this Privacy Policy from time to time. Material changes will be reflected on this page, and the date shown at the top will be revised.

16. Contact and complaints

The rights described in Section 13, including data export, correction, and account deletion, can be exercised directly within the Service under Settings. If you believe your data protection rights have not been respected, you may have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.