Privacy policy

Last updated: 19 October 2026

Macrava is a free student project run by Vatsal Trivedi. It helps you plan protein, calories, carbs and fat within a daily food budget. This page explains, in plain words, what the app stores about you and why.

Without an account

If you tap Try without an account, everything you enter stays in your browser on that device. None of your answers or plan is sent to us. The only things sent are anonymous usage counts and food choices (below).

With an account

If you sign in, we store:

From Google or your email login: your name, your email address and an account ID. If you log in with email and a password, Supabase keeps only a scrambled (hashed) form of the password. Nobody, including us, can read it.
What you enter in the app: your city, and your area or PIN code if you add one. Your food and kitchen answers (diet, where you live, kitchen gear, mess meals). The body details you give to work out your targets (sex, age, height, weight, activity, goal). Your budget and targets, foods you exclude, items you order in, prices you correct, and meals you tick as eaten (the last 14 days).

We use this only to build your plan and keep it the same on all your devices. We don't use it for ads, we don't sell it, and we don't share it with anyone except the services listed below, which run the app.

Usage counts

To see how many people use the app, it sends a few anonymous counts: that the app was opened, a plan was shown, a meal was ticked, a Pro preview was seen, or someone was signed in. Each is sent at most once a day, with only a random ID made for this device. Your plan, answers, name and email are not included. Logging out doesn't remove this random ID, so the same phone isn't counted twice.

Food choices: to learn which foods people like, the app also records which foods are ticked as eaten, swapped out or brought in by a swap. It sends only the food's name and number, with the same random device ID and the day, at most once a day per food. Nothing links it to your name, email or account.

Cloudflare Web Analytics also counts page visits (for example which page and which country). It doesn't use cookies or track you across other sites.

Services that handle your data

Supabase: stores your account and saved plan. Our database is in Mumbai, India.
Google: handles "Continue with Google" sign-in. The page also loads its font from Google Fonts, which means Google sees your IP address.
Cloudflare: hosts the app's web page and counts visits (Web Analytics).

Deleting your data

Delete my account (at the bottom of your plan) permanently removes your sign-in and your saved plan straight away.
Log out removes your plan and settings from that device. Your account copy stays until you delete it.
You can also email us to ask what we hold about you, or to have it corrected or deleted.

Age

Accounts are for people aged 16 or over. If you're 16 or 17, please get a parent's or guardian's OK before creating an account. If you're younger, use the app without an account, which keeps your data on your own device.

Changes

If this policy changes, we'll update this page and the date at the top.

Contact

Questions or requests: gamezderister@gmail.com