Privacy Policy (Beta)

1. Who looks after your data

LeMakros is responsible for your data under Malaysia’s Personal Data Protection Act 2010 (PDPA). Contact: support@lemakros.app.

2. What we collect

Only what the app needs to work:

• From Google sign-in: your name, email address, profile photo and Google account ID. We never see your Google password.
• What you log: foods, weights, meals, notes, saved foods, combos and recipes, and daily targets.
• Drafts you save: if you tap “Save as draft” on the log form, we keep what you’d entered so far — the food, brand or restaurant, details, meal, date, weight and any numbers you typed — plus up to 3 food photos you attached, so you can finish it later on any device. A copy also stays on your phone so drafts work offline. It holds the text only, except that if you save a draft while offline, its photos wait on your phone until you’re back online.
• About you, if you choose to add it: age, gender, height, weight history and activity level (for the targets calculator), your city, and any health conditions you tick (see section 3).
• Usage: which features you use and when, and how you found LeMakros (for example from Google or Reddit), so we can keep costs and limits fair, fix what breaks, and see where people get stuck.
• Visits to our public pages are counted without cookies: a temporary random number that disappears when you close the tab, plus which site sent you. We don’t store your name or IP address with it.
• Feedback you send us: your message, any screenshots you attach, and basic details like which screen you were on and your type of device. Feedback left while deleting your account is kept without your name or email.

Photos: a food photo or label you scan for an estimate is sent to the AI to read it, then discarded — we don’t keep it. The only images we store are photos you attach to a saved draft (until the draft is logged, deleted or expires) and screenshots you attach to feedback.

Everything in the “about you” list is optional — the app works without it, you just get less tailored estimates and advice. We don’t ask for your phone number or contacts, and we don’t track you across other apps or websites.

3. Health information

The health conditions on your Account page (for example high blood pressure or pre-diabetes) are sensitive personal data under the PDPA. So:

• We only save them after you tick a box giving us your explicit consent, and we record when you did. If you’re under 18, a parent or guardian must agree too.
• We use them for one thing: so Alfred’s suggestions respect them. To do that, they’re sent to Google’s AI along with your question each time you ask Alfred something.
• They’re optional. Untick them and save to withdraw your consent — they’re removed straight away. They’re also deleted with your account.

4. Who else handles your data

We use a few services to run LeMakros. Each only gets what it needs:

• Google (Gemini AI) — produces estimates and Alfred’s answers. It receives what you type or photograph for an estimate, plus the context that makes the answer useful: your city (for local dishes), and, for Alfred, the sense-check chat and your progress summaries: your targets, recent meals, weight trend, the details you gave the targets calculator, and any health conditions you’ve consented to. We use Google’s paid service, under which Google doesn’t use this to train or improve its products.
• Stripe — handles payments if you subscribe. Your card details go to Stripe, never to us.
• Railway — hosts the app and its database.

Your data is processed outside Malaysia. Our app and database are hosted in Singapore; Google and Stripe process data in the United States and other countries. We chose these services because they protect data to a high standard.

We never sell your data, and we don’t use it for advertising.

5. Anonymous food estimates

When the AI estimates a dish, we keep the dish name, any brand or restaurant and preparation notes you typed with it, the country (worked out from your city — not the city itself) and its estimated macros — without your name, email or account — so the next person in that country who logs the same dish gets an instant answer. Dish names can also appear as suggestions to other people in that country when they look like a general food. A dish with a brand or restaurant appears only once someone else has logged the same one too, and dishes with notes never do. To tell whether a second person has logged a dish we keep a one-way scrambled code instead of your account, and remove it if you delete your account. Please don’t put personal details in a dish’s name or notes.

6. How long we keep things

• Your account and diary: until you delete them.
• Drafts (and their photos): until you log or delete them, and automatically deleted if left untouched for 30 days.
• Backups (copies of the database, in case something goes wrong): deleted after 30 days.
• Usage and error records: only as long as we need them to keep cost records and fix problems. When you delete your account, they’re stripped of anything that identifies you.

7. Deleting your account

You can delete your account any time: Account → Delete my account. Your diary, drafts, saved foods, targets, weight history, health conditions and profile are deleted immediately, and any subscription is cancelled. Copies in our backups are gone within 30 days.

We keep two things that don’t identify you: anonymous usage counts (for cost records), and a one-way scrambled fingerprint of your Google account ID that can’t be turned back into who you are — it only stops the free trial being claimed twice.

8. Your rights

Under the PDPA you can ask to see a copy of your data, correct it, take it with you, or have it deleted, and you can withdraw consent at any time. Premium members can download their data from the Account page; anyone can email us for a copy. We’ll reply within 21 days.

If something ever goes wrong and your data is exposed, we’ll report it to Malaysia’s Personal Data Protection Commissioner as the law requires, and tell you directly if it could affect you.

Questions or requests: support@lemakros.app. If you’re not happy with our answer, you can complain to the Personal Data Protection Commissioner of Malaysia.

9. The “Lemak” clause

Le Makros is a localised play on “Lemak” (fat) and “Macros.” Our mission is to bridge local food culture and good nutrition science. Your privacy is part of that bridge.