Privacy Policy

Last updated: June 12, 2026

Campus Macros ("we," "us," or "the Service") is a meal-planning service operated by an individual sole proprietor in the United States. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using Campus Macros you agree to this policy. Questions or requests can be sent to campusmacros@gmail.com.

1. Information we collect

Account information

Your email address and, if you sign in with Google, your name as provided by your Google account. Authentication is handled by Supabase; we never see or store your password in readable form, and Google sign-in is handled by Google.

Health and fitness information

To build your meal plan you may provide weight, height, age, biological sex, activity level, a goal weight and timeframe, dietary restrictions (e.g. vegetarian, vegan, gluten-free), and food allergies. We recognize this is sensitive, health-related information and we collect it only to compute your calorie and macro targets and generate meal plans you asked for. We do not sell it, use it for advertising, or share it except with the service providers listed below as needed to run the Service.

Plan and preference data

Your weekly grocery budget, household size, US state (used to estimate local grocery prices), generated plans and grocery lists, meal likes/dislikes, and meal swaps.

Payment information

Payments are processed entirely by Stripe. We never receive or store your card number. Our database stores only your plan tier, its expiration date, and a Stripe checkout-session reference ID.

Support conversations

If you use the in-app support chat, the messages you type are processed by Anthropic's AI API to understand your issue, and the conversation transcript (with your email and basic account info) is emailed to our support inbox so a human can follow up. Please don't type passwords or full card numbers into the chat — the assistant will never ask for them.

Usage data and analytics

We use PostHog to understand how the Service is used: page views, product events (e.g. signing up, generating a plan, starting checkout), and, once you have an account, an analytics profile identified by your account ID and email. We also process IP addresses transiently for security rate limiting.

2. How we use your information

We use your information to: (a) create and maintain your account; (b) compute calorie/macro targets and generate meal plans and grocery lists; (c) process payments and determine your access level; (d) send transactional and onboarding emails; (e) respond to support requests; (f) understand product usage and improve the Service; and (g) protect the Service from abuse. We do not sell your personal information, and we do not use your health information for advertising.

3. Service providers we share data with

We use a small set of service providers ("sub-processors") to operate Campus Macros. Each receives only what it needs:

Supabase — database and authentication. Stores your account, health/preference data, plans, and subscription records.
Stripe — payment processing. Receives your payment details directly; we never see card numbers.
PostHog — product analytics, including profiles identified by your email and account ID, page views, and product events.
Loops — onboarding/marketing email. Receives your email address (and first name, if available) when you sign up.
Resend — transactional email delivery, including support-ticket emails containing your support conversation.
Anthropic — AI processing for the support chat. Your chat messages and basic account context are sent to Anthropic's API to generate responses.
USDA FoodData Central — public nutrition database. Receives only recipe-name search queries, never your personal data.
Upstash — security rate limiting. Processes IP addresses transiently.
Vercel — application hosting; processes requests (including IP addresses) to serve the site.

We may also disclose information if required by law, or to protect the rights, safety, or property of users or the Service.

4. Cookies and similar technologies

We use essential cookies to keep you signed in (Supabase authentication), and PostHog uses cookies/local storage to recognize your browser for analytics. We do not use third-party advertising cookies. You can clear cookies in your browser at any time; doing so will sign you out.

5. Data retention and deletion

We keep your account and plan data for as long as your account exists so the Service works when you return. Support transcripts are retained in our support inbox. Analytics data is retained per PostHog's standard retention. You can request deletion of your account and associated personal data at any time by emailing campusmacros@gmail.com from your account email — we will delete your data from our systems and direct our service providers to do the same, except for records we must keep for legal, tax, or fraud-prevention purposes (e.g. Stripe payment records).

6. Security

Data is stored with Supabase using row-level security so each account can only access its own records; payment credentials never touch our systems; and access to production data is limited to the operator. No internet service can guarantee perfect security, but we work to protect your information with industry-standard practices.

7. US-only service; children

Campus Macros is offered to users in the United States only and is not directed at children. You must be at least 13 years old to use the Service, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact campusmacros@gmail.com and we will delete it.

8. Your choices

You can update your preferences and health metrics on the Settings page, request a copy or deletion of your data via campusmacros@gmail.com, and opt out of non-essential emails using the unsubscribe link in any marketing email.

9. Changes to this policy

We may update this policy as the Service evolves. Material changes will be posted here with an updated "Last updated" date, and significant changes may also be announced by email. Continued use after changes take effect constitutes acceptance.