PrivacyPolicy
Full document on how we collect, use and protect your personal data at MacroKinetix.
Última revisión
Last updated: September 6, 2026
Cumplimiento RGPD
Transparencia, consentimiento y derechos del usuario según normativa europea.
Protección de datos
Tratamiento responsable, minimización y control sobre tu información personal.
Última revisión
Last updated: September 6, 2026
Cumplimiento RGPD
Transparencia, consentimiento y derechos del usuario según normativa europea.
Protección de datos
Tratamiento responsable, minimización y control sobre tu información personal.
En pocas palabras
- We only collect data necessary to provide the service (account, profile, label images), improve experience and meet legal obligations.
- Advertising and non-essential analytics cookies require your explicit consent.
- You may exercise access, rectification, erasure, objection, restriction and portability rights, including permanent deletion of your account and files, by contacting us.
En pocas palabras
- We only collect data necessary to provide the service (account, profile, label images), improve experience and meet legal obligations.
- Advertising and non-essential analytics cookies require your explicit consent.
- You may exercise access, rectification, erasure, objection, restriction and portability rights, including permanent deletion of your account and files, by contacting us.
Data security
We apply technical and organizational measures to protect your information from unauthorized access.
GDPR / LOPD protection
We process your data under the General Data Protection Regulation and Spanish LOPDGDD.
Your rights
Access, rectification, erasure, objection, restriction, portability and complaint to the supervisory authority.
Data security
We apply technical and organizational measures to protect your information from unauthorized access.
GDPR / LOPD protection
We process your data under the General Data Protection Regulation and Spanish LOPDGDD.
Your rights
Access, rectification, erasure, objection, restriction, portability and complaint to the supervisory authority.
At MacroKinetix we are committed to protecting your privacy with the utmost rigor. This policy transparently describes what personal data we collect, for what purpose, for how long, and what rights you may exercise under the General Data Protection Regulation (GDPR — EU 2016/679), the Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD), and other applicable privacy regulations.
At MacroKinetix we are committed to protecting your privacy with the utmost rigor. This policy transparently describes what personal data we collect, for what purpose, for how long, and what rights you may exercise under the General Data Protection Regulation (GDPR — EU 2016/679), the Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD), and other applicable privacy regulations.
1. Data controller
The data controller for personal data collected through this platform is MacroKinetix, a digital platform for fitness content, interactive tools, and artificial intelligence services.
Controller contact details
Contact email and exercise of rights: hola@macrokinetix.com
MacroKinetix acts as the data controller with respect to data obtained directly through the website, forms, cookies, and integrated services described in this policy.
1. Data controller
The data controller for personal data collected through this platform is MacroKinetix, a digital platform for fitness content, interactive tools, and artificial intelligence services.
Controller contact details
Contact email and exercise of rights: hola@macrokinetix.com
MacroKinetix acts as the data controller with respect to data obtained directly through the website, forms, cookies, and integrated services described in this policy.
2. Personal data we collect
We collect only the data strictly necessary to provide our services, improve the user experience, and comply with legal obligations. The specific category depends on how you interact with the platform:
Browsing and technical data
When you visit MacroKinetix, our servers and analytics providers (only with your consent) may record technical information such as anonymized IP address, browser type, operating system, pages visited, time spent, preferred language, and visit origin (referrer).
- Session identifiers and technical cookies necessary for the site to function.
- Display preferences, such as light or dark mode.
- Aggregated performance and error data to maintain service stability.
Contact form data
If you contact us through the contact form or by email, we process the name, email address, subject, and message content you voluntarily provide.
Account and authentication data
If you create an account, we process your email address, password (stored encrypted by the authentication provider, never in clear text on our servers) and the session identifiers needed to keep you signed in.
Physical and nutrition profile
When you use calculators, the food log or the scanner, you may voluntarily provide data such as weight, height, age, sex, goal, macros, food preferences, allergens and restrictions. These data are used only to compute results and personalize the nutrition traffic light.
Nutrition label images
If you use the label scanner, you upload a photo or file of the nutrition table (JPEG, PNG, WebP, HEIC or HEIF). The image is sent temporarily to a vision AI model to extract kcal, macros, allergens and ingredients. We do not use those images to train our own models or for advertising.
AI assistant usage data
When using the chat or AI-based generators, the messages and parameters you enter are processed in real time to generate the requested response. We do not retain a permanent conversation history unless you activate registered account features, in which case you will be specifically informed.
2. Personal data we collect
We collect only the data strictly necessary to provide our services, improve the user experience, and comply with legal obligations. The specific category depends on how you interact with the platform:
Browsing and technical data
When you visit MacroKinetix, our servers and analytics providers (only with your consent) may record technical information such as anonymized IP address, browser type, operating system, pages visited, time spent, preferred language, and visit origin (referrer).
- Session identifiers and technical cookies necessary for the site to function.
- Display preferences, such as light or dark mode.
- Aggregated performance and error data to maintain service stability.
Contact form data
If you contact us through the contact form or by email, we process the name, email address, subject, and message content you voluntarily provide.
Account and authentication data
If you create an account, we process your email address, password (stored encrypted by the authentication provider, never in clear text on our servers) and the session identifiers needed to keep you signed in.
Physical and nutrition profile
When you use calculators, the food log or the scanner, you may voluntarily provide data such as weight, height, age, sex, goal, macros, food preferences, allergens and restrictions. These data are used only to compute results and personalize the nutrition traffic light.
Nutrition label images
If you use the label scanner, you upload a photo or file of the nutrition table (JPEG, PNG, WebP, HEIC or HEIF). The image is sent temporarily to a vision AI model to extract kcal, macros, allergens and ingredients. We do not use those images to train our own models or for advertising.
AI assistant usage data
When using the chat or AI-based generators, the messages and parameters you enter are processed in real time to generate the requested response. We do not retain a permanent conversation history unless you activate registered account features, in which case you will be specifically informed.
3. Purpose and legal basis of processing
We process your personal data for the following purposes and legal bases:
- Service provision and response to inquiries — legal basis: performance of pre-contractual measures or legitimate interest in handling user requests.
- Analysis of nutrition labels using vision AI models (OpenAI) to extract nutritional information from the image you upload — legal basis: performance of the requested service and, where applicable, consent.
- Platform improvement, security, and abuse prevention — legal basis: legitimate interest in ensuring service integrity.
- Analytics cookies (Google Analytics) — legal basis: explicit user consent.
- Advertising cookies (Google AdSense and advertising partners) — legal basis: explicit user consent.
- Compliance with legal obligations — legal basis: applicable legal obligation.
3. Purpose and legal basis of processing
We process your personal data for the following purposes and legal bases:
- Service provision and response to inquiries — legal basis: performance of pre-contractual measures or legitimate interest in handling user requests.
- Analysis of nutrition labels using vision AI models (OpenAI) to extract nutritional information from the image you upload — legal basis: performance of the requested service and, where applicable, consent.
- Platform improvement, security, and abuse prevention — legal basis: legitimate interest in ensuring service integrity.
- Analytics cookies (Google Analytics) — legal basis: explicit user consent.
- Advertising cookies (Google AdSense and advertising partners) — legal basis: explicit user consent.
- Compliance with legal obligations — legal basis: applicable legal obligation.
5. Disclosure and communication of data to third parties
MacroKinetix does not sell or transfer your personal data to third parties for commercial purposes. We only share information with data processors that provide us with essential services and are subject to confidentiality and data protection agreements:
- Vercel: hosting, content delivery and application runtime.
- Supabase: database, authentication and session management.
- OpenAI: processing and analysis of label images and AI assistant queries (vision and text). We do not use Anthropic or Google Gemini for this processing.
- Stripe: payment gateway, only if you purchase a paid service.
- Google LLC (Analytics and AdSense), only with prior consent for non-essential cookies.
- Public authorities, when there is a legal obligation to provide information.
International transfers
Some providers may be located outside the European Economic Area. In those cases, we ensure an adequate level of protection through standard contractual clauses approved by the European Commission or other mechanisms recognized by the GDPR.
5. Disclosure and communication of data to third parties
MacroKinetix does not sell or transfer your personal data to third parties for commercial purposes. We only share information with data processors that provide us with essential services and are subject to confidentiality and data protection agreements:
- Vercel: hosting, content delivery and application runtime.
- Supabase: database, authentication and session management.
- OpenAI: processing and analysis of label images and AI assistant queries (vision and text). We do not use Anthropic or Google Gemini for this processing.
- Stripe: payment gateway, only if you purchase a paid service.
- Google LLC (Analytics and AdSense), only with prior consent for non-essential cookies.
- Public authorities, when there is a legal obligation to provide information.
International transfers
Some providers may be located outside the European Economic Area. In those cases, we ensure an adequate level of protection through standard contractual clauses approved by the European Commission or other mechanisms recognized by the GDPR.
6. Retention period
We retain personal data for the time strictly necessary to fulfill the purposes described:
- Contact messages: up to 24 months from the last communication, unless a longer legal retention obligation applies.
- Analytics data: according to retention periods configured in Google Analytics and your consent.
- Cookies: according to the duration indicated in the Cookie Policy.
- AI chat data: processed in real time; not permanently stored except for duly informed future account features.
- Label images: processed for analysis and not permanently stored on our servers unless you associate them with an account or persistent log.
- Account and profile data: for as long as the account remains active or until you request erasure.
6. Retention period
We retain personal data for the time strictly necessary to fulfill the purposes described:
- Contact messages: up to 24 months from the last communication, unless a longer legal retention obligation applies.
- Analytics data: according to retention periods configured in Google Analytics and your consent.
- Cookies: according to the duration indicated in the Cookie Policy.
- AI chat data: processed in real time; not permanently stored except for duly informed future account features.
- Label images: processed for analysis and not permanently stored on our servers unless you associate them with an account or persistent log.
- Account and profile data: for as long as the account remains active or until you request erasure.
7. Security measures
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include:
- Encrypted communications via HTTPS/TLS protocol.
- Restricted access control to personal data for authorized personnel only.
- Security monitoring, rate limiting, and input validation to prevent abuse.
- Periodic review of providers and privacy configurations.
Security liability limitation
No system is completely infallible. We recommend using strong passwords when user accounts exist, not sharing sensitive health data in open text fields, and keeping your browser and device updated.
7. Security measures
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include:
- Encrypted communications via HTTPS/TLS protocol.
- Restricted access control to personal data for authorized personnel only.
- Security monitoring, rate limiting, and input validation to prevent abuse.
- Periodic review of providers and privacy configurations.
Security liability limitation
No system is completely infallible. We recommend using strong passwords when user accounts exist, not sharing sensitive health data in open text fields, and keeping your browser and device updated.
8. Your rights (GDPR)
As the data subject, you may exercise at any time the following rights recognized by the GDPR and LOPDGDD:
- Access: know what data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion when applicable.
- Restriction of processing: limit the use of your data in certain circumstances.
- Objection: object to processing based on legitimate interest.
- Portability: receive your data in a structured format when processing is based on consent or contract.
- Withdrawal of consent: revoke consent granted for cookies or communications, without retroactive effect.
How to exercise your rights
Send your request to hola@macrokinetix.com indicating the right you wish to exercise and, where applicable, verifying your identity. We will respond within a maximum period of one month, extendable by two additional months in complex cases, in accordance with Article 12 of the GDPR.
If you believe that the processing of your data does not comply with regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Right to erasure and account deletion
To permanently delete your account and data, email hola@macrokinetix.com with the subject "Delete my account" from the same address you registered with. After verifying your identity, we will delete your user, profile, associated analyses and any stored label files from the database, and revoke active sessions. Data we must keep for a legal obligation (for example, billing) will be limited to that purpose and period.
8. Your rights (GDPR)
As the data subject, you may exercise at any time the following rights recognized by the GDPR and LOPDGDD:
- Access: know what data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion when applicable.
- Restriction of processing: limit the use of your data in certain circumstances.
- Objection: object to processing based on legitimate interest.
- Portability: receive your data in a structured format when processing is based on consent or contract.
- Withdrawal of consent: revoke consent granted for cookies or communications, without retroactive effect.
How to exercise your rights
Send your request to hola@macrokinetix.com indicating the right you wish to exercise and, where applicable, verifying your identity. We will respond within a maximum period of one month, extendable by two additional months in complex cases, in accordance with Article 12 of the GDPR.
If you believe that the processing of your data does not comply with regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Right to erasure and account deletion
To permanently delete your account and data, email hola@macrokinetix.com with the subject "Delete my account" from the same address you registered with. After verifying your identity, we will delete your user, profile, associated analyses and any stored label files from the database, and revoke active sessions. Data we must keep for a legal obligation (for example, billing) will be limited to that purpose and period.
9. Minors
MacroKinetix is not intentionally directed at minors under 16 years of age. If you are a parent or legal guardian and discover that a minor has provided us with personal data without the corresponding consent, contact us to proceed with its deletion.
9. Minors
MacroKinetix is not intentionally directed at minors under 16 years of age. If you are a parent or legal guardian and discover that a minor has provided us with personal data without the corresponding consent, contact us to proceed with its deletion.
10. Changes to this policy
We may update this Privacy Policy to reflect legislative, technical, or service changes. We will publish the current version on this page with the last updated date. We recommend reviewing it periodically.
10. Changes to this policy
We may update this Privacy Policy to reflect legislative, technical, or service changes. We will publish the current version on this page with the last updated date. We recommend reviewing it periodically.