This Privacy Policy explains how MAGRAMANE LLC ("Magramane", "we", "us") collects, uses and shares information when you use the Magramane mobile application ("the app"). Magramane is a fitness, nutrition and wellness app. Please read it together with the in-app Privacy & data screen.
Summary.
- Without an account, your logs are stored only on your device, encrypted at rest.
- If you create an account, a copy of your logs (including health data and photos you attach) is stored in our cloud database in Frankfurt, Germany, so you can restore and sync it. Some features send data to service providers only when you use them: AI photo and text analysis and the Premium AI coach (Google Gemini), avatar moderation (Google Cloud Vision), barcode lookup (Open Food Facts), weather (MET Norway) and maps.
- The free version shows ads through Google AdMob. Ads are not personalized: they are never chosen from your health data or your profile. AdMob receives your device's advertising ID, IP address and basic device information to deliver ads, count them and prevent fraud. Premium subscribers see no ads, and the ad SDK makes no ad requests for them.
- Premium is an optional subscription sold through Google Play or the App Store; we use RevenueCat to check which accounts are subscribed. We never receive your card details.
- We do not sell your data, and we never send health data to advertisers.
- Optional: anonymous usage statistics (off unless you opt in), crash reports (on by default, you can turn them off), and push notifications (off unless you opt in).
- You can export, correct or delete your data at any time.
1. Who is responsible
The controller of your personal data is MAGRAMANE LLC, a North Dakota limited liability company, 3802 Cherry St. Apt I36, Grand Forks, ND 58201, U.S.A. Contact for all privacy questions and requests: [email protected].
2. Data we handle and why
2.1 Data stored on your device
| Category | Examples | Purpose |
|---|---|---|
| Profile | Name (optional), sex, age, height, weight, activity level, goals, optional waist/neck/hip | Calorie and macro targets, BMR/TDEE, BMI, body-fat estimate |
| Faith (optional) | Religion setting, Ramadan mode, prayer-time and fasting reminders | Fasting windows, prayer and fasting reminders |
| Nutrition | Meals, foods, calories, macros, water, custom foods, favorites, meal photos you attach | Food and calorie tracking |
| Body metrics | Weight and body-fat history, target weight | Trends and adaptive goals |
| Activity | Step counts, workouts, GPS routes, distance, pace, elevation, heart rate from a Bluetooth sensor | Activity tracking |
| Sleep | Sleep sessions, snore statistics, short snore audio clips | Wellness snore detection you start |
| Vitals | Blood glucose, blood pressure, ketones, GKI | Vitals log |
| Digestion | Bristol stool type, notes, photos you attach | Digestion log |
| Menstrual cycle | Period start/end dates and predictions | Cycle tracking |
| Health Connect (Android) / Apple Health (iPhone) | Steps, exercise sessions, weight, body fat, sleep, blood glucose, blood pressure (read only, types you allow) | Import data from your other devices and apps |
Snore audio clips never leave your device. They are kept for about one month and then deleted automatically. You can delete them earlier.
2.2 Data stored in our cloud (only if you create an account)
| Data | Purpose |
|---|---|
| Email address, password (stored hashed by our authentication provider), account ID | Sign-in, account recovery, service emails |
| If you choose Continue with Google: your name, email address, profile picture link and Google account ID, sent by Google when you approve the sign-in (no password is created) | Sign-in; the email links the Google sign-in to an existing account with the same address |
| If you choose Continue with Apple (iPhone): an Apple user ID and the email address Apple shares (your real address or a private relay address if you choose "Hide My Email"), and your name the first time only (no password is created) | Sign-in; the email links the Apple sign-in to an existing account with the same address. When you delete your account we also ask Apple to revoke the sign-in |
| A backup copy of the data in 2.1 (except audio clips), including data imported from Health Connect or Apple Health and photos attached to meal and digestion entries | Restore and sync across your devices |
| Daily counters of AI requests | Enforce fair-use limits on AI features |
| Subscription status (free or Premium, and when Premium ends) | Unlock Premium features (no ads, AI coach, higher AI limits) on every device you sign in to |
The account is optional. The app works fully without one.
2.3 Community leaderboard (only if you opt in)
If you join the leaderboard, the following is visible to other users: your nickname, avatar, team, and your day/week/month/year totals of calories burned, distance and number of activities. No other health data is published. You can leave the leaderboard at any time in the app, which hides your entry.
2.4 Information we do not collect
We do not collect contacts, SMS, call logs, browsing history, or background location. The advertising ID is read only by the Google AdMob SDK in the free version (see 2.7); we do not store it on our servers. Location is collected only while a workout you started is running (with a visible notification), or once when you open the outdoor-conditions card.
2.5 Usage statistics and crash reports
These are stored only in our own database (Supabase), never sent to an analytics company, and never contain health values.
| Data | When | What is recorded | Kept |
|---|---|---|---|
| Usage statistics | Only if you opt in (consent screen or Settings → Privacy & data) | Feature names and simple events (for example "meal logged by photo", "AI feature used", "app opened"), app version, platform, language, a random install ID, your account ID if signed in, and the store campaign that led to the install | 400 days |
| Crash reports | On by default; turn off in Settings → Privacy & data | Error message and technical stack trace, app version, platform, random install ID, account ID if signed in | 90 days |
The random install ID is created by the app; it is not your advertising ID or a hardware ID. When you delete your account, these records are unlinked from it.
2.6 Push notifications (only if you opt in)
If you turn on news and challenges notifications, we store your device's push token, your app language, your time zone, whether Ramadan mode is on (so Ramadan messages reach only people who use it), the random install ID and your account ID if signed in. Turning notifications off or deleting your account removes this. Reminders you set (water, fasting, prayer times) are local notifications scheduled on your device and do not use this.
2.7 Ads (free version only)
The free version shows two kinds of ads at the bottom of the home screen. Premium subscribers see neither.
- Sponsored tile. One campaign we sell directly, or an invitation card. Campaigns are chosen only by your app language, never by your health data or profile, and we count only total views and taps per campaign.
- Google AdMob banner. We request non-personalized ads only, so ads are chosen from general context (such as the app and your approximate location from your IP address), not from a profile of your interests. To show, measure and protect ads, the AdMob SDK collects your device's advertising ID (or app set ID), IP address, device and app information, ad views and taps, and diagnostic data, and Google processes it under its own policies (https://policies.google.com/technologies/partner-sites). In the EEA, the UK and Switzerland the app asks for your consent through Google's consent form before requesting ads.
We never pass health, fitness, cycle, religion or other profile data to any ad network. The banner appears only on the home screen and is hidden as soon as you open any other screen. You can reset or delete your advertising ID in Android settings (Settings → Privacy → Ads). On iPhone, Magramane never asks for permission to track you, so AdMob cannot read the advertising identifier (IDFA) and uses Apple's per-app vendor identifier instead. Tapping an ad may open the advertiser's website or app, whose own privacy policy applies.
2.8 Premium subscription (optional)
Premium is a monthly or yearly subscription, with a free trial, sold and billed by Google Play (Android) or the Apple App Store (iPhone). The store handles your payment; we never see your card or bank details. RevenueCat (our subscription service) receives your account ID, the purchase and renewal records the store gives us (product, dates, price, country, status) and basic device information, so the app can tell which accounts are Premium. You can cancel any time in Google Play → Payments & subscriptions, or on iPhone in Settings → your name → Subscriptions.
2.9 AI coach and daily insight (Premium, only when you use it)
When you send a message to the AI coach, and once a day for the daily insight shown on the home screen of Premium subscribers, we send to Google Gemini a short summary of your recent data so the answers fit you, together with your messages in that conversation. The summary contains only figures, never photos, notes or free text: first name, objective and goal, sex, age, height, current and target weight and the weight change over 4 weeks, calorie target and 7-day averages of calories, carbohydrates, protein, fat and water, steps (today and 7-day average), workouts and active minutes over 7 days, average sleep and usual bed and wake-up times, the latest blood glucose and blood pressure readings, estimated resting heart rate and VO2max, digestion frequency and share of Bristol 3–5, menstrual cycle phase and days to the next period (only if you log periods), estimated metabolic age, and whether Ramadan mode is on. Your religion setting is not sent. The conversation and the daily insight are kept only on your device (the last 40 messages); our servers do not store them, and only count each request against your daily AI limit. The coach's answers are AI suggestions, not medical advice.
Voice (optional): if you tap the microphone, your phone's speech-recognition service (for example Google's on Android, as set in your phone's settings, or Apple's on iPhone) turns your speech into text, and the app receives only the text. Answers read aloud use the voices installed on your phone; no audio is sent to us.
3. Legal bases (where applicable law requires one)
- Your explicit consent for health data, menstrual cycle data, religion and Ramadan settings, photos, precise location, usage statistics, push notifications, the AI coach, and (in the EEA, UK and Switzerland) the use of your device for ads. You give it by enabling each feature, and you can withdraw it at any time by turning the feature off or deleting the data.
- Performance of our contract with you to provide the account, sync and features you request, including the Premium subscription.
- Legitimate interests to keep the service secure and working, and to prevent abuse (for example crash reports, AI usage limits and avatar moderation), and to fund the free version with non-personalized ads outside the EEA, UK and Switzerland. You can object by turning crash reports off, or avoid ads with Premium.
- Legal obligations where we must keep or disclose information by law.
4. Service providers and other recipients
We share data only with the providers below, only for the purpose listed. Except for Google AdMob (see 2.7), none of them may use it for their own advertising. Requests to map and weather servers reveal your IP address to that provider.
| Provider | When | What is sent | Purpose | Location |
|---|---|---|---|---|
| Supabase (database, authentication, file storage, server functions) | Account use, sync, leaderboard | Account data and the backup in 2.2; leaderboard data | Hosting | Frankfurt, Germany (AWS eu-central-1) |
| Google — Gemini API (paid tier) | When you use AI photo or text features, the AI coach or the daily insight | Food photo or description; digestion photo; body photo together with sex, age, height and weight; AI coach messages and the data summary in 2.9 | AI estimates of calories/macros, Bristol type, body fat; AI coach answers | United States and other Google locations |
| Google AdMob | Free version only, on the home screen | Advertising ID or app set ID, IP address, device and app information, ad views and taps, diagnostics; consent choice (EEA/UK/Switzerland) | Show, measure and protect non-personalized ads | United States and other Google locations |
| Google Play Billing | When you subscribe to Premium (Android) | Purchase and payment, handled by Google under its own policy | Sell and renew the subscription | United States and other Google locations |
| Apple App Store (in-app purchase) | When you subscribe to Premium (iPhone) | Purchase and payment, handled by Apple under its own policy | Sell and renew the subscription | United States and other Apple locations |
| RevenueCat, Inc. | When you view or buy Premium, and when the app checks your plan | Account ID, purchase and renewal records, device type, OS and app version, IP address | Check and sync your Premium status | United States |
| Google — Cloud Vision SafeSearch | When you upload a leaderboard avatar or team image | That image | Block adult, racy or violent images | United States and other Google locations |
| Open Food Facts | When you scan a barcode | The barcode number | Product nutrition lookup | France |
| MET Norway (Norwegian Meteorological Institute) | When the outdoor-conditions card loads | Your approximate coordinates (rounded to about 1 km), IP address | Weather | Norway |
| Cloudflare (our map tile server) | When a map is shown | Map area requested, IP address | Street map tiles | Global network |
| EOX IT Services | When satellite view is shown | Map area requested, IP address | Satellite imagery | Austria |
| Amazon Web Services (open elevation tiles), GitHub Pages (map fonts) | When a map is shown | Map area requested, IP address | Elevation and map labels | United States |
| Google Sign-In | Only if you choose Continue with Google | The sign-in request; Google returns your name, email, profile picture link and account ID | Sign-in without a password | United States and other Google locations |
| Apple — Sign in with Apple | Only if you choose Continue with Apple (iPhone) | The sign-in request; Apple returns a user ID, an email address (possibly a private relay address) and, the first time, your name | Sign-in without a password; token revocation when you delete your account | United States and other Apple locations |
| Google Workspace (email) | When you create an account, reset your password, or email us | Your email address and the message | Account emails and support replies | United States and other Google locations |
| Google Firebase Cloud Messaging | Only if you turn on push notifications | Device push token | Deliver notifications | United States |
| Google Play | Always (Android) | Crash and performance reports, if you allowed them in Android settings; the store campaign that led to the install | App quality, campaign attribution | United States |
| Apple (App Store, Apple Push Notification service) | Always (iPhone); push only if you turn it on | Crash and usage reports, if you allowed sharing with app developers in iPhone settings; device push token | App quality; deliver notifications | United States |
Google's paid Gemini API terms do not allow Google to use your content to train its models. Google may keep it for a limited time to detect abuse, as described in its terms. We do not store photos sent for AI analysis on our servers, except as part of your own backup when they are attached to an entry.
We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a merger or sale of the business, in which case this policy continues to apply.
We do not sell personal data and do not share it for cross-context behavioral advertising: the AdMob ads in the free version are non-personalized, and no health or profile data is sent to them.
5. International transfers
MAGRAMANE LLC is based in the United States, our database is in Germany, and some providers process data in other countries. Where the law of your country requires it, we rely on the providers' standard contractual clauses or equivalent safeguards.
6. Security
Data on your device is encrypted at rest (Android EncryptedSharedPreferences; on iPhone, iOS Data Protection, and the app's data is excluded from iCloud and device backups). Data in transit is encrypted with TLS. Our database enforces row-level security, so each account can read only its own data. No system is perfectly secure; we will notify you and the authorities of a breach where the law requires it.
7. Retention
| Data | Kept until |
|---|---|
| On-device logs | You delete them, the in-app auto-delete window removes them, or you uninstall the app |
| Snore audio clips | About one month, then deleted automatically |
| Cloud backup and account | You delete your account; then removed from active systems immediately and from backups within 30 days |
| Leaderboard entry | You leave the leaderboard or delete your account |
| AI usage counters | 90 days |
| Usage statistics | 400 days (only if you opted in) |
| Crash reports | 90 days |
| Push token and preferences | Until you turn notifications off or delete your account |
| Subscription status | While your account exists; Google Play, Apple and RevenueCat keep purchase records as required for tax and accounting |
| AI coach conversation and daily insight | Only on your device; you can clear the conversation in the coach screen |
8. Your rights and choices
Wherever you live, you can:
- Access and export your data: in the app, or by emailing us.
- Correct your data: edit any entry in the app, or email us for account data.
- Delete your data: per entry or category in Settings → Privacy & data, or delete your account in Settings → Account → Delete account, or request deletion at https://www.magramane.com/delete-account.html or by email.
- Ads: change your ad consent in the EEA, UK or Switzerland in Settings → Privacy & data → Ad privacy choices, reset or delete your advertising ID in Android settings, or subscribe to Premium for no ads.
- Withdraw consent: turn off a feature, revoke a permission in Android or iPhone settings, or revoke Health Connect access in the Health Connect app (Android) or Apple Health access in Settings → Health → Data Access & Devices (iPhone).
- Object to or restrict processing, and complain to your local data protection authority.
We answer requests within 30 days (45 days where US state law allows). We will not discriminate against you for exercising your rights. We may need to verify your identity, normally by asking you to write from the email address of your account.
United Kingdom, Switzerland, EEA countries outside the EU, Brazil and other countries with comprehensive data protection laws: you have the rights listed above as provided by your local law (UK GDPR, Swiss FADP, LGPD and similar).
California and other US states with privacy laws: you have the right to know, access, correct and delete personal information, and to opt out of sale, sharing and targeted advertising. We do not sell or share personal information or use it for targeted advertising (ads in the free version are non-personalized), and we use sensitive personal information only to provide the features you request. Usage statistics are off unless you opt in.
9. Consumer health data (Washington, Nevada and other US states)
This section is our consumer health data privacy policy under laws such as the Washington My Health My Data Act and Nevada SB 370.
- Consumer health data we collect: the health, fitness, body, vitals, digestion, sleep and menstrual cycle data, related photos, and precise location during workouts, described in section 2.
- Sources: you (entries, photos, sensors on your device), devices you connect over Bluetooth, and Health Connect or Apple Health when you allow it.
- Purposes: only to provide the features you request, as described in section 2. If you opt in to usage statistics, they may show which features you use (for example that you used the digestion photo feature), never the values you log.
- Sharing: only with the service providers in section 4, which process it for us (for example Google Gemini for AI features and the AI coach). We do not sell consumer health data, and we never send it to Google AdMob or any other ad network.
- Your rights: to confirm whether we collect it, access it, delete it, and withdraw consent, as described in section 8. If we deny a request, you may appeal by replying to our answer; if the appeal is denied you may contact your state Attorney General.
10. Health Connect and Apple Health
Data read from Health Connect (Android) or Apple Health / HealthKit (iPhone) is used only to show it in the app and to compute your totals and goals. If you have an account, it is included in your cloud backup. It is never used for advertising or marketing, never sold (including to data brokers or advertising platforms), never used for research without your separate consent, and never transferred except as described in this policy. Magramane only reads these data; it does not write to Health Connect or Apple Health. Our use of Health Connect data complies with the Health Connect Permissions policy, including its Limited Use requirements. Our use of Apple Health data complies with Apple's HealthKit rules: it is not stored in iCloud and is used only to provide the app's health and fitness features.
11. Age requirement
Magramane is intended for adults. You must be 18 or older to use the app. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.
12. Medical disclaimer
Magramane is a wellness app. It is not a medical device and does not diagnose, treat, cure or prevent any disease. AI estimates, calories, body-fat, Bristol type, snore figures and cycle predictions are estimates only. Consult a healthcare professional for medical concerns.
13. Changes
We will update the "Last updated" date when this policy changes, and notify you in the app before material changes take effect.
14. Contact
MAGRAMANE LLC · 3802 Cherry St. Apt I36, Grand Forks, ND 58201, U.S.A. · [email protected]