Stormkind Studio · MacrOrbit

MacrOrbit Privacy Policy

Publisher: Christopher Strydom, an individual developer trading as Stormkind Studio, United Kingdom

Privacy contact: stormkindstudio@gmail.com

Policy URL: https://macrorbit.stormkind.dev/app/privacy

Policy version: 8 November 2026. This policy takes effect on first publication at the policy URL.

Android application ID: dev.stormkind.macrorbit

1. At a glance

MacrOrbit is a nutrition tracker intended for adults. The current release is free, has no ads and does not require an account. This policy covers the Android app, related support and the policy webpage—not future subscription or cloud features.

Your tracking history is stored on your device, not on a Stormkind Studio server. We do not receive your diary, weight or Health Connect history merely because you use the app. Photo and text AI processing runs on-device. We do not sell personal information, use tracking records for advertising or send them to a cloud AI service.

Local-first does not mean every feature is offline. Optional barcode lookups, recipe webpage imports, Nearby sharing, backup destinations you select, Google technical diagnostics and support email can involve other parties. Opening this policy webpage also involves our hosting provider, Cloudflare. These activities are explained below.

2. Information on your device

Depending on the features you use, MacrOrbit stores:

• Foods, brands, barcodes, nutrition, ingredients, portions, favourites and source information; saved meals, optional meal photos and ingredient quantities.
• Food diary entries and nutrition snapshots, meal plans and notes, shopping lists and checkmarks.
• Water and supplement entries, goals, schedules, reminders and taken/snoozed/skipped history; weigh-ins, a weight goal and nutrition targets.
• Target-estimator inputs: age, height, weight, sex-equation selection, activity level and goal. These are saved when you tap Calculate estimate, even if you do not apply the result.
• Captured or selected images and prepared copies; pasted recipe text and recipe URLs; scan, import and barcode jobs; names, brands, results, errors and local processing measurements. Meal drafts can retain an attached photo.
• Sharing display names, random installation and item identifiers, partner trust information, selected content and attribution, pending transfers, recovery/undo information and app preferences.

Food, weight, supplement and activity information can reveal information about your health. You do not need to send these records to the publisher to use local tracking.

3. Photos, barcode scanning and on-device AI

Camera permission supports photos and barcode scanning that you choose. Android's photo picker lets you select an image without giving the app unrestricted access to your photo library.

Label, ingredient-photo, written-list and pasted recipe-text processing runs on your device. The app does not upload these inputs or model output to an AI service or use your records to train an AI model.

Attached meal photos are orientation-corrected, resized and compressed, and image metadata is removed on-device. Saved meal photos can be included in backups and shared meals. Original images held by your camera or photo app remain separate.

Google ML Kit recognises barcodes on-device, but has separate technical diagnostics described in section 5. AI results and imported nutrition can be inaccurate: review them before saving. They are not medical diagnosis or treatment.

4. Optional Health Connect

With the relevant Android permissions, MacrOrbit reads total calories burned, active calories burned and basal metabolic rate (resting energy). These support Diary day, week and month calorie-expenditure and energy-balance summaries, and optional activity-level suggestions from recent completed days when estimating targets.

The app does not write to Health Connect. You can decline access, grant only some permissions or revoke access in Android's Health Connect settings. Manual tracking does not require this connection.

MacrOrbit reads calorie aggregates and uses results in memory. It does not save copies of the source Health Connect records in its tracking database or JSON backups, or upload them to Stormkind Studio.

Separately, Calculate estimate saves your estimator inputs, including an activity level you select, even without Apply. Applied nutrition targets are saved and included in backups. These saved choices are not copies of your Health Connect history. Revoking Health Connect access does not delete source records from Health Connect or remove separately saved estimator inputs and targets.

Health Connect information is not used for advertising, sale, credit decisions or AI training.

5. When information leaves your device

Barcode lookups

When a barcode cannot be resolved locally and you request an online lookup, the app sends it to Open Food Facts over HTTPS with an app-identifying header. The service receives your IP address and ordinary request metadata. No diary, weight, Health Connect records or label photos accompany the request. Queued jobs may retry when connectivity or rate limits allow.

See Open Food Facts privacy information.

Recipe webpages

Submitting a recipe URL makes a direct HTTPS request and may follow HTTPS redirects. The website and redirect recipients receive the requested URL, app-identifying header, IP address and request metadata. URLs themselves may contain personal information. Downloaded recipe content is processed locally; your diary and photos are not sent to the recipe website.

Pasting recipe text does not contact its source website. The websites you choose have their own privacy practices.

Nearby sharing

Nearby uses Bluetooth/Wi-Fi to connect with a partner, not a Stormkind Studio server. Discovery can expose your chosen display name. Pairing exchanges random installation identifiers and trust information.

You choose foods, meals and needed ingredients, or meal-plan slots. Shared content can include names, notes, dates, portions, nutrition, attribution, item identifiers and attached meal photos. Recipients review proposals before applying them. Diary, water and supplement histories, weigh-ins, Health Connect records, label-scan photos and complete backups are not included in these sharing payloads.

Nearby uses an encrypted connection. Recipients can retain accepted content; forgetting a partner does not remotely erase their copies. Android/Google Play services may require nearby-device, Bluetooth, Wi-Fi or location permissions. App code does not record geographic coordinates or location history; Google's technical diagnostics are separate.

Backups and the Android share sheet

You choose where to export a backup through Android's document picker. Backups are plaintext JSON without an app password or separate app encryption. They can contain foods, meals and saved meal photos, diary entries, water, weigh-ins and goal, supplements and history, meal plans and slots, shopping lists and nutrition targets.

Backups exclude scan/import jobs and their images or model output, raw Health Connect records, meal drafts, estimator input preferences and partner credentials. A local recovery copy is created before a confirmed replacement import.

A destination you select may be a cloud provider and may upload the file. Shopping-list text is sent to the share-sheet app or recipient you select. Manage exported files and recipient copies separately; we cannot recall them.

Google technical diagnostics and platform services

The bundled ML Kit barcode scanner documents collection of device/app information, per-installation identifiers, performance, configuration and feature events, input/output sizes and errors for diagnostics and usage analytics. Nearby documents connection performance, device model, country, build and package details.

On-device recognition does not mean these SDKs have no network activity. Nearby diagnostics can be controlled through Android's Google Usage & diagnostics setting, whose location may vary. That setting is not a verified ML Kit diagnostics opt-out, and the app does not offer a universal Google-diagnostics switch.

Android and Google Play may separately process installation, update, on-device model delivery and platform diagnostics information. This is distinct from uploading your diary or photos to us. We have not identified an app-authored analytics uploader, advertising SDK, Firebase Analytics or Crashlytics in the reviewed release dependencies.

See ML Kit data disclosures, Nearby data collection and Google's privacy policy.

Support

If you email stormkindstudio@gmail.com, we receive your email address, message and any attachments or diagnostics you choose to send. Christopher Strydom answers personally. Gmail provides email delivery and storage; it is not an outsourced support team.

We use correspondence to answer requests, investigate reported problems and handle privacy or security matters—not for unsolicited marketing. Please use non-personal reproduction steps where possible and do not send full backups, health details or photos unless necessary. See Google's privacy policy.

Policy webpage

The policy page is hosted through Cloudflare. Loading it sends Cloudflare your IP address and ordinary connection/request information, such as the requested URL and browser headers, to deliver and protect the page. Website processing is separate from records stored in the Android app. See Cloudflare's privacy policy.

6. How information is used

Local information supports the tracking, calculations, scans, reminders, plans and other features you choose. Optional lookups, sharing and exports send the information described above to the relevant destination. Information is not required by law, but a feature may not work without its necessary inputs or permissions.

Android permission controls access to features such as the camera and Health Connect. This policy explains the app's practices; opening it or continuing to use the app is not represented as giving explicit health-data consent. The app does not currently have a separate blanket health-tracking consent checkbox.

For ordinary non-sensitive support correspondence, we rely on our legitimate interests in answering your request, resolving defects and protecting the service. We minimise the information requested and do not use this ground as a blanket permission to solicit sensitive health records. You can object using the contact below. Where a specific legal obligation requires handling a privacy request or retaining particular correspondence, we process only what is necessary for that obligation.

Google, websites you contact and providers or recipients you select process information as described in their applicable notices and terms. Android permission to a feature is not a claim that you have consented to unrelated diagnostics or to every provider's use of information.

7. Retention, deletion and security

Android's app-specific storage and access controls protect local records. MacrOrbit adds no separate password or encryption layer to stored tracking records. Protection depends on your device lock, operating system and chosen providers; no method is completely secure.

• Tracking records remain until you edit/delete them or remove app data. Archiving is not deletion. Diary and meal-plan nutrition snapshots can survive changes to, or deletion of, the source food or meal.
• Scan/import jobs retain inputs, outputs and errors for review or retry until removed. Removal of an active job may wait for processing to stop. Separate caches can remain until app or Android cleanup or app-data removal.
• Meal drafts can retain content and photos until completed or discarded. Removing an app image does not erase an original held by another app.
• Pending transfers and recovery/undo copies may retain previous content. Deleting a current entry does not erase an earlier recovery backup; the recovery copy remains until replaced or app data is removed.
• Android Settings → Apps → MacrOrbit → Storage → Clear storage/data removes the app's local history, drafts, recovery data and downloaded model. Ordinary uninstall removes app-specific data, but archiving or keeping app data is not the same as deletion. Export anything you want to keep first.

Automatic Android cloud backup is disabled and app storage is excluded from Android cloud/device-transfer rules. Device manufacturers and operating-system migration tools can behave differently; this is not a guarantee that no outside copy can exist.

Exported files, partner copies, original photos and Health Connect source records need separate management in their respective apps or services. We cannot remotely erase those copies or recover records held only on your device.

Our support retention schedule is quarterly mailbox review and deletion of resolved threads within six months of resolution, with unnecessary sensitive attachments removed promptly. Necessary correspondence may be retained longer for a documented legal or security hold with a review date. Deletion from the mailbox does not promise immediate erasure from Google's provider backups.

8. International processing

The app is intended for distribution in countries and regions supported by Google Play. Local tracking does not upload your history to a Stormkind Studio server, but external services can process information in other countries, including outside the United Kingdom.

Support email uses Google; the policy webpage uses Cloudflare; SDK/platform processing uses Google services. Their international processing and safeguards are described in Google's transfer-framework information and Cloudflare's privacy policy. These links describe the providers' arrangements, not a promise that every app-related processing activity stays in a particular country.

Recipe destinations, backup storage and sharing recipients depend on your choices and can be located elsewhere. Contact us for information about international safeguards applicable to support correspondence we handle.

9. Your choices and privacy rights

Manual tracking works without camera, Health Connect or Nearby permissions. Android settings let you manage permissions and notifications. Lock-screen notifications may reveal supplement names, sharing details or scan status; adjust visibility to suit your needs.

Depending on your location and the processing involved, you may have rights to access, correct, erase, restrict or receive a portable copy of personal information, object to processing based on legitimate interests, or withdraw consent where processing relies on it. A withdrawal does not undo earlier lawful processing. We do not sell or share personal information for cross-context behavioural advertising.

Contact stormkindstudio@gmail.com to exercise rights concerning information we handle. We may request proportionate information to verify and understand a request; do not send identity documents or health records unless needed. We will respond within the applicable legal time limit.

You can manage local records in the app and export supported tracking records through Settings. Exports omit preferences, scan jobs and drafts. We cannot access records held only on your device, but can explain available controls. Contact other services separately about information they hold.

You may complain to your local privacy regulator. In the UK, you can complain directly to the Information Commissioner's Office, without contacting us first.

10. Age, estimates and medical information

MacrOrbit is intended for adults 18 and over, not children. The automatic estimator uses equations defined for ages 19 and over; 18-year-olds can use other tracking features and set manual targets. This statement is not a claim that the entire app verifies users' ages.

AI and calculations suggest nutrition values and targets for your review. They do not make decisions with legal or similarly significant effects, and may be wrong. MacrOrbit is not a medical device and does not provide diagnosis or treatment. Seek qualified professional advice for medical or dietary concerns.

11. Changes and contact

We will update this policy and its version when practices change. A policy update alone does not replace any notice or consent required for a new use of information.

Publisher: Christopher Strydom, trading as Stormkind Studio, United Kingdom

Privacy and support: stormkindstudio@gmail.com

Current policy: https://macrorbit.stormkind.dev/app/privacy