Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and, optionally, your full name, date of birth, gender, body weight, height, and a profile photo. This information is stored in Supabase, our database and authentication provider.

Strava Activity Data

If you connect your Strava account, we access your activity data via the Strava OAuth API. This includes activity type, duration, distance, average heart rate, and estimated calorie burn. We use this data to calculate your daily TDEE and personalise your macro targets. We do not access your private notes, saved routes, or social activity on Strava. You can disconnect Strava at any time from your account settings.

Meal and Nutrition Data

We store the meals you log, including food items, portion sizes, and macro data. This is used to track your daily nutrition and provide personalised AI recommendations.

AI Interaction Data

When you interact with the Jonno Agent, your messages and our responses are processed via the Anthropic Claude API. Anthropic processes this data to generate responses. According to Anthropic's API terms, content sent via the API is not used to train their models by default. Please review Anthropic's Privacy Policy for full details.

Uber Eats / Delivery Data

When you use the Uber Eats cart builder, we access restaurant menu data and availability via the Uber Direct API. We do not store your Uber account credentials, payment information, or order history. Cart data is transient and used only to facilitate the meal recommendation. Review Uber's Privacy Policy for their data practices.

Usage Data

We collect anonymised usage data (page visits, feature usage, error logs) via Vercel Analytics to improve the product. This data is not personally identifiable and is not sold to third parties.

2. How We Use Your Information

• •Provide and improve the Jonno service
• •Calculate personalised macro and calorie targets from your training data
• •Power the Jonno Agent AI with context about your nutrition and training
• •Build macro-matched Uber Eats carts on your behalf
• •Send transactional emails (account confirmation, password reset)
• •Analyse aggregate usage patterns to improve the product (anonymised only)

We do not sell your personal data to third parties. We do not use your health or nutrition data for advertising.

3. Data Storage and Security

Your data is stored in Supabase (PostgreSQL database hosted on AWS). Supabase implements encryption at rest and in transit (TLS 1.2+), row-level security (RLS) policies, and SOC 2 Type II compliance. Your data is only accessible to you and cannot be read by other users.

Profile photos are stored in Supabase Storage with public URL access for display, but no user can enumerate or access another user's avatar. API keys for Strava, Uber, and Anthropic are stored as environment variables and are never exposed client-side.

4. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• •Access: Request a copy of your personal data
• •Correction: Update or correct inaccurate data in your profile
• •Deletion: Request deletion of your account and all associated data
• •Portability: Export your data in machine-readable format
• •Disconnection: Revoke Strava or other third-party connections at any time

To exercise these rights, email us at privacy@macroclawagent.com. We will respond within 30 days.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we permanently delete all associated personal data within 30 days. Anonymised aggregate data (usage statistics) may be retained indefinitely.

6. Third-Party Services

Jonno integrates with the following third-party services. Each has its own privacy policy:

• •Strava: Activity and health data — strava.com/legal/privacy
• •Uber: Delivery and restaurant data — uber.com/legal/privacy
• •Anthropic: AI processing — anthropic.com/legal/privacy
• •Supabase: Database and auth — supabase.com/privacy
• •Vercel: Hosting and analytics — vercel.com/legal/privacy-policy

7. Children's Privacy

Jonno is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@macroclawagent.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) or by a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.