Privacy

Privacy Policy

Last updated: June 17, 2026

Mycro is built around honest numbers, and the same applies to how we handle your data. This policy covers trymycro.com (the "Site") and the Mycro mobile application (the "App"). By using either, you agree to this policy.

1. Who we are

"Mycro," "we," "us," and "our" refer to Momentum Loop LLC, the operator of Mycro, reachable at hello@trymycro.com. This policy applies to the Site and the App.

Mycro is operated from the United States. If you access the Site or App from outside the U.S., you understand that your information may be processed in the U.S., where data protection laws may differ from those in your country.

2. Mycro is a wellness app, not a healthcare provider

Mycro is a consumer wellness and weight-tracking app. We are not a healthcare provider, health plan, or healthcare clearinghouse, and we do not provide medical services. The information you log in Mycro is not "Protected Health Information" (PHI) under HIPAA, and we are not a HIPAA-covered entity or business associate. We treat the information you give us as personal data under general consumer-privacy laws (such as the CCPA/CPRA and GDPR), with the additional safeguards described in this policy.

If you are using Mycro in connection with care from a doctor, dietitian, or other healthcare professional, that professional's privacy obligations to you are governed by their own policies, not by this one.

3. What we collect

On the Site

• Email address — only if you submit the "Notify me" form. We use this to send a launch notification and, if you opt in, occasional product updates.
• Messages you send us — if you email hello@trymycro.com, we'll have a record of that message and your address.
• Anonymous analytics — we may use a privacy-respecting analytics tool to count visits and measure which pages perform. Where supported, IP addresses are anonymized.
• Server logs — our website hosting provider records standard request logs (IP, user agent) for security and reliability.

In the App — information you provide

• Account information — email address and password (we never see your password in plaintext).
• Profile — name, age, biological sex (used for calorie math), height, current and goal weight, activity level, and your daily calorie target.
• Weight logs — every weigh-in you record, with timestamp.
• Food logs — descriptions you type, optional photos you upload, and any notes.
• Coach interactions — messages you send to the AI coach.
• Settings — notification preferences, theme, weight unit, time zone.
• Subscription state — whether your subscription is active or in trial. We don't see your payment card; Apple handles billing.
• Apple Health (optional, iOS only) — if you connect Apple Health, we read body-weight samples and energy expenditure (active and resting) averages you authorize. We do not write to Apple Health. You can revoke access in iOS Settings → Health at any time.

In the App — information collected automatically

• Device and app information — app version, OS version, device model, time zone, locale, and basic diagnostic data.
• Usage events — which screens you visit and which features you use, used to understand the product and detect bugs.
• Crash reports — when something errors or crashes, we capture a stack trace and basic device context to fix it.

iOS permissions we request

To support specific features, the App asks iOS for permission to access:

• Camera — to take a meal photo when you log a meal.
• Photo library — to attach an existing photo when you log a meal.
• Microphone — only while you actively use voice input.
• Speech recognition — to transcribe what you say when you use voice input. Apple processes the audio and returns text; depending on your device and language, this may happen on-device or on Apple's servers.
• Notifications — to send the weigh-in nudges, daily wraps, and weekly summaries you opt into.
• Apple Health — see the Apple Health entry above; this is read-only and optional.

You can revoke any of these permissions in iOS Settings at any time. The App will keep working without them; features that need a permission will be unavailable until you grant it.

What we do NOT collect

• We do not access your contacts, location, or other apps on your device.
• We do not collect data for advertising, and we do not use your data to train AI models.
• We do not track you across other apps or websites for advertising. The App does not request the iOS App Tracking Transparency prompt because we don't use the IDFA.
• We do not knowingly collect "sensitive personal information" beyond what you give us (your weight and meals). We do not collect biometric identifiers, government IDs, or precise geolocation.

4. How we use your information

• Provide the service — show your weight trend, calorie progress, food history, coach replies, and notifications.
• AI calorie estimation and coaching — when you log a meal with a photo or description, or send a message to the coach, we send that content to a third-party AI service — Anthropic's Claude AI, hosted on Amazon Web Services (AWS Bedrock) — processed entirely within our U.S. cloud infrastructure, to estimate calories and generate coaching. Inputs stay within that infrastructure; they are not sent to Anthropic's own systems and are not used to train any AI model. This AI-assisted estimation and coaching is core to how Mycro works — it is not an optional add-on — so using the App necessarily involves this processing. We show you a plain-language notice describing it before any data is sent. If you would rather not have your data processed this way, you can sign out or delete your account at any time.
• Send notifications — weigh-in nudges, daily wraps, and weekly trend summaries — only the ones you've opted into.
• Improve the product — aggregated usage analytics and crash reports help us find and fix bugs and prioritize features.
• Understand what's working and improve the coach — we analyze the content you create in the App, including your coach conversations and your food and weight logs, to learn what people find helpful or frustrating, improve the quality of the AI coach, and decide what to build next. We do this to produce de-identified, aggregate insight — counts, themes, and summaries with no path back to you as an individual. See "Analyzing your content to improve Mycro" below for how we do this and the limits we hold ourselves to.
• Process subscriptions — confirm your entitlement to paid features. Billing is handled by Apple; we receive a status flag from our subscription-management provider indicating whether your subscription is active.
• Detect, prevent, and address abuse, spam, and security issues.
• Respond to messages you send us at hello@trymycro.com.
• Comply with legal obligations.

Our legal bases under GDPR, where applicable, are: performing the contract you accept by creating an account — which includes the AI-assisted calorie estimation and coaching that are core to the service; legitimate interests in operating, securing, and improving the service — including the de-identified analysis described just below; consent for optional notifications and marketing emails; and compliance with legal obligations. Because the AI-assisted features are integral to the App, we rely on contractual necessity rather than consent for that core processing — your control is to use the App or to leave it (sign out or delete your account), not to use it with the AI features switched off.

Analyzing your content to improve Mycro

Producing "anonymous" insight from your data is really two steps, and we want to be precise about both rather than wave at the word "anonymous."

First, we process identifiable records internally. Your coach conversations and your food and weight logs are free text and can contain personal or sensitive detail. To learn anything useful from them, our pipeline first reads the real records — there is no way around that, so we disclose it here plainly instead of burying it.

Second, we de-identify within the pipeline and keep only aggregate output. Before anything is summarized or saved as insight, we strip and redact direct identifiers — names, contact details, and other personal specifics — so that what comes out the other side is counts, themes, and cohort summaries with no path back to any individual. We do not publish or export raw transcripts, and our internal summaries do not reproduce quotes that could identify you.

These outputs exist only to guide our own product decisions. They are never shown to you or other users, never used to build a profile that is applied back to you, never used for advertising, and never sold or shared for anyone else's marketing.

We do not use your content to train AI models. The analysis above is a model reading and summarizing your data to help us — not learning from it to change its own behavior. If we ever decide to use your content to train or fine-tune a model, we will tell you and ask for your consent before we do.

5. AI features — important disclaimer

The calorie estimates and coaching lines that Mycro produces are generated by an AI model and are approximations, not medical or nutritional advice. Real-world accuracy varies based on photo quality, portion ambiguity, recipe complexity, and the limits of any vision model. Don't rely on Mycro for medical decisions.

6. Where your data is stored

All App data is stored in the United States with our cloud infrastructure provider. Data is encrypted at rest with provider-managed keys and in transit with TLS 1.2 or higher.

7. Service providers we share with

We use a small set of trusted vendors to operate Mycro. None of these vendors sell your data or use it for advertising.

We may also disclose information when required by law (subpoena, court order, lawful government request), to enforce our terms, or to protect the rights, property, or safety of Mycro, our users, or the public. If Mycro is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction; we'll notify you and give you a meaningful chance to delete your account before any change in how your data is handled.

8. Cookies and similar technologies

The Site uses a small number of cookies or similar technologies, primarily for analytics. The App does not use cookies, but the SDKs above store identifiers locally on your device. You can block cookies in your browser; the Site will still work. If we ever introduce cookies that require consent in your region, we'll show a consent banner.

9. How long we keep your data

• Active accounts: we keep your data for as long as your account is open, so your historical trend stays intact.
• Meal photos: kept for the life of your account. If a photo is overwritten or deleted, older versions roll off within 30 days.
• Usage telemetry and AI cost events: retained for 90 days, then deleted automatically.
• Backups: rolling backups are retained for up to 35 days.
• Site email signups: kept until launch notifications are sent, plus a reasonable period afterward, or until you ask us to delete them.
• Support emails: kept as long as needed to handle your request and for our records.

10. Deleting your account

You can delete your account at any time from Profile → Delete account inside the App. Deletion is immediate and permanent, and removes:

• Your authentication record (you can sign up again later with the same email).
• Every record of your data across our databases (profile, weight logs, food logs, coach history, settings, telemetry).
• Every meal photo you've uploaded.

Backup snapshots that may still contain your data roll off within 35 days, after which no copy of your account remains.

Subscription cancellation is separate from account deletion — manage your subscription in Settings → [your name] → Subscriptions on your Apple device. We do not have the ability to cancel an Apple subscription on your behalf.

11. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy.
• Correct inaccurate information.
• Delete your account and data (use the in-App deletion path above, or email us).
• Port your data to another service.
• Opt out of certain processing (notifications, marketing emails, optional analytics).
• Object to or restrict processing in certain circumstances (GDPR).
• Withdraw consent you've previously given, without affecting the lawfulness of prior processing.

To exercise any of these rights, email hello@trymycro.com. We'll respond within 30 days (or sooner where the law requires). We won't discriminate or retaliate against you for exercising your rights. Note that some processing is necessary to provide the App — including the AI-assisted estimation and coaching described in Section 4 — so if you object to or restrict that core processing, the way to act on it is to stop using the App (sign out or delete your account), not to keep using it with those features switched off.

California (CCPA/CPRA) residents

California residents have the rights above and additional rights under the CCPA/CPRA, including the right to know the categories of personal information we collect, the right to limit the use of "sensitive personal information," and the right not to be subject to discrimination for exercising your rights. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under California law. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out request to the extent we engage in any "sale" or "sharing" subject to that signal.

EU, UK, EEA, and Switzerland residents

You have rights under the GDPR / UK GDPR, including the right to lodge a complaint with your local data protection authority. We process your data based on the legal grounds listed in Section 4 above. International transfers to the United States are made under appropriate safeguards, including the EU Standard Contractual Clauses, where applicable to our service providers.

Other U.S. state laws

If you live in a U.S. state with a comprehensive privacy law (e.g., Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana), you have rights similar to those described above, including the right to access, delete, correct, and opt out of certain processing. Email hello@trymycro.com to exercise any of them.

12. Children

The Site and App are not directed at children under 13 (or under 16 in the EU/UK), and we do not knowingly collect personal information from anyone in those age groups. If you believe a child has provided us their information, email hello@trymycro.com and we will delete the account.

13. Security

We use industry-standard practices: encryption in transit and at rest, scoped access controls, authenticated APIs, routine backups with point-in-time recovery, and automated monitoring with alerting on anomalies. No system is perfectly secure, but we take this seriously and will notify you in accordance with applicable law if we discover a breach affecting your data.

14. Automated decision-making

The AI calorie estimates and coaching lines we produce are automated. They do not produce legal or similarly significant effects about you. You can ignore any AI output and edit your logged calories manually. Because AI-assisted estimation and coaching are integral to the App, using Mycro requires this processing; if you prefer not to have your data processed this way, you can sign out or delete your account at any time.

15. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date above. For material changes — for example, adding a new category of data we collect, a new vendor that materially changes how data is processed, or a new commercial use of your data — we'll notify you in-App or by email at least 7 days before the changes take effect, where reasonably practicable. Continued use of the Site or App after the effective date means you accept the updated policy.

16. Contact

Questions, requests, or concerns about your data?

• Email: hello@trymycro.com
• Mail: Momentum Loop LLC, c/o the address listed in the App Store privacy contact.