Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal information is:

• Legal Name: Horváth Péter EV
• Address: 6771 Szeged, Szerb utca 84/B, Hungary
• Tax ID: 68834461-1-26
• EU VAT Number: HU68834461
• Contact Email: info@linecraft.io

2. Personal Data We Collect

When you register and use Macrolizer, we collect and process the following categories of data:

• Account Data: full name, email address, cryptographic password hash, email verification status, and account creation date.
• Profile and Body Composition Data (Health data under GDPR Article 9): biological sex, date of birth, height, activity level, target weight, target body fat percentage, and historical weight/body-fat logs.
• Measurements sent from Apple Health by the iOS app: weight, body fat percentage, daily step count, workouts (type, duration, and when present, energy burned and distance), sleep duration and sleep stages, resting heart rate, and heart rate variability (HRV, SDNN), with the time of the measurement or interval. We do not receive the full Apple Health database. Revoking the sync key does not delete measurements already stored.
• Meal and Nutrition Diary Data: timestamps of logged meals, consumed foods, ingredient quantities, recipe details, and custom meal entries.
• Security and Technical Log Data: successful login timestamps, IP address, and User-Agent string to monitor account integrity and prevent unauthorized access.
• Interface Preferences: selected display theme, language, and market/currency settings.

3. Legal Basis and Purposes of Processing

We process your data strictly under valid legal bases set out by GDPR:

• Provision of the service (GDPR Art. 6(1)(b) - Performance of a contract): creating and maintaining your account, authentication, saving, calculating, and displaying meal logs.
• Health and body measurement data (GDPR Art. 9(2)(a) - Explicit consent): you explicitly grant consent by entering your physical metrics and goals in the profile and metric loggers.
• Apple Health sync (GDPR Art. 9(2)(a) - Explicit consent): creating a sync key and sending data from the iOS app means the selected measurements may be stored on Macrolizer's servers.
• Security and fraud prevention (GDPR Art. 6(1)(f) - Legitimate interests): logging authentication timestamps, IP addresses, and user agents to safeguard systems and detect suspicious activity.
• User preferences and functional cookies (GDPR Art. 6(1)(a) - Consent): saving language and theme preferences when you accept preference cookies in the cookie banner.

4. Third-Party Processors

We partner with reputable cloud infrastructure providers to operate the service securely. These processors act strictly under our instructions:

• Neon Inc. (Serverless PostgreSQL Database): encrypted storage of user accounts, nutrition logs, and profiles.
• Resend Inc. (Transactional Email): delivery of account verification and password reset emails.
• Vercel Inc. (Application Hosting and Cookie-Free Web Analytics): serving application assets and privacy-friendly, anonymized traffic analytics.

5. International Data Transfers

Some service providers (Vercel, Neon, Resend) operate infrastructure or servers located outside the European Economic Area (EEA), including in the United States.

All international transfers are safeguarded through standard contractual clauses (SCCs) approved by the European Commission, as well as the EU-U.S. Data Privacy Framework.

6. Data Retention

Account and meal diary information is retained for as long as your account remains active. If you delete your account, your personal details, profile metrics, and logs are permanently removed.

Security login records (IP address and user agent) are retained for up to 90 days for forensic audit purposes, after which they are deleted or anonymized.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain confirmation and a copy of the personal data held about you.
• Right to rectification: correct inaccurate or incomplete profile data directly in the app or by request.
• Right to erasure ('right to be forgotten'): request the permanent deletion of your account and related records.
• Right to restriction of processing and right to object to processing based on legitimate interests.
• Right to data portability: request a structured, commonly used machine-readable export of your data.
• Right to withdraw consent: withdraw previously granted consent (such as preference cookies or optional metrics) at any time.

8. Inquiries and Supervisory Authority

To exercise any of your rights or ask questions regarding your privacy, contact us at info@linecraft.io.

You also have the right to lodge a complaint with a data protection supervisory authority. In Hungary, the competent authority is the National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., www.naih.hu).