SmacrosPrivacy policy
Effective 20 October 2026
Smacros is operated by Zeb Dropkin ("we", "us"). Smacros keeps a record of what you eat and what you weigh, so it holds personal information that many people consider sensitive. This page says what we hold, why, who else touches it, and how you take it out or destroy it.
1. What we hold
- Your sign-in identity. The email address of the Google account you sign in with. Google confirms who you are; we never see or store a password.
- Your record. Everything you log: meals, foods, quantities, nutrition figures, the times you ate, your weight, your targets, and which days you marked complete. If you tell Claude your height, birth year, sex and how active you are, the record keeps them to estimate your expenditure. When Claude logs a meal from a photo you showed it, the record keeps Claude's short description of what it saw. The photo itself never reaches us.
- Your timezone, so a meal lands on the right day.
- A notification address, only if you turn reminders on: the address your browser gives us for delivering them.
- Subscription state, once you subscribe: your plan, its dates and a customer reference from the payment provider. We never see or store your card.
- Technical records. Which tool was called, when, and whether it worked, never what was in it. Errors. Counts of database use. If someone tries to sign in with an address that has no account, we record that address and the time, so that "I signed in with the wrong Google account" can be diagnosed.
2. What we do not do
We do not sell your information, share it for advertising, or use it to train anything. The dashboard carries no advertising, no analytics scripts and no third-party trackers. It sets one cookie, which keeps you signed in for up to 90 days since your last visit.
3. Claude and Anthropic
You log by talking to Claude, which is a product of Anthropic and not of ours. What you say to Claude is between you and Anthropic, under Anthropic's terms and privacy policy. Smacros receives only the requests Claude makes to it on your behalf, and answers them. Claude reads your record only when a conversation of yours asks for it. We send nothing to Anthropic on our own.
4. Companies that help us run Smacros
- Cloudflare hosts the service and stores your record (database and file storage), including a second copy kept so that a fault cannot lose it.
- Google confirms your identity at sign-in.
- Resend sends our email, so it handles your address and the message whenever we email you.
- Stripe and Link. Payments are sold through Link, a Stripe service, which is the seller of record. Link collects your payment details, charges your card, handles tax and sends your receipts under its own privacy policy. We receive your plan, its dates and a customer reference.
- Your browser's notification service (run by Apple, Google or Mozilla, depending on the browser) delivers a reminder if you turned reminders on. A reminder never contains what you ate.
Your record is stored on Cloudflare's infrastructure, currently in the Asia-Pacific region, and may be processed in other countries, including the United States.
5. Who can see your record
You, and Claude when you ask it to. The operator can reach the database in order to run and repair the service, and looks at an individual record only to fix a problem you reported or to investigate a fault.
6. How long we keep it
- Your record is kept while you have access, and after your access ends it is kept for six months if you never paid for a subscription and for two years if you paid at least once. In that time it stays readable and exportable, and subscribing again keeps all of it. 30 days before it is deleted we email you, with a link to download your data and a link to subscribe again and continue tracking. You can delete your account yourself at any time.
- When you delete your account there is a seven-day window in which you can change your mind. After it, your record, the second copy, your sign-in link and your subscription state are destroyed. This cannot be undone.
- Error records are kept for 14 days. Tool-call records and database-use counts are kept for 90 days.
7. Your choices
- Take everything out. In the dashboard, open the menu, then Account, then Download my data. You get the complete record, in the same form we store it.
- Destroy everything. Same place, Delete my account.
- Correct anything. Tell Claude what to change; every entry can be revised or removed.
- Turn reminders off in the dashboard menu.
Depending on where you live, the law may give you further rights over your information, such as access, correction, deletion, and objection. The controls above cover most of them directly; for anything else, write to support@smacros.app and we will answer within 30 days.
8. Children
Smacros is for adults. It is not directed at anyone under 18, and we do not knowingly hold a record for anyone under 18. If you believe we do, write to support@smacros.app and we will delete it.
9. Security
All traffic is encrypted in transit. Every request is tied to one account and can reach only that account's record. We store no passwords. No system is perfectly secure; if a breach ever affects your record, we will tell you.
10. Changes
If this policy changes, the new version is posted here with a new effective date. If the change is material, we will tell you in the dashboard or by email before it takes effect.