// DATA HANDLING

Privacy
Policy.

What we collect, what we don't, where it lives, and how to delete it. In plain language, no dark patterns.

Effective 2 SEP 2026 · V. 1.1

Overview

Mitches Macros ("the app," "we," "us," "our") is developed and operated by Romeoz Apps. This Privacy Policy explains what information the app collects when you use it, how we use that information, how we protect it, and what control you have over it.

We built Mitches Macros to help cadets hit their macros and pass their fitness tests — not to harvest data. We don't sell your information. We don't share it with advertisers. We don't use it to train AI models. We don't track you across the internet. There are no third-party analytics SDKs embedded in the app.

By creating an account and using the app, you agree to the practices described here. If you don't agree, please don't use the app.

What We Collect

We collect only the information needed to make the app work. Specifically:

  • Account data Username, email address, and a hashed password. Used to authenticate you and sync your data across devices.
  • Profile data Age, gender, height, weight, activity level, dietary goal, and macro targets (calories, protein, carbs, fat). Used to compute recommendations and optimize plates.
  • Food log Items you log as eaten, including timestamps, serving sizes, and estimated macros. Used to track daily intake and historical trends.
  • Workout log Activities you log, durations, optional notes, and calorie estimates. Used to compute daily burn and eat-back suggestions.
  • Readiness entries Daily weight, sleep hours, a 1–10 subjective feeling score, and optional body fat percentage you type in. Used for trends.
  • PFT/AFT inputs Test-event values (pull-ups, sit-ups, push-ups, long jump, 600-yard, 1.5-mile, gender toggle) you enter into the scorer. Used to compute scores locally on your device.
  • Preferences Banned foods, custom items, personal stash, and app settings. Used to personalize the optimizer and UI.

That's the full list. If we ever add anything, we'll update this page and note it in-app.

What We Don't Collect

Just as important as what we collect is what we don't:

  • Location We never request or store GPS, city, country, or IP-based location.
  • Contacts The app does not access your address book.
  • Photos The app does not read your photo library. Barcode scanning uses the camera only while the scanner is open, and images are never saved.
  • Advertising IDs No IDFA, no IDFV tracking, no fingerprinting.
  • Third-party analytics No Firebase, Google Analytics, Mixpanel, Amplitude, or similar. None.
  • Crash reporting SDKs No Crashlytics or Sentry sending data to third parties.
  • USAFA credentials We don't ask for and cannot receive your CAC, military ID, USAFA Portal password, or any government authentication data.
  • Social identity We don't connect to Facebook, Google, Apple Sign-In, or any OAuth provider.

Health & Fitness Data

With your explicit permission, Mitches Macros connects to Health Connect on Android and HealthKit on iOS. This is optional: the app is fully usable without it, and you can revoke access at any time in your device's Health Connect or Health settings.

What we read

  • Heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, VO2 max Shown on the Logging screen as your morning readiness vitals so you can see recovery alongside intake.
  • Sleep Displayed with your daily log and used in the rolling 7-day averages on Trends.
  • Steps, active calories, basal metabolic rate Used to estimate your total daily energy expenditure, which drives burn-based eat-back suggestions.
  • Body weight and body fat Pre-fills your morning metrics so you don't retype what your scale already recorded.
  • Exercise sessions Lets you import a workout your watch recorded — including its calorie burn — into the app's workout log instead of re-entering it.

What we write

  • Nutrition When you log a food item, its calories, protein, carbohydrates and fat are written to Health Connect or HealthKit so your other health apps see a complete picture.

How health data is handled

  • Health data you import is stored in your own account on our server, transmitted only over encrypted connections, and shown only to you.
  • It is never sold, never shared with third parties, and never used for advertising.
  • Deleting your account removes it. Revoking Health Connect or HealthKit access stops any further reads or writes immediately.
  • We do not use health data to make automated decisions about you beyond the nutrition suggestions displayed in the app.

How We Use Your Data

Your data is used only to provide the app's core features:

  • Authenticating you when you log in
  • Syncing your log across devices you sign into
  • Generating optimized plates from the Mitches menu feed
  • Calculating macro targets, eat-back suggestions, and PFT/AFT scores
  • Producing 28-day trend charts and CSV exports you request
  • Sending operational emails tied to your account (password reset, account deletion confirmation)

We do not use your data for:

  • Advertising, marketing, or retargeting
  • Sale or rental to third parties
  • Training machine learning models
  • Sharing with USAFA, the Air Force, or any military or government entity
  • Profile building or behavioral tracking

Storage & Security

Your data is stored on servers operated by Romeoz Apps in the United States. We take reasonable measures to protect it:

  • All communication between the app and the server is over HTTPS/TLS.
  • Passwords are hashed with bcrypt — we never store or see plain-text passwords, and we cannot recover a forgotten password (we can only issue a reset token).
  • Database access is restricted to the application layer with authentication tokens.
  • Servers are patched regularly and run with minimal exposed ports.

No system is perfectly secure. In the unlikely event of a data breach that affects you, we will notify you by email within a reasonable timeframe and post a notice on this site.

Your Rights

You have full control over your data:

Access

Everything the app stores about you is visible inside the app — your profile, log, trends, workouts, and settings. If you want a raw export, email us and we'll send you a JSON dump of your account.

Correction

You can edit any of your data directly in the app — profile values, log entries, targets, readiness. Changes sync immediately.

Deletion

You can delete your account and all associated data at any time by emailing [email protected] from the address on file. We will confirm and permanently delete your account, log history, workouts, and all associated records within 14 days. Once deleted, data cannot be recovered.

Portability

The in-app "Download workouts CSV" and "Download summary text" features let you export a 28-day history at any time. For a full export beyond 28 days, email support.

Children's Privacy

Mitches Macros is intended for users aged 13 and older. USAFA cadets are adults, so this is not a typical concern for our core audience, but we state it explicitly for compliance with COPPA.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please email us and we will delete it.

Third Parties

The app itself contains no third-party SDKs that collect data. However, a few narrow external services are used:

Apple App Store & Google Play

The app is distributed through Apple's App Store. Apple collects its own data about downloads and crashes per its own privacy policy — we have no control over and no visibility into that data beyond anonymized aggregate metrics in App Store Connect.

Open Food Facts (barcode lookups)

When you scan a product barcode, the barcode number is sent to a product database to retrieve nutrition facts. The scan request does not include your account info. No personal data is attached.

Mitchell Hall menu feed

Menu data is fetched from a public USAFA dining feed. These requests are made by our server, not your device, so your identity is not exposed to the menu source.

If we ever need to add a new third-party service, this policy will be updated before the feature ships.

Policy Changes

If we make material changes to this policy — adding data collection, changing how we use data, or adding a third-party service — we will:

  • Update the Effective Date at the top of this page
  • Post a summary of what changed
  • Notify active users via an in-app message on next launch

Minor edits (typo fixes, clarifications that don't change meaning) may be made without notice.

Contact

Questions, deletion requests, or privacy concerns:

We reply to every message within one business day.