Privacy Policy

Effective Date: July 6, 2026 · Last Updated: July 6, 2026

MakeWeight ("we," "us," or "the App") is operated by LabCabin LLC (New Jersey, USA) and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS and watchOS application.

By using MakeWeight, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

When you use MakeWeight, you may voluntarily provide:

1.2 Information from Apple Services

1.3 Information We Do NOT Collect

2. How We Use Your Information

We use your information exclusively to:

3. Data Sent to Third Parties

We do not sell, trade, rent, or share your personal information with advertisers, data brokers, or marketing partners. Period.

The App communicates with only three external services:

3.1 Anthropic (Claude AI)

When you use AI features (Coach chat, meal plan generation, meal photo logging), the App sends relevant data to Anthropic's API (api.anthropic.com) to generate responses. This may include:

Anthropic's data policy: Data sent via Anthropic's API is not used to train their AI models unless you explicitly opt in. Anthropic may retain API inputs and outputs for up to 30 days for safety and abuse monitoring, after which they are deleted. See Anthropic's Privacy Policy for details.

3.2 FatSecret Platform API

When you search for foods or scan a barcode, the App sends your search query or barcode number to the FatSecret Platform API (platform.fatsecret.com). Only the search text or barcode is sent; no personal information is included. See FatSecret's Privacy Policy for details.

3.3 USDA FoodData Central

As a fallback, the App may send food search queries to the USDA FoodData Central API (api.nal.usda.gov), a free public service operated by the U.S. Department of Agriculture. Only the search text is sent; no personal information is included.

3.4 Apple Services

Standard Apple services are used as described in Section 1.2. Apple's use of your data is governed by Apple's Privacy Policy.

4. Data Storage and Security

4.1 Local-Only Storage

All your data is stored locally on your device using Apple's SwiftData framework. We do not operate cloud servers or databases. Your data does not leave your device except when you actively use AI features (Section 3.1) or food search (Section 3.2).

No cloud sync: In compliance with Apple Guideline 5.1.3(ii), health-related data is not synced to iCloud or any cloud service. Your data is preserved through standard iOS backup and restore.

4.2 Security Measures

4.3 Data Retention

5. HealthKit Data

MakeWeight integrates with Apple HealthKit to provide a seamless experience. We want to be explicit about how this data is handled:

6. Children's Privacy

6.1 Age Requirements

MakeWeight requires users to be at least 13 years old. Users under 13 are blocked during profile setup in compliance with COPPA (Children's Online Privacy Protection Act). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. A parent or guardian who believes their child under 13 has provided us with personal information may contact us at privacy@makeweight.io and we will delete it.

6.2 Users Under 18

For users aged 13–17, we recommend:

6.3 Protections for Minors

For all users identified as under 18:

7. Your Rights and Choices

7.1 Access and Export

7.2 Correction and Deletion

7.3 Opt-Out Options

8. Health Information Notice

8.1 Sensitive Data

We recognize that health and body measurement data is deeply personal and sensitive. We:

8.2 Not a Medical Service

MakeWeight is NOT a medical device, healthcare service, or healthcare provider. We:

9. International Users

9.1 Data Transfers

If you use AI features, your data may be transferred to and processed in the United States, where Anthropic's servers are located. By using these features, you consent to this transfer.

9.2 EU/UK Users (GDPR)

The data controller is LabCabin LLC (contact: privacy@makeweight.io). If you are in the EU or UK, you have the rights of access, rectification, erasure ("right to be forgotten"), data portability, restriction of processing, and objection. Our legal bases are performance of the service you request (Art. 6(1)(b)) and, for special-category health data and its transfer to Anthropic in the US, your explicit consent (Art. 9(2)(a) and Art. 49(1)(a)), given via the in-app AI-data consent screen (and, for users 13–17, with parental review). You may withdraw consent at any time by not using AI features and deleting your data in-app.

9.3 California Users (CCPA)

If you are a California resident, you have the right to know what personal information is collected, request deletion, and opt out of any sale of personal information. We do not sell personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

Your continued use of MakeWeight after changes constitutes acceptance of the updated policy.

11. Contact Us

MakeWeight is operated by LabCabin LLC (New Jersey, USA; postal address available on request). Data controller: LabCabin LLC.

12. Summary of Data Practices

Data Category Stored Sent Externally Sold
Identity (name, DOB, sex) On device only Anthropic (AI features) Never
Body measurements On device only Anthropic (AI features) Never
Weight & health logs On device only Anthropic (AI features) Never
Food & nutrition data On device only Anthropic (AI features) Never
AI conversations On device only Anthropic (to generate responses) Never
Meal photos Not retained after logging Anthropic (food recognition) Never
Progress photos On device only Never (stays on your device) Never
HealthKit data On device only Anthropic (AI features only) Never
Food search queries Cached on device FatSecret (primary), USDA (fallback) Never
Barcode scans Not stored FatSecret (lookup only) Never
Payment info Not stored (Apple handles) Never (Apple handles) Never
Device IDs / analytics Not collected Not collected Never