TableMacros, by Montgomery Appworks LLC 9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159 [email protected]
Effective: October 26, 2026
This policy explains how we handle consumer health data under Washington's My Health My Data Act and similar laws in Nevada and Connecticut. It adds to our Privacy Policy.
Educational, not medical advice.
1. Categories of consumer health data we collect, and why
GLP-1 Dining Mode
GLP-1 Dining Mode is an optional feature. It is not available in this version of the app.
When you turn it on, GLP-1 answers are saved on this device; we keep it on your device only.
If you answer Yes, we save your answer and the details you enter on this device; if you answer No, we don't save anything. Show GLP-1-friendly restaurant picks, your meter, and reminders you choose; we keep it on your device only.
GLP-1 Dining Mode information stays on this device. We do not send it to our servers, to Supabase, or to a coach.
We do not send GLP-1 data to our servers, Supabase, a coach, RevenueCat, Stripe, or analytics.
Body measurements
Examples
Weight, weigh-ins, height, age, sex, activity level, and goal weight.
Why
Calculate calorie and macro targets and show progress.
Where it goes
These stay on your device. If you sign in, your profile and weigh-ins sync to Supabase so you can use them on your other devices. A coach cannot see weigh-ins or these body details.
Food and nutrition
Examples
Your food log (calories, protein, carbs, fat, and sodium or fiber when the item includes them), restaurant orders, calorie and macro goals, an optional sodium cap (none, 1500 mg, or 2300 mg), and diet filters you turn on: gluten-free, dairy-free, nut-free, vegetarian, vegan, keto / low-carb, low sodium, and heart-healthy.
Why
Track meals and find menu items that fit your goals.
Where it goes
This stays on your device. If you sign in, your food log, goals, sodium cap, and diet filters sync to Supabase. A photo you attach only to a home-meal log stays on this device and is left out of that sync.
Meal photos you submit for an estimate
If you tap Estimate on a photo of a meal and allow it, we send a smaller copy of that photo, plus any meal or restaurant name and ingredients you type, to our server and then to OpenAI. We do not store the photo. OpenAI's API data controls say that, by default, abuse-monitoring logs may keep API inputs and outputs for up to 30 days, unless the law or protecting the service requires longer, and that API data is not used to train models unless the account opts in. We do not send your account email or your location with it. You can turn this off in Settings, under AI photo estimates.
Information shared with a coach you link
This happens only after you enter that coach's invite code and confirm that you are 18 or older and that you agree. The coach can see each restaurant order's meal name, restaurant, calories, protein, carbs, and fat, and your daily calorie, protein, carbohydrate, and fat totals. Home meals count toward those totals. The coach does not get an itemized home-meal list or any photo.
GLP-1 information is never shared with a coach.
You can stop this in the app: Goals, then Account, then Coach, then Unlink coach.
We use consumer health data only for the purposes above. We do not sell it, and we do not use it for advertising. Educational, not medical advice.
2. Sources
We collect consumer health data only from you, through what you enter or submit in the app. We do not buy it.
3. Consumer health data we share, and with whom
Supabase hosts the database, account, and sign-in. When you are signed in, that includes your profile, weigh-ins, goals, and food log. It does not include GLP-1 answers.
Cloudflare hosts the app and the API, and stores optional reminder subscriptions. A reminder record does not include your name, email, location, or food log.
OpenAI receives a meal-photo estimate only when you submit a photo. We do not store the photo. OpenAI's API data controls say that, by default, abuse-monitoring logs may keep API inputs and outputs for up to 30 days, unless the law or protecting the service requires longer, and that API data is not used to train models unless the account opts in.
A nutrition coach you choose to link sees the restaurant orders and daily totals described above, and not GLP-1 information. You can unlink anytime.
RevenueCat receives an app user ID or account ID, purchase receipts, and subscription status. Stripe receives the payment details you enter at web checkout. Neither receives your weight, food log, or GLP-1 answers.
Analytics. Counts kept inside the app stay on this device. They drop food names and health numbers, and they are not sent on the network. Cloudflare Web Analytics on tablemacros.com and tablemacros.app receives the page address, referring page, browser and device type, and page-load timing. It does not receive your weight, food log, or GLP-1 answers.
No one else. We have no affiliates that receive consumer health data. We do not sell consumer health data and will not do so.
4. Your rights
You have the right to:
Confirm and access: learn whether we collect, share, or sell your consumer health data, get a copy, and get a list of every third party we shared it with, plus their contact information.
Withdraw consent: stop our collection and sharing at any time.
Delete: have your consumer health data deleted from our live database right away. Our database provider may keep backup copies for a limited period, which we've asked it to confirm in writing. We never restore deleted data from backups, and we'll update this page once that period is confirmed. We also tell our processors and any third party we shared it with to delete it.
Appeal a decision we make on a request.
Not be discriminated against for using these rights.
5. How to use your rights
Copy: in the app, open Goals, then Account, then Export backup. On the Goals screen, Backup & restore also has Export log CSV for the food log.
Delete: open Goals, then Account, then Delete my data. If you are signed in, that deletes the account and the synced data. If you are not signed in, it clears the TableMacros data on this device. You can also use tablemacros.app/delete-account.
Withdraw coach sharing: Goals, then Account, then Coach, then Unlink coach.
Withdraw photo estimates: Settings, under AI photo estimates, then Off.
Stop Supabase sync: Sign out ends the Supabase session, and the app stops syncing your profile, goals, favorites, go-tos, and food log to Supabase until you sign in again. The copy on this device stays, and data already stored in Supabase stays until you delete it. Delete my data, when you are signed in, signs you out and clears this device after the delete request, so syncing stops. When you are not signed in, Delete my data only clears the TableMacros data on this device.
GLP-1 Dining Mode is not in the app yet. When you turn it on, turning it off deletes the answers saved on this device.
By email:[email protected], subject "Health data request". You don't need to create an account. If you have one, we may ask you to confirm the request from your account email so we can verify it is you. An email request to delete the account is finished within 30 days.
We respond to consumer health data requests within 45 days. If we need more time, we may extend once by 45 days and will tell you why. Requests are free up to twice a year. We will tell you if we cannot verify a request.
6. Appeals
If we decline your request, you may appeal by emailing [email protected] with the subject "Appeal" within a reasonable time after our decision. We will respond in writing within 45 days and explain our decision. If we deny your appeal, you may contact your state Attorney General:
We do not use geofencing around health-care facilities, or anywhere else. The app uses your device's location only while you use a location feature, to find restaurants, When you use location features, your device sends your location to map services we use (OpenStreetMap Nominatim, Overpass API servers and OSRM routing) to find places and routes, and rounded coordinates go to our own places service, which doesn't store them. We don't save your location to your account. Location is optional, and you can type a city or ZIP instead.
We do not combine GLP-1 answers with your location. Those answers stay on this device.
Only staff who need it to run the service can access consumer health data we hold, and they must keep it confidential.
This is not HIPAA-protected information, and TableMacros is not a medical device.
Educational, not medical advice.
If we change this policy, we will update the effective date above, and we will ask before any new collection, use, or sharing of consumer health data.
Contact
Montgomery Appworks LLC 9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159 [email protected]
TableMacros