Your data stays yours.

1. Overview & Scope

Metapace is a native iOS application for tracking body composition and metabolic health metrics — including weight, height, age, body fat percentage, BMR, TDEE, BMI, and daily calorie and macronutrient targets — for an individual and, optionally, members of their family. The App also offers weight projection charts, calorie-cycling plans, an AI-generated diet plan feature, a body composition PDF report, a food barcode scanner and pantry, a curated recipe library, an intermittent fasting scheduler, water and daily-goal logging, home-screen widgets and a fasting Live Activity, logging reminders, optional Game Center streak leaderboards, and optional synchronization with Apple Health and a user's private iCloud account.

The App additionally offers a premium Wellness Intelligence suite (branded MIntelligence), available to Pro subscribers, comprising MInsights (sleep analysis), MPace (workout/training analysis), and MRecover (daily readiness/recovery scoring). These features read data from Apple Health and analyze it entirely on your device. They are described in Section 9.

Metapace is engineered to be privacy-first by design. The App does not require you to create an account, provide an email address, or supply any third-party login. Your health and profile information is, by default, stored on your device and — if you enable iCloud — within your own private iCloud database that only you control. The App does use limited, non-advertising analytics and crash reporting to operate and improve, described transparently in Section 6.

This Policy applies solely to the Metapace App. It does not apply to any third-party services, websites, platforms, or applications that the App may interact with or link to, each of which is governed by its own privacy policy and terms, as described in Section 8.

2. Who Operates Metapace

Metapace is an independently developed application created and maintained by Shivang Gulati ("we," "us," "our," or the "Developer"), an individual independent developer. The Developer is the party responsible for the App for the purposes of this Policy. Because the App is operated by an individual independent developer and not a registered corporation, you acknowledge and accept that the App is provided on the terms set out in this Policy, including without limitation the disclaimers and limitations of liability in Sections 18 through 22.

You may contact the Developer regarding this Policy at any time using the details in Section 25.

3. Information We Collect

The categories of information below are the only categories the App handles. Wherever possible, this information remains on your device or in your own private iCloud, and is never transmitted to the Developer except in the limited cases expressly described in this Policy.

3.1 Health, Body, and Profile Information You Enter

When you use the App, you may voluntarily enter or generate the following information about yourself and any family members you choose to add: name or nickname, age, sex, height, weight, body fat percentage, activity level, goal weight, target pace, and the calculated metrics derived from these inputs (BMR, TDEE, BMI, daily calorie targets, macronutrient ranges, and saved metric history). It also includes data you log such as water intake, fasting windows, and daily goal progress. This information is stored locally on your device and, if iCloud sync is enabled, in your private iCloud database.

3.2 Family Member Information

The App allows you to create and manage profiles for multiple family members under your own device and Apple ID. You are solely responsible for ensuring that you have the authority and consent of any individual whose information you enter into the App. You represent and warrant that you have obtained all necessary permissions to add and manage any third party's data.

3.3 Apple Health Data (Read & Write)

With your explicit permission, the App reads from and/or writes to Apple Health (HealthKit). Depending on which features you enable, this may include body mass and height; activity such as active energy and step count; and, for the Wellness Intelligence features, sleep analysis, heart rate, heart rate variability (SDNN), resting heart rate, respiratory rate, blood oxygen (SpO₂), sleeping wrist temperature, and workout records (including per-workout heart-rate series, energy, and distance). All Apple Health data is processed on your device. It is not transmitted to the Developer and is not stored on any Developer-controlled server. See Section 9 for full detail.

3.4 Food, Barcode, and Pantry Data

If you use the barcode scanner, the App accesses your device camera solely to read product barcodes. The scanned barcode is sent to the OpenFoodFacts public database to retrieve nutrition information, which is then stored locally on your device in your food pantry. Camera input is processed only to detect a barcode and is not recorded, retained, or transmitted as imagery.

3.5 AI Diet Plan and PDF Report Inputs

If you use the AI Diet Plan feature or generate a body composition PDF report, the inputs you provide for that request — which may include your name, age, sex, height, weight, BMI, body fat percentage, goal direction, diet type, cuisine preference, calorie target, and optional free-text fields such as special diet, allergies, medications, medical conditions, and notes — are transmitted to a third-party cloud processing service to generate the requested document. These inputs are sent only when you actively initiate generation. Do not enter information into free-text fields that you do not wish to transmit for processing.

3.6 Feedback and Support Submissions

If you submit feedback or a support request through the App, the content you provide (and any contact detail you choose to include) is transmitted to a third-party backend service so the Developer can review it. Providing this information is entirely optional and occurs only when you submit a form.

3.7 Analytics and Crash-Report Data

The App uses a privacy-respecting analytics and crash-reporting service (Google Firebase Analytics and Crashlytics) to understand which features are used and to diagnose crashes and errors. This involves limited, non-advertising event and diagnostic data — for example, that a feature was opened or a purchase flow completed, plus coarse, bucketed segmentation properties and standard device/diagnostic information. This data does not include your name, your health metrics, your raw Apple Health samples, or the contents of any plan or report. Full detail, including how to understand its scope, is in Section 6.

3.8 Device Attestation and Security Tokens

To protect its backend endpoints from abuse, the App uses Apple's App Attest framework. This generates a cryptographic device key and obtains a security token used to authenticate legitimate requests from the genuine App. These tokens are stored securely in your device Keychain and are used solely for security and abuse-prevention purposes. They are not used to identify you as a person or to track you across apps or services.

3.9 Subscription, Usage, and Streak Counters

If you purchase a subscription, entitlement status is managed by Apple's StoreKit framework. The App stores local counters reflecting your feature usage (for example, the number of AI diet plans, PDF reports, or barcode scans used) in order to enforce plan limits, and local streak values used for engagement and, optionally, Game Center leaderboards (Section 12). Payment is processed entirely by Apple; the Developer never receives or stores your payment card or financial account details.

3.10 Remote Configuration and Content

The App periodically fetches non-personal configuration data, recipe content, motivational quotes, and remote interface content from content-delivery services. These requests deliver content to your device and are not used to build a profile of you.

4. What We Do Not Collect

For clarity, the App is designed so that the Developer does not:

• Require account creation, email, password, or any third-party sign-in.
• Run third-party advertising, ad networks, or advertising identifiers (the App does not use the IDFA, and declares "no tracking" in its App Store privacy manifest).
• Use cross-app or cross-site tracking, or share data with data brokers.
• Transmit your health metrics, family profiles, or raw Apple Health samples to the Developer or store them on a Developer-controlled server.
• Send your name, health data, or the contents of your plans or reports to the analytics or crash-reporting service (see Section 6).
• Sell, rent, or trade your personal information to anyone, for any purpose.
• Maintain a central server containing your personal health profile under the Developer's control.
• Access your contacts, photo library (beyond the live camera feed used solely for barcode detection), microphone, or precise GPS location.

The App does use limited, non-advertising analytics and crash reporting, which is fully described in Section 6. This is the only category of automatically collected usage data, and it is deliberately scoped to exclude personal health information.

5. How Your Data Is Used

Information handled by the App is used exclusively to provide, secure, and improve the App's features for you. Specifically, your information is used to: calculate and display your metabolic, body-composition, sleep, training, and recovery metrics; render charts, projections, plans, scores, and explanations; generate documents you request; synchronize your data across your own devices via your private iCloud; enforce subscription entitlements and feature limits; maintain streaks and optional leaderboards; secure backend requests against abuse; understand feature usage and diagnose crashes through limited analytics and crash reporting (Section 6); and respond to feedback or support you submit. The App does not use your information for advertising, for selling or sharing with data brokers, or for automated decision-making producing legal or similarly significant effects about you.

6. Analytics & Crash Reporting

In plain terms: we look at which features you use and enjoy most, so we can enhance them and keep improving the App for you. To do this reliably, Metapace uses Google Firebase Analytics (product analytics) and Firebase Crashlytics (crash and error reporting). We have designed this integration to be as privacy-respecting as practicable, and we want to be transparent about exactly what it does and does not capture — it is used only to make Metapace better, never to advertise to you or profile you.

6.1 What is collected

Analytics records a defined catalog of interaction events — for example, that onboarding completed, that a weight or water entry was logged, that a feature screen was opened, that the paywall was shown, that a purchase started or completed, or that a Wellness Intelligence screen was viewed. Some events carry minimal, non-identifying parameters (for example, a unit such as "kg," a feature name, a product identifier, or a sleep/recovery score number). The App also sets a small number of coarse, bucketed segmentation properties — for example whether notifications are enabled, your subscription tier, whether you use multiple family members, a bucketed family-member count, whether Apple Health is connected, a general goal category (lose/maintain/gain), and a bucketed streak range. Crashlytics collects standard crash and diagnostic information (such as stack traces, device model, OS version, and a non-fatal error context) to help fix problems.

6.2 What is never sent to analytics

The analytics and crash-reporting layer is deliberately scoped to exclude personal health content. It does not receive your name, your specific weight, height, or body-fat values, your family members' details, your raw Apple Health samples or biometric time series, the contents of your AI diet plans or PDF reports, your food or pantry entries, or your feedback text. Sensitive health values are kept out of event parameters; where a score is included, it is a single computed number, not the underlying data.

6.3 No advertising, no cross-app tracking

This analytics is used only for product improvement and stability. It is not used for advertising, is not linked to any advertising identifier, and is not used to track you across other companies' apps or websites. Metapace declares "no tracking" in its App Store privacy manifest. Firebase processes this data as a service provider on the Developer's behalf, subject to Google's terms and privacy policy (see Section 8). Debug and development builds of the App do not send analytics to Firebase.

6.4 Your controls

You can limit analytics through your device settings (for example, iOS Settings > Privacy & Security > Analytics & Improvements, and Tracking settings). Because the App does not use an advertising identifier and does not perform cross-app tracking, there is no ad-profile built from your use of Metapace. If you have questions or wish to make a request about analytics data, contact the Developer using Section 25.

7. Storage & Security

Metapace applies multiple layers of protection to your information:

• Local-first storage. Your metrics, family profiles, pantry, fasting, water, and the computed caches used by the Wellness Intelligence features are stored on your device. Local files are written with iOS file-protection (the "complete until first user authentication" class) that restricts access until the device has been unlocked at least once after restart.
• On-device health processing. Sleep, workout, and recovery analysis runs on your device. Only computed results (for example, a nightly score or a 30-day score history) are cached locally; raw Apple Health samples are not retained in those caches and are never uploaded.
• Private iCloud sync. If you enable iCloud, your metrics, family profiles, and pantry sync through your own private iCloud database scoped to your Apple ID. The Developer cannot access your private iCloud data. The Wellness Intelligence caches are not synced to iCloud and never leave the device.
• Encryption at rest. Sensitive configuration cached on your device is encrypted using industry-standard AES-256-GCM encryption, with keys held in your device Keychain.
• Keychain protection. Security tokens and keys are stored in the iOS Keychain with a protection class that prevents them from being read while the device is locked or restored to a different device.
• Encrypted transport. All network communication between the App and third-party services occurs over encrypted HTTPS connections.
• Backend hardening. Backend endpoints are protected by device attestation, single-use security challenges, rate limiting, and short-lived tokens to deter abuse.

No method of electronic storage or transmission is ever completely secure. While the App implements reasonable and appropriate safeguards, the Developer cannot and does not guarantee absolute security, and you use the App with that understanding (see Sections 19 and 20).

8. Third-Party Services

The App relies on the following third-party services to provide certain features. Each operates under its own privacy policy and terms, over which the Developer has no control and for which the Developer accepts no responsibility. Your use of features that depend on these services constitutes acceptance of their respective policies.

The Developer does not control, endorse, or assume any responsibility for the content, privacy practices, availability, or conduct of any third-party service. Review their policies directly before relying on any feature that depends on them.

9. Apple HealthKit & Wellness Intelligence

With your explicit, per-feature permission, Metapace integrates with Apple Health (HealthKit). Apple Health access is requested only in context, only when you opt into a feature that needs it, and is grouped into small permission "buckets":

• Body & Activity (free). With permission, the App can write your weight and height to Apple Health and read activity such as active energy and step count, to power the dashboard and weight sync.
• Sleep & Recovery (Pro). For MInsights and MRecover, the App reads sleep analysis, heart rate, heart rate variability (SDNN), resting heart rate, respiratory rate, blood oxygen (SpO₂), and sleeping wrist temperature.
• Workouts (Pro). For MPace and MRecover, the App reads your workout records, including active energy, distances, and per-workout heart-rate data.

All Apple Health data is read on a read-only basis (except body mass and height, which you may also write) and is analyzed entirely on your device. The Wellness Intelligence features (MInsights, MPace, MRecover) compute scores, trends, and explanations locally; only computed results are cached on the device (for example, processed nights, processed workouts, and a 30-day recovery-score history). Raw Apple Health samples are never sold, never used for advertising or marketing, never sent to the analytics service, and never uploaded to a Developer-controlled server or to iCloud.

MRecover does not request any Apple Health permission of its own; it synthesizes its readiness score from the data the Sleep & Recovery and Workouts features already read, together with your own logged weight and fasting information. The App's use of Apple Health data complies with Apple's HealthKit requirements, including the prohibition on using Health data for advertising or sharing it with third parties for advertising or data-brokerage.

Apple Health is tied to one designated member per device (an Apple platform constraint). You may grant or revoke Apple Health permissions at any time through the iOS Settings or the Health app; revoking access stops further reads, and you can delete the locally cached results as described in Section 14. The Wellness Intelligence scores (including sleep, training-load, HRV, respiratory, SpO₂, wrist-temperature, and readiness metrics) are wellness estimates, not medical measurements or diagnoses — see the Medical Disclaimer in Section 18.

10. AI-Generated Content

The AI Diet Plan and certain other features generate content using automated artificial-intelligence systems operated by a third-party processor. When you initiate one of these features, the inputs described in Section 3.5 — or, for any Wellness Intelligence narrative feature offered, a compact set of already-computed values (such as scores and trend summaries) rather than raw Apple Health samples — are transmitted to generate the result. AI-generated content is produced algorithmically and may be inaccurate, incomplete, inappropriate for your circumstances, or otherwise unreliable. It is provided for general informational and educational purposes only and is not professional dietary, nutritional, fitness, or medical advice. You are solely responsible for evaluating any AI-generated content and for any decision you make based on it. The Developer makes no representation or warranty as to the accuracy, suitability, or safety of any AI-generated output and disclaims all liability arising from your reliance on it, as further described in Sections 18 through 20.

11. Subscriptions & Payments

The App offers optional auto-renewable subscriptions (Pro membership, also referred to in the App as joining the "MTribe") and may offer an introductory trial, all processed exclusively through Apple's App Store and StoreKit. The Wellness Intelligence features (MInsights, MPace, MRecover) and certain other features are available only to active Pro subscribers. All payments, billing, renewals, refunds, and cancellations are handled by Apple in accordance with Apple's terms and the App Store's policies. The Developer does not receive, process, or store your payment card numbers, bank account details, or other financial account information. Manage or cancel your subscription through your Apple ID account settings. The Developer is not responsible for Apple's billing practices, payment failures, or refund decisions.

12. Game Center

If you choose to use the App's optional leaderboards and achievements, the App integrates with Apple Game Center. The App submits certain non-sensitive engagement values — specifically your longest food-logging streak and your longest water-logging streak — to Game Center leaderboards, and may report achievements. When you participate, your Game Center identity (such as your Game Center nickname) and submitted scores are handled by Apple under Apple's privacy policy and Game Center terms, and may be visible to other players on the relevant leaderboards. Your health metrics, profile details, and Apple Health data are never submitted to Game Center. Game Center participation is optional; you can control or disable Game Center through your device settings and your Apple ID. Game Center scores are client-reported and not guaranteed to be tamper-proof.

13. Sharing & Disclosure

The Developer does not sell, rent, trade, or otherwise share your personal information for monetary or other valuable consideration. Your information is disclosed only in these limited circumstances: (a) to the third-party service providers listed in Section 8, strictly to deliver the features you use (including Firebase as an analytics/crash-reporting service provider, processing only the non-health data described in Section 6); (b) where you direct it, such as exporting your own data file, sharing a generated PDF, or submitting a Game Center score; (c) to comply with applicable law, legal process, or a valid governmental or regulatory request; (d) to protect the rights, property, safety, or security of the Developer, users, or the public, or to investigate fraud or abuse; or (e) in connection with a transfer of the App or its assets, in which case any successor will be bound by commitments no less protective than this Policy.

14. Your Rights & Controls

Because your data lives primarily on your device and in your own private iCloud, you retain direct control over it at all times. You can:

• Access and review all of your stored metrics, profiles, history, and computed wellness results directly within the App.
• Edit or correct any information you have entered, at any time.
• Export a complete copy of your data as a JSON file for backup or portability.
• Delete individual entries, family members, or perform a full app reset that clears your data, including a wipe of your private iCloud zone and the local wellness caches.
• Revoke permissions for the camera, Apple Health, notifications, Game Center, or iCloud through iOS Settings at any time.
• Limit analytics through your device privacy settings (see Section 6).
• Uninstall the App, which removes locally stored data from your device.

Depending on where you live, you may have additional rights under applicable data-protection laws (see Section 17). To exercise any such right or to ask a question, contact the Developer using Section 25. Because the Developer generally does not hold your personal health profile on a central server, the most effective and immediate way to exercise control is through the in-app tools and your device and iCloud settings.

15. Data Retention

Information you store in the App is retained on your device and in your private iCloud for as long as you keep it there; you control deletion as described in Section 14. The Wellness Intelligence features keep only a rolling, on-device cache of computed results (for example, recent processed nights and workouts and a 30-day recovery-score history), which is refreshed and overwritten over time and cleared on app reset or uninstall. Data transmitted to third-party processors for a specific request (such as generating an AI diet plan or a PDF) is retained by those processors only as needed to fulfill the request and in accordance with their own retention policies. Analytics and crash-report data are retained by the analytics provider in accordance with its retention settings and policies. Feedback and support submissions are retained only as long as necessary to address your request and for reasonable record-keeping. Security tokens are short-lived and are automatically refreshed or deleted upon expiry.

16. Children's Privacy

The App is not directed to children under the age of 13, and the App's input validation does not accept ages below 13 for its primary metabolic calculations. The Developer does not knowingly collect personal information from children under 13 (or the higher minimum age that may apply in your jurisdiction). If you are a parent or guardian and choose to add a family member who is a minor, you do so on your own responsibility and represent that you are authorized to provide that information. If you believe a child has provided information in a manner inconsistent with this Policy, contact the Developer so it can be addressed.

17. International Users & Regional Rights

The App is designed to keep your data on your device and in your own private iCloud, which minimizes cross-border transfers of personal data to the Developer. Where features rely on third-party processors (Section 8) — including the AI/PDF processor, the analytics and crash-reporting provider, and Apple's services — data may be processed on servers located in various jurisdictions, including the United States; those providers maintain their own safeguards. To the extent applicable, residents of certain regions may have specific rights — for example, under the EU/UK General Data Protection Regulation (GDPR), such as rights of access, rectification, erasure, restriction, portability, and objection; or under the California Consumer Privacy Act (CCPA/CPRA), such as the rights to know, delete, correct, and opt out of "sale" or "sharing" (noting that the Developer does not sell or "share" personal information for cross-context behavioral advertising as those terms are used in those laws). Because the App generally does not hold your personal data centrally, you can exercise most of these rights directly through the in-app and device controls. To make a formal request, contact the Developer using Section 25. By using the App, you consent to the processing described in this Policy in the jurisdictions where the App and its providers operate.

23. Governing Law & Dispute Resolution

This Policy and any dispute arising out of or relating to it or the App shall be governed by and construed in accordance with the laws of India, without regard to its conflict-of-laws principles, except where the mandatory consumer-protection or data-protection laws of your country of residence apply and cannot be excluded. Subject to such mandatory laws, you agree that the courts located in India shall have exclusive jurisdiction over any dispute. If any provision of this Policy is held to be invalid or unenforceable, that provision shall be limited or severed to the minimum extent necessary, and the remaining provisions shall remain in full force and effect. The Developer's failure to enforce any provision shall not constitute a waiver of it.

24. Changes to This Policy

The Developer may update this Policy from time to time to reflect changes to the App, legal requirements, or operational practices. When the Policy changes, the version number and effective date at the top of this page will be updated, and material changes may be communicated within the App and may require your renewed acknowledgment. The current version of this Policy is Version 1.2, effective June 21, 2026. Your continued use of the App after a revised Policy takes effect constitutes your acceptance of the changes. If you do not agree to a revised Policy, you must stop using and uninstall the App.

25. Contact

If you have any questions, concerns, or requests regarding this Policy or your data, you may contact the Developer:

This document is provided for informational purposes and does not constitute legal advice. The Developer recommends consulting a qualified attorney to confirm this Policy meets all legal requirements applicable to the App's distribution markets, and to confirm that the App Store privacy "nutrition labels" remain consistent with the practices described here and with each third-party SDK's own disclosures.