APPENDIX A — PRIVACY POLICY · ACTA MACROUTINE, VOL. I

Your data is the subject, not the product.

Your health data is yours. What follows is the complete record — exactly what we store, why we store it, and how to make us delete it.

§ 01WHAT WE COLLECT

ONLY WHAT THE DASHBOARD NEEDS

Your email address when you create an account. The health metrics you authorize from WHOOP and Apple Health — recovery score, HRV, resting heart rate, sleep stages, strain, steps, and heart rate. The food and workouts you log yourself. Basic usage analytics so we can find what's broken and fix it.

That's the whole list. If it isn't needed to show you your own numbers, we don't collect it.

WHAT WE STOREWHYHOW LONG
Account emailSign-inUNTIL YOU DELETE IT
Health metricsThe dashboardUNTIL YOU DELETE THEM
Food & workout logsYour historyUNTIL YOU DELETE THEM
Waitlist emailBeta inviteUNTIL LAUNCH OR REMOVAL REQUEST

§ 02HOW WE USE IT

YOUR DASHBOARD, NOTHING ELSE

Your data powers your personal dashboard, generates insights about your recovery, nutrition, and training, and keeps everything in sync across your devices. We look at aggregate usage to improve the product.

We never use your health data for advertising.

§ 03WHAT WE NEVER DO

WE NEVER SELL YOUR DATA

We don't sell your data. We don't share it with advertisers, employers, insurers, or data brokers. We don't show ads, and we don't trade your health history for anything. Your data leaves our systems only when you tell us to send it somewhere — or to delete it.

§ 04THIRD-PARTY SOURCES

YOUR WHOOP LOGIN STAYS WITH WHOOP

WHOOP connects through its official OAuth flow. You sign in on WHOOP's side, and WHOOP hands us a token. We never see or store your WHOOP password. Apple Health data is read only with the permissions you grant on your device, and we request the minimum we need.

You can revoke either connection at any time — inside Macroutine, in WHOOP's settings, or in your iPhone's Health settings. Revoking stops the data flow immediately.

§ 05DATA RETENTION & DELETION

DELETE MEANS DELETE

Your data is encrypted in transit and at rest, and it stays only as long as you want it to. Delete your account from Settings and everything goes with it — all personal and health data is permanently removed from our systems within 30 days, and backup copies are purged within 90 days. There is no archive we quietly keep.

You can also access, correct, or export your data at any time. Ask and we'll respond within 30 days.

§ 06WAITLIST EMAILS

ONE EMAIL, THEN SILENCE

If you join the waitlist, we store your email for one purpose: telling you when the beta is ready. One email. No marketing without your consent, no sharing, no drip campaigns. Want off the list? Email us and you're gone.

§ 07CONTACT

A HUMAN ANSWERS

Questions, deletion requests, or anything else about your data: hello@mymacroutine.com. You'll hear back within 30 days, usually much faster.

If this policy changes in a way that matters, we'll tell you by email at least 14 days before the change takes effect.

EFFECTIVE — JULY 2026END OF APPENDIX A