Privacy Policy

1. Introduction

Macademia Inc. ("Macademia", "we", "us", or "our") is committed to protecting the privacy of nutrition professionals and their patients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, professional credentials, and practice information.

Patient Data

As a nutrition professional, you may enter patient information including dietary records, health metrics, and nutritional assessments. You are the data controller of your patient data, and we act as a data processor on your behalf.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, and session duration.

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process your account registration and manage your subscription
• Generate nutritional analyses and meal plans
• Send administrative notifications and service updates
• Respond to your requests, comments, and questions
• Monitor and analyze usage trends to improve user experience
• Comply with legal obligations and enforce our terms

4. Data Security & HIPAA Compliance

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256). Our platform is designed to comply with HIPAA requirements for the handling of protected health information (PHI). We maintain Business Associate Agreements (BAAs) with all applicable service providers.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: trusted third parties who assist in operating our platform (hosting, analytics, payment processing)
• Legal requirements: when required by law, regulation, or legal process
• Business transfers: in connection with a merger, acquisition, or sale of assets
• With your consent: when you explicitly authorize us to share your information

6. Data Retention

We retain your account information for as long as your account is active. Patient data is retained according to your subscription terms and applicable healthcare record retention laws. You may request deletion of your data at any time by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent at any time

8. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics cookies to understand how our platform is used. You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].