DIAL

AI connection privacy

Updated November 6, 2026

This notice explains the optional connection between your existing Dial account and an assistant such as ChatGPT or Claude. MacroMatic LLC operates Dial. Connecting lets the assistant you choose use the Dial permissions you approve; it does not create a second Dial profile.

What you share

With read permission, Dial returns the food records you request, their portions and nutrition values, recent foods and remembered portions, daily meal groupings and totals, your existing calorie and macro targets, and the calendar date and time zone needed to choose the correct day. Food search returns matching Dial catalog entries. Published source names and links may accompany food estimates; these identify their source and are not independent verification of the nutrition.

With write permission, the assistant can send structured food names, portions, nutrition values, meal assignments and concise food-estimate assumptions to Dial. You review a draft before asking the assistant to save it. Corrections and undo apply to foods saved through the connection and require your request. Do not include medical records, diagnoses, medications, passwords or other sensitive information in food names or estimate assumptions.

Separate weight read permission lets Dial share your current recorded body weight and the stored weight snapshot for a day you request, including units and dates. A daily snapshot may carry forward a previous weight and does not prove a new weigh-in occurred. Separate weight write permission lets the assistant save or correct today’s body weight after you confirm the value, units and date. This updates the same weight records used in Dial; it does not change your food entries or calorie and macro targets. Weight is personal fitness data; do not use these tools for medical records, diagnoses or treatment information. Existing food-only connections do not automatically receive weight access. Reconnect and approve the new permissions to enable it.

Dial does not receive your full assistant conversation or original meal photos through this connection. If you discuss or upload them in ChatGPT or Claude, that service processes them under its own terms and privacy controls. Dial receives only the selected structured food or weight values that the assistant sends to its tools.

Versioned tracking permissions

Dial is preparing a separately consented tracking permission contract, version dial-tracking-v1. It is not offered for new public connections in this release. Existing food and weight permissions keep their original meaning. An app update, preference setting, or revised privacy notice does not upgrade an OAuth grant.

The proposed read permission covers Dial food logs and nutrition targets, recorded weight, workout programs and plans, weekly schedules, active sessions, and completed workout logs and progress. The separate write permission covers creating, updating, and deleting food entries and recorded weights; updating nutrition targets; creating, updating, and deleting workout programs, plans, weekly schedules, and completed workout logs and progress; and starting, updating, finishing, or cancelling active workout sessions. Write permission does not include read permission. Each change still needs your request and any required confirmation.

Workout access is upcoming and inactive. Nutrition-target edits and weight deletion are also unavailable through current tools. No workout tools are available through this connection today. Issuance requires a separate reviewed rollout. Future tools may reuse an explicit versioned grant only for the listed data and actions; new categories or actions need new consent. This excludes account and security settings, billing and subscriptions, public sharing and messages, external health or device imports, medical records, and data or actions outside this boundary. The assistant may still require its own tool approvals.

If offered later, you must explicitly approve the exact scopes and consent version. Dial records the affirmative decision, account, client/provider, resource, exact scopes, policy/consent version, and approval time with the authorization record. These records help enforce and explain your choices and remain with the retained connection record; revocation stops access but does not automatically erase the evidence. The primary approval action approves the displayed duration together with the listed permissions; a broader permission does not silently extend an existing grant.

Where the information goes

The information returned by Dial is shared with the assistant you connected and its provider: OpenAI for ChatGPT, or Anthropic for Claude. Connecting one assistant does not authorize the other; each connection requires its own consent. Both can access the same food log if you connect both to the same Dial account. Dial stores the values needed for drafts, saved foods and confirmed weights using its Firebase infrastructure, provided by Google. Saved foods and weights appear in your Dial account and its signed-in clients. Assistant estimates are not added to Dial's shared food catalog.

Sign-in takes place through Dial's existing Firebase authentication and, when selected, Apple. Your password and provider sign-in credentials are not food-tool inputs and should never be pasted into a chat. Connection credentials are stored separately from your food data.

With Approve in Dial, the app uses its existing signed-in account, including a guest account. You review the requesting assistant and permissions in Dial. The updated app returns a short-lived, one-use confirmation to the browser that started the connection, which must still have its original authorization session. Older apps and different-browser setups can use the code displayed in the original connection window instead. Dial temporarily records that account's pending approval and time zone to finish connecting. Adding Apple sign-in to protect a guest account is optional and keeps the same food history.

Dial requires service providers handling personal data on its behalf to protect it consistently with its privacy notice and applicable requirements, restrict processing to authorized purposes, and use appropriate security safeguards. Connections use encrypted transport and access is limited to the permissions you approve. The assistant you choose also processes your chat and shared data under its own privacy terms and settings: OpenAI privacy policy or Anthropic privacy policy. An assistant promotion in Dial does not itself grant access.

Connection metrics

Dial measures connection starts and completions, the number of connected accounts, and which connector tools succeed or fail. We use server logs and PostHog for these operational and product metrics, associated with your Dial account ID after you sign in. Metrics include the assistant, tool name, timestamp, result status and request duration. They do not include food names, nutrition or weight values, chat content, photos, emails, passwords or connection tokens. Connection starts before sign-in are anonymous attempts and are not treated as identified people. Contact us using the privacy request address below to ask about these records.

Records and expiry

• Meal drafts expire after 24 hours. Optional food-estimate details, including source names and links, are eligible for cleanup after 90 days. Confirmed personal estimates can be recalled privately through your connector for up to 90 days after their latest use. They are not published in the shared food catalog. Corrections and removals prevent recall of stale estimate details.
• Authorization sessions and app-approval links expire after 10 minutes. App-approval links are single use. Automatic browser-return confirmations expire after at most two minutes and require the original browser session; five incorrect fallback codes lock the app-approval link. Access tokens last up to 15 minutes. The connection has a maximum lifetime of 30 days before you need to connect again.
• Security request counters are eligible for cleanup after their short request window. Account-operation records coordinate requests with deletion and are normally removed when a request completes; abandoned records expire after 10 minutes.
• Records marked for cleanup are cleaned up asynchronously. Minimal code and refresh replay hashes are retained for the connection lifetime to detect credential reuse; revocation stops access but can retain this history until account deletion or a separate cleanup policy. Expiry prevents use where the connection enforces a validity limit; it is not a promise that physical deletion occurs at that exact moment.
• Saved food and weight records, connection records and the minimal identifiers and checks used to prevent duplicate imports or repeated weight saves do not all have automatic expiry. Disconnecting does not delete them. Contact us for a request to access or delete retained connection data.

Your controls

You can decline connection, choose not to confirm a draft, and disconnect Dial in the connected assistant to stop further access through that connection. Disconnecting Claude does not disconnect ChatGPT, or vice versa. You can correct or remove saved food in Dial. Disconnecting does not erase foods or weights already saved in Dial or information already present in the assistant; manage conversations through that service's own controls.

To ask about retained connection data, request access or deletion, or report a privacy concern, email sam@macromatic.space. We may need to verify that the request concerns your account. Do not send passwords, sign-in codes or medical records in a support request.