Privacy Policy

1. Information we collect

Depending on how you use the Service, we may collect the following categories of information:

• Account information. When you sign in (for example with Sign in with Apple), we receive identifiers such as a user ID and, where provided, your email address and display name.
• Profile and fitness preferences. Information you choose to provide during setup or in settings, such as gender, birthday, height, weight, fitness level, and goals.
• Workout and usage data. Workouts, exercises, sets, templates, reminders, and related progress data you create in the app. Much of this is stored on your device; account and profile data may be synced to our servers so you can use the Service across devices.
• Health and fitness (Apple Health / HealthKit). On Apple Watch, ShapePal may start a HealthKit workout session while you train so the companion app can keep the rest timer and set logging active. We use this for app functionality during workouts; we do not sell Health data.
• Diagnostics and crash data. We use Sentry to collect crash reports, error logs, device and app version information, and (when you are signed in) a user identifier so we can fix bugs. We do not intentionally send your workout contents or full profile as personal information.
• Camera. If Friends features are available and you choose to add a friend by scanning their invite QR code, the app requests camera access to read that QR code. Images are processed on-device for scanning; we do not upload photos from this flow to our servers.
• Device and notification data. Device permissions you grant (such as notifications) and related preferences so we can send rest-timer alerts, unfinished-workout reminders, or workout reminders you enable.
• Support communications. Name, email address, and message content when you contact us through the website contact form or by email.
• Website analytics. On our website we use Google Analytics, which may collect approximate usage information such as pages visited, device/browser type, and general location derived from IP address.

2. How we use information

We use the information above to:

• Provide, maintain, and improve the Service
• Authenticate you and sync your account/profile
• Personalize workout tracking and in-app experience
• Operate Apple Watch workout sessions via HealthKit
• Diagnose crashes and improve reliability (Sentry)
• Let you scan friend invite codes when that feature is available (camera)
• Send the notifications you have enabled
• Respond to support requests and feedback
• Understand website traffic and improve our site
• Comply with legal obligations and protect our rights

We do not sell your personal information.

3. How we share information

We share information only with service providers that help us operate the Service, under appropriate safeguards, including:

• Supabase — authentication and database hosting
• Amazon Web Services (AWS) — application hosting and API infrastructure
• Apple — Sign in with Apple, App Store distribution, and HealthKit on Apple devices
• Sentry — crash and error monitoring
• Google Analytics — website analytics
• MailerSend — delivering contact-form emails

We may also disclose information if required by law, or to protect the safety, rights, or property of ShapePal, our users, or others.

4. Data storage and retention

Workout and related fitness data may remain primarily on your device until you clear app data or uninstall the app. Account and profile information stored on our servers is retained while your account is active and for a reasonable period afterward as needed for backups, security, and legal requirements. Contact-form messages are retained as needed to respond to your request. Crash reports retained by Sentry are kept according to our Sentry project retention settings and used only to maintain and improve the Service.

5. Your choices and rights

• You can update many profile settings in the app, and clear local data from Settings.
• You can delete your account in the app under Settings → Danger Zone → Delete Account. This permanently removes your account, synced profile data, workouts, and related server records, subject to legal retention requirements. You can also request deletion by contacting us (see below).
• You can disable notifications in the app and/or your device settings.
• You can revoke Health, camera, and notification permissions in iOS Settings. Some Apple Watch features require a HealthKit workout session to stay active during training.
• Friend invite QR scanning is optional. When Friends features are available, you can add friends with an invite code without using the camera, or you can skip Friends entirely.
• You may request access to, correction of, or deletion of personal information we hold about you by contacting us (see below).
• Depending on where you live, you may have additional rights under applicable privacy laws (for example GDPR or CCPA). To exercise them, contact us.

6. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us so we can delete it.

7. International transfers

We may process and store information in the United States and other countries where our providers operate. Those countries may have different data-protection laws than your home country.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the Service after changes means you accept the updated policy.

9. Contact us

For privacy questions, support, or help with account deletion, contact us at shapepal.team [at] gmail.com or use our Contact / Support page.