Back to home
Privacy Policy

Your data,
your control.

At SHAPE, transparency is not optional. Here is exactly what we collect, why, and how you stay in control.

Last updated: April 2026

01

Data collected

To provide a personalised experience, SHAPE collects the following data:

Identity — First name, email address — to create and manage your account.
Body profile — Weight, height, age, gender, injuries — to personalise your plans.
Fitness goals — Transformation goals, target areas, experience level, training frequency.
Meal photos — Sent to our AI for nutritional analysis. Not stored after processing.
Physical activity — Steps, calories burned via Apple HealthKit — stay on your device only.
Subscription status — Indicates whether you are a Premium subscriber, managed via RevenueCat / Apple.
02

How we use your data

Your data is used exclusively to:

  • Generate personalised training programmes and nutrition plans via our AI
  • Calculate your calorie targets and macronutrients based on your profile
  • Analyse your meals and estimate nutritional values
  • Track your progress and adapt your programmes
  • Send you relevant communications (if you have consented)
  • Unlock Premium features based on your subscription status

Your data is never sold, rented, or shared with third parties for advertising purposes.

03

Apple HealthKit

SHAPE uses Apple HealthKit to read your daily steps and calories burned. This data stays on your device only and is never transmitted to our servers. In accordance with Apple guidelines, this data is only used to improve your in-app experience and is never shared with third parties or used for advertising.

04

Storage & security

Your profile data (email, weight, goals) is stored securely via Supabase, a GDPR-compliant cloud infrastructure hosted in Europe.

Activity data (steps, calories) never leaves your iPhone. Meal photos are sent to Google Gemini solely for the duration of the analysis, then immediately deleted.

TLS encryption in transitRow Level SecurityOwner-only accessGDPR compliant
05

Your rights (GDPR)

Under the GDPR, you have the following rights:

Access
View all your personal data
Rectification
Correct inaccurate information
Deletion
Delete your account and all your data from the app (Profile → Privacy)
Portability
Export your data in a readable format
Objection
Withdraw your consent at any time
Restriction
Limit the processing of your data
06

Account deletion

You can delete your account and all your data at any time directly from the app: Profile → Privacy → Delete my account. Deletion is immediate and irreversible. All your personal data, meal history, and programmes are permanently erased from our servers.

07

Contact

For any questions about your personal data or this privacy policy, contact our data protection officer:

privacy@shapefitness.app

We are committed to responding to your request within 30 days.

This policy may be updated. Important changes will be communicated via the app or by email. Continued use of SHAPE constitutes your acceptance of the current policy.