English

Privacy Policy for “Shape Tracker”

Last updated: July 16, 2026
Developer: Galiev Alexey Yurievich
Contact: alexeygalievv@gmail.com

This Privacy Policy describes how the Shape Tracker mobile application (“App”) processes personal data. By using the App, you acknowledge that you have read this Policy.

1. Overview

Shape Tracker is a workout diary with optional cloud sync, AI-generated training plans (Pro), and progress tracking. We aim to collect only the data needed to provide these features.

2. Data we process

Depending on how you use the App, we may process:

Account data — email address and authentication identifiers when you sign in with email/password or Sign in with Apple (via Firebase Authentication).
Profile data — name or nickname, age, gender, height, weight, activity level, training preferences.
Workout data — exercises, sets, weight, repetitions, duration, notes.
Body measurements and goals.
Progress photos — images you add; photo files stay on your device unless you explicitly enable cloud backup of metadata.
Weekly training plan — exercises and schedule generated or edited by you.
Questionnaire answers for AI plans — goals, experience, injuries/limitations, equipment, session duration, and similar preferences sent when you request plan generation.
Subscription status — whether ShapeTracker Pro is active on your Apple ID (processed by Apple; we do not receive payment card details).
Technical data — app version, platform, anonymous request identifiers when calling our plan-generation server.

3. How data is stored

On your device — workouts, profile, measurements, and photos are stored locally so the App works offline.
In the cloud (optional) — if you sign in and verify your account, data may sync to Google Firebase (Firestore) under your user ID so you can access it on another device signed into the same account.
On our backend — when you use AI plan generation, questionnaire parameters and profile context are sent to our server to build your plan. We do not upload your full workout history for this feature unless required to provide the service.

4. Third-party services

We use the following categories of processors:

Google Firebase (Authentication, Firestore) — account sign-in and cloud sync. Privacy: firebase.google.com/support/privacy
Apple — Sign in with Apple, App Store subscriptions, and in-app purchases. We do not receive your payment card number.
AI providers — our server may send anonymized or pseudonymized plan parameters (goals, injuries, experience, equipment) to a large-language-model provider to generate training plan text. We do not intentionally send progress photos through this pipeline.

The App does not use third-party advertising or cross-app tracking for ads. We do not sell your personal data.

5. Why we use data

Provide core diary, statistics, and reminders.
Sync your data across devices when you are signed in.
Generate and adapt AI training plans (Pro).
Validate subscriptions and unlock Pro features.
Improve reliability and fix errors (minimal technical logs on the server).

6. Device permissions

Photos / Camera — only to add progress photos you choose.
Notifications — optional workout reminders if you enable them.

7. Account, subscription, and sign-in

Purchasing ShapeTracker Pro requires an App account in the App (email or Sign in with Apple). Subscription billing is handled entirely by Apple. Restore Purchases uses your Apple ID transaction history via StoreKit.

8. Data deletion

You can delete data as follows:

Delete individual workouts, measurements, or photos in the App.
Use Reset All Data in Settings to erase local data.
When signed in, choose to delete your account — this removes your Firebase account and cloud data associated with your user ID.
Uninstalling the App removes local data from the device.

Deleting your account does not automatically cancel an App Store subscription — manage or cancel it in iOS Settings → Apple ID → Subscriptions.

9. Children

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Security and retention

We use industry-standard measures through Firebase and HTTPS for data in transit. Cloud data is kept while your account exists or until you delete it. Server logs for plan generation are retained only as long as needed for operations and abuse prevention.

11. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your data, or object to certain processing. Contact us at the email below — we will respond within a reasonable time.

12. Changes

We may update this Policy. The current version is always published at this URL. Continued use after changes means you accept the updated Policy.

13. Contact

Email: alexeygalievv@gmail.com