Get That Shape AIContact: support@getthatshapeai.com
1.Information we collect
We only collect what's needed to run the app.
Account information
- Email address (for sign-in, via Supabase authentication)
- Display name and optional username
Profile & fitness information you provide
- Age, height, weight, sex
- Fitness goal, current activities, available equipment, injuries/limitations
- Preferred training days and workout duration
Activity & health-related data you generate in the app
- Workouts completed, exercises performed
- Weights and repetitions you log
- Body-weight entries over time
- Heart-rate readings, only while you connect a Bluetooth heart-rate device during a workout. We do not access any other health data on your device.
Social data (optional)
- Friend connections, friend requests, and challenges you create or join
Profile picture (optional)
- If you choose to set a profile picture, we access the single photo you select from your device and store it. We only ever access the image you explicitly pick — we do not browse or collect your photo library.
Technical data
- A push-notification token (if you enable reminders)
- Subscription status (managed by Google Play and RevenueCat)
- Usage data — which features and steps you use (for example completing onboarding, viewing the subscription screen, starting a trial, or completing a workout), so we can understand and improve the app
- Crash & diagnostic data — if the app crashes, a crash report (error details, device model, operating-system version and app state at the time) is collected via Firebase Crashlytics to help us fix bugs. It is tied to an anonymous device identifier, not to your name or email
Tester signups (website only)
- If you enter your email address in the "Become a tester" form on this website, we store only that address, and only to contact you about joining the closed test. It is not used for marketing or shared with anyone, and we delete it on request at support@getthatshapeai.com.
We do not collect precise location, your contacts, your photo library, or browsing history. The only photo we access is the single image you choose to set as a profile picture (above). The Bluetooth permission is used solely to read heart-rate from a device you choose to connect, never for location.
2.How we use your information
- To create and adapt your personalized AI workout plans
- To track your progress (stats, charts, personal records, streaks)
- To power optional social features (friends, leaderboard, challenges)
- To send workout reminders and progress notifications (if you enable them)
- To manage your subscription and free trial
- To understand how the app is used, in aggregate, and to improve it and fix bugs
- To keep the service secure and working
We do not sell your personal data, and we do not use it for third-party advertising.
3.Third-party services (processors)
We share data only with services that help operate the app:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication & database | Account, profile, fitness and social data |
| OpenAI (via our Vercel backend) | Generating & adapting AI workout plans and tips | Your profile and training inputs. No name or email is sent. |
| RevenueCat & Google Play | Subscriptions and the free trial | Purchase/subscription status, anonymous user identifier |
| Google (Sign-In) | Optional sign-in with your Google account | Your Google email and name, to create or access your account |
| Expo | Push notifications | Push token (only if reminders are enabled) |
| Firebase Crashlytics (Google) | Crash & stability reporting | Crash logs and device/diagnostic data. Not linked to your name or email. |
Each provider processes data under its own privacy terms. We send the minimum necessary, and AI requests do not include your name or email.
4.Data retention
We keep your data for as long as your account exists. When you delete your account (see below), your data is removed.
5.Deleting your account and data
You can permanently delete your account and all associated data at any time:
- In the app: Profile → Delete account. This immediately and permanently erases your account and all data.
- By email: if you can't access the app, email support@getthatshapeai.com from your account's email address and we will delete your data within 30 days.
See the account deletion page for full details. Deletion is permanent and cannot be undone.
6.Security
Data is transmitted over encrypted connections (HTTPS/TLS) and stored by Supabase with access controls (row-level security). No method is 100% secure, but we take reasonable measures to protect your information.
7.Children
Get That Shape AI is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.
8.International data transfers
Your data may be processed on servers located outside your country (e.g. in the EU or the United States) by the providers listed above. By using the app you consent to this processing.
9.Your rights
Depending on your region (e.g. GDPR in the EU), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. You can exercise most of these directly in the app, or by emailing us at support@getthatshapeai.com.
10.Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in the app.