Privacy Policy
Last updated: 17 October 2026
The short version. ShapeDay has no accounts, no ads, no third-party analytics or tracking SDKs, and we never sell or share data for advertising. Your food log, weight, measurements, workouts, photos and settings are stored on your iPhone. Something leaves your phone only when you use a feature that needs it — mainly an AI analysis you ask for — and then only for that request. The app also sends us anonymous usage stats (which features get used and, when you correct an AI portion estimate, the AI's food description and by how much — never what you log, your photos or anything you type), which you can switch off.
1. Who we are
ShapeDay is an app for iPhone and Apple Watch developed by Aleksandr Melnik (“we”, “us”), who is the controller of the personal data described here. Contact for anything about your data: support@shape-day.com. More on the Legal notice page.
2. Data that stays on your device
Everything you log or set up in ShapeDay is kept in the app's storage on your iPhone, and in your device backups if you use them: meals, calories, macros and nutrients, water, fasting schedule, weight and body measurements, workouts and sets, training plans and folders, recovery, goals, progress photos, items you save from social media, and your settings. Your Apple Watch receives today's plan and sends back the sets you log on it, directly between your own devices. We don't have a copy of any of this.
Some features work entirely on your device and send nothing anywhere, for example nutrient tracking and trends (the USDA nutrient database is built into the app), intermittent fasting, recovery, the training coverage map and the week grid.
If you export a backup file, it goes wherever you choose to save or share it.
3. Data that leaves your device, and why
AI features
When you ask ShapeDay to analyse a meal photo, a voice note or a typed description, a screenshot or link you saved, a progress photo (body-fat estimate), your progress (forecast), your training coverage (coach review), or to build a training program, the app sends that content — plus only the figures the feature needs, such as your goal, sex, age, height, weight trend or weekly sets per muscle — to our AI server, which passes it to Anthropic (Claude) to produce the answer. Notes you mark “For AI coach” (Coach → Your thoughts) are sent along with the goal, training program, progress and training coverage requests, so the advice follows your own rules; other notes never leave your phone.
- Our server does not store the content of these requests.
- Anthropic processes it as our service provider. Under its commercial terms it does not use this data to train its models and may keep it for a limited period for safety and abuse monitoring.
Free-use limits
To count free AI use, the app creates a random device ID. It is not linked to your name, Apple ID or advertising identifiers. Our server stores, per month, how many AI requests each device ID made, a salted one-way hash of the network the requests came from (not the address itself), and for Pro subscribers the App Store original transaction ID. These counters are deleted after about two months; “Delete all my data” in the app removes your device's counter right away.
App verification
To make sure requests come from the genuine ShapeDay app and not from a copy or a script, the app uses Apple's App Attest. On first use your iPhone creates a cryptographic key and Apple confirms it belongs to a real device running ShapeDay; our server then stores only that key's public half (a random-looking identifier with no link to you, your Apple ID or your hardware) and a counter. Each request is signed with the key. Free AI use is counted per such key. Keys unused for a year are deleted automatically.
Feedback & contact
If you write to us from Feedback in the app, our server stores your messages and our replies, and emails each message to us together with the app version, iOS version, device type (for example “iPhone”), whether you have Pro and your language. The conversation is private: it is tied to a random key kept only in your iPhone's Keychain (our server stores just a one-way hash of it), so no other user can read it, and our replies go only to your chat. We may also post announcements for all users in the same chat; these contain nothing about you. The app checks our server now and then for replies and announcements so it can let you know. “Delete all my data” removes your conversation from our server too.
Anonymous usage stats
This is off by default: nothing is sent unless you switch it on in Profile → Privacy & legal → Share anonymous usage stats. If you do, to see whether ShapeDay actually helps people — and what to improve — the app sends our own server a short note when certain things happen: the app was opened (once a day), set-up was finished (with the goal type you chose, such as “burn fat”), a meal was logged (with how: photo, AI or manual), a workout was finished, a weight was logged, a goal or weekly check-in was set in Coach, the Pro screen was shown, or a subscription was started (monthly or yearly, with or without the free week). Each note carries a random ID made only for this, the time, and the app version. It never includes your weight or any other number about you, photos, or anything you type, and the ID is separate from the AI and feedback IDs, so stats can't be connected to your conversation with us. We only look at totals (for example, how many people come back after a week). No third party receives these stats. You can switch them off again any time in Profile → Privacy & legal → Share anonymous usage stats; “Delete all my data” removes the stats already sent.
Estimate corrections (making AI estimates better for everyone)
When you change the grams of a food the AI found and then log it, the app also sends a short note with this anonymous stats ID: the AI's own food description (for example “Egg, whole, cooked, scrambled”) and the ratio between your grams and the AI's estimate (for example 0.85). It never includes your photo, the text you typed, the name you see in the app, or your own numbers. Once at least 20 different installs have corrected the same food, a daily job computes the typical correction, limited to ±25%, and adds that small table (food description and factor, no personal data) to the instructions we send to the AI for meal estimates, so its guesses start closer for everyone. No model is trained on your data. These notes are deleted after 180 days; the table is rebuilt every day from the notes that remain, so it follows “Delete all my data” and the switch below: with stats off, nothing is sent.
Subscriptions
Purchases are handled entirely by Apple. To confirm Pro, the app sends our server the transaction record Apple signed (product, dates and transaction ID). We never see your payment details, name or Apple ID.
Food, exercise and link lookups
Barcode scans and some food searches are sent to Open Food Facts; some exercise descriptions come from Wikipedia; saving a YouTube or TikTok link fetches its title and preview from that site. These services receive the request and your network address, as with any web page you open, under their own privacy policies.
Voice input
Speech is turned into text by Apple's speech recognition, which may process audio under Apple's Privacy Policy.
4. Apple Health
With your permission, ShapeDay reads steps, active energy, exercise minutes, body weight and the workouts other apps saved (type, time, distance and calories) from Apple Health, and writes the weight, active energy, workouts and mindful minutes (Breathe & meditate sessions) you log back to it. Health data stays on your device. It is never used for advertising, marketing or data mining, never sold, and is included in an AI request only when you use a feature that needs it (for example your weight trend for a progress forecast). You can change these permissions at any time in the Health app.
5. Camera, photos and microphone
The camera, photo library and microphone are used only when you start a scan, pick a photo or dictate. Photos you take for meals or progress are stored in the app on your device unless you send one to an AI feature as described above.
6. Service providers
| Provider | What for | Data |
|---|---|---|
| Cloudflare | Runs our AI server and this website | Network address and request metadata, short-lived technical logs |
| Anthropic | AI answers (Claude) | The content and figures of the AI request you make |
| Apple | App Store, payments, subscriptions, speech recognition | Under Apple's own terms and privacy policy |
These providers are based in the United States, so data sent for AI features may be processed there, under their data-processing terms and the standard contractual clauses or other safeguards they provide.
7. How long data is kept
- On your device: until you delete it, use “Delete all my data” or delete the app.
- AI request content: not stored by us; kept by Anthropic only as its terms allow (limited period).
- Usage counters and network hashes: about two months.
- App verification keys: deleted after a year without use.
- Anonymous usage stats: 400 days, then deleted automatically. Estimate corrections: 180 days.
- Technical logs at Cloudflare: a few days.
- Emails you send us: as long as needed to answer, then deleted unless the law requires otherwise.
- Feedback conversations in the app: until you delete them with “Delete all my data”, or we delete them once they're resolved and inactive.
8. Legal bases (EEA, UK and Switzerland)
We process data to provide the features you ask for (performance of a contract), to prevent abuse and keep free limits fair and to measure and improve the app (including AI estimates) with anonymous usage stats (legitimate interests — you can object by switching the stats off), and for Apple Health, camera, photos and microphone on the basis of the permission you give in iOS (consent, which you can withdraw in Settings at any time). This policy is written to meet the EU and UK GDPR and the Swiss Federal Act on Data Protection (FADP).
9. Your rights
You can delete everything ShapeDay stores with Profile → Privacy & legal → Delete all my data, or by deleting the app. Because we hold no account and almost no data about you, most requests are fulfilled by those steps. For anything else — access, correction, deletion, restriction, portability, objection, or withdrawing consent — write to support@shape-day.com; we answer within 30 days. You also have the right to complain to your data protection authority (in Switzerland the FDPIC, in the EU the authority of your country).
Residents of California and other US states: we do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you.
10. Security
Data travels encrypted (HTTPS). API keys you add are kept in the iOS Keychain. Our server keeps no request content, and its secrets are stored outside the code.
11. Children
ShapeDay is not directed at children under 16, and we don't knowingly process their data. If you believe a child has sent us data, contact us and we will delete it.
12. Changes
If we change this policy, we update the date above and, for significant changes, tell you in the app.