Privacy Policy

Last updated: September 22, 2026

ShapeMettle is a workout tracker for iPhone built to be private by design. This policy explains what data the app handles, where it lives, and the choices you have. The short version: the app works without an account, and your data is then tied to an anonymous identity linked to your installation; signing in is optional and ties your data to your Apple account so it survives a lost device or reinstall; analytics is anonymous and strictly opt-in.

Where your data lives

Everything you create in ShapeMettle — workouts, exercises, routines, sets, muscle groups, notes, exercise photos and food diary entries — is stored on our servers: that is what lets the app restore your data, keep a started workout running and power AI food analysis. Without an account this data is tied to an anonymous identity linked to your installation; it is not connected to your name, email or Apple ID, but if you delete the app or lose the device, we cannot identify it as yours and cannot recover it for you. The device itself keeps only small working caches (such as photos awaiting analysis and preferences); your device backups (e.g. iCloud device backup) may include them under Apple's terms.

Optional account (Sign in with Apple)

Every feature of ShapeMettle, including the food diary, works without an account. Signing in is optional and serves one purpose: it ties your data to your Apple account, so it survives app reinstalls, can be restored on a new device and stays in sync across devices. When you sign in, data created anonymously on the device is merged into your account. The only sign-in method is Sign in with Apple. When you sign in, we receive and store:

• a stable identifier Apple assigns to you for our app;
• your name, if you choose to share it (used only to address you in the app);
• your email address — or, if you choose "Hide My Email", the private relay address Apple generates (used for account service messages only, never for marketing);
• your device's language and time zone, sent when you sign in — the time zone determines where your day starts and ends in the food diary, and the language lets us return content in the right language.

We never see your Apple ID password. We do not use third-party sign-in providers other than Apple.

Backup and sync

Your training data (workouts, exercises, sets and related content you create) is stored on our servers; while you are signed in, it is tied to your Apple account and synced across your devices. It is transmitted over encrypted connections (HTTPS), is used solely to provide the app's features, backup and sync, and is never sold, shared with advertisers, or used to profile you. Signing out detaches the app from your account and continues with a fresh anonymous identity; the server copy is removed when you delete your account (see below).

Food diary and AI analysis

The food diary lets you log meals by photo, by text description, or manually, and uses AI to estimate calories and macronutrients. The analysis and your diary are handled by our servers; an account is not required — without one the diary is tied to the anonymous identity described above. When you use it:

• Camera and photos. The app uses the camera only while you are scanning food, and only the photo you take (or pick from your library) is used. Meal photos and the optional caption you add are sent over an encrypted connection (HTTPS) to our servers, where AI estimates the nutrition facts. Photos of custom exercises are unaffected — they never leave your device (see "Photos" below).
• What we store. Diary entries — meal descriptions, photos, estimated calories and macros, meal times, your nutrition targets and the AI advice generated for your days — are stored on our servers, linked to your account, and used solely to provide the food diary.
• What we don't do. Your food data is never sold, shared with advertisers, or used to profile you, and it is not used to train AI models.
• Deletion. You can delete any entry in the app; deleting your account removes your entire diary along with the rest of your server data (see "Data retention and deletion").

The camera is optional: you can always log food from your photo library or by typing a description. AI estimates can be inaccurate — the app lets you review and correct every entry.

Analytics (opt-in only)

The app can send anonymous usage events (for example, "workout finished") to help us improve it. This is off unless you enable it in Settings, and you can turn it off at any time. When enabled:

• Events are tied to a random install identifier generated on your device — not to your identity.
• No personal data, no workout contents and no health data are included.
• Along with each event, standard technical details are collected: your device model, operating system version, app version and country-level region.
• Events are processed by Mixpanel, our analytics provider, on our behalf.

Purchases and subscriptions

Payments for ShapeMettle Premium are processed entirely by Apple through the App Store; we never see your payment details. To validate purchases and manage subscription status the app uses Adapty, a subscription infrastructure provider, which receives purchase receipts and an anonymous identifier. See Adapty's privacy policy for details.

Third parties

We share data with a small number of service providers, and only to the extent described above: Mixpanel (opt-in anonymous analytics), Adapty (purchase validation), and — if you create an account — the hosting provider that runs our servers and stores synced data on our behalf. All of them process data on our behalf, are bound by their own privacy policies and data-processing terms, and are required to provide the same or equal level of protection for your data as described in this policy. We do not sell your data, and we do not share it with advertisers or data brokers. The app contains no third-party advertising.

Data retention and deletion

• On-device data (workouts, exercises, photos) stays on your iPhone until you delete it in the app or delete the app itself. Unless you are signed in, we never hold a copy.
• Account and synced data (your Apple identifier, name, email or private relay address, synced training data and your food diary — entries, meal photos, nutrition targets and AI advice) are kept for as long as your account exists. Deleting your account in the app's Settings removes the account and the server copy of your data within 30 days; we also invalidate the Sign in with Apple connection. Data may persist longer in encrypted backups for a limited period, after which it is purged, and we may retain minimal records where the law requires it.
• Analytics events (only if you enabled analytics) are retained by Mixpanel on our behalf. Turning analytics off in Settings stops collection immediately. To request deletion of previously collected events, email support@shapemettle.app — we will delete the events associated with your install where they can be identified.
• Purchase records are retained by Apple and Adapty for as long as needed to manage your subscription and to meet legal and accounting obligations.

Your rights

Depending on where you live (for example, under GDPR in the EEA/UK or CCPA in California), you may have the right to access, correct, delete or restrict processing of your personal data. Most of these rights you can exercise directly: view and edit everything in the app, withdraw analytics consent in Settings, delete all local data by deleting the app, and delete your account together with all synced data in the app's Settings (the right to erasure). For anything else — including deletion of analytics events or an export of your account data (see "Exporting your data") — contact support@shapemettle.app and we will respond within 30 days.

Exporting your data

We provide data export on request: email support@shapemettle.app from the address linked to your account and we will send you a machine-readable copy of your account data — your profile details and your food diary, including entries, nutrition figures and meal photos — within 30 days. Training data stored only on your iPhone is not part of this export, because we do not hold a copy of it.

Photos

If you attach a photo to a custom exercise, the app accesses only the photo you pick. Exercise photos are stored locally with the rest of your training data and are never uploaded. Meal photos taken or picked in the food diary are the exception: they are uploaded to our servers for AI nutrition analysis, as described in "Food diary and AI analysis".

Children

ShapeMettle is not directed at children under 13, and we do not knowingly collect any personal information from children.

Your choices

• Using an account is optional — every training feature works without signing in. The food diary requires an account, because entries are analyzed and stored on our servers.
• Camera access is optional and used only for scanning food — you can always log meals from your photo library or by text instead.
• You can sign out anytime in Settings to stop syncing, and delete your account there to remove the server copy of your data.
• Analytics can be enabled or disabled anytime in the app's Settings.
• All local data can be removed by deleting the app.
• Subscriptions are managed in your App Store account settings.

Changes to this policy

If we change this policy, we will post the updated version on this page with a new "Last updated" date. Material changes will also be noted in the app's release notes.

Contact

Questions about privacy? Email us at support@shapemettle.app.