Privacy policy

Fit Shapes is a calorie and macro tracker for iPhone. This policy describes what the app and this website collect, why, who we send it to, and what you can do about it.

It describes what is true today. Where the app does not do something — advertising, analytics, tracking — this policy says so plainly rather than reserving the right in case it changes later. If that changes, this page changes first.

Who we are

Fit Shapes is operated by Sam Solomon, an individual, at 3423 Piedmont Rd NE, Atlanta, GA 30305. For the purposes of the UK and EU GDPR, we are the data controller for the information described here.

Questions about this policy, or a request about your data, go to privacy@fitshapes.com.

The short version

• We collect an account identifier, the health and nutrition information you enter or connect, your subscription status, and the ordinary technical records our hosting providers keep.
• We do not use advertising, third-party analytics, or tracking of any kind. There is no advertising SDK, no analytics SDK, and no cross-app or cross-site tracking in the app or on this site.
• We do not sell or share your personal information, in the ordinary sense or in the specific sense those words carry under California and other US state privacy laws.
• Meal photos and food descriptions are analyzed and then kept on your device only, for up to 30 days. We do not store them on our servers.
• Voice input is turned into text on your iPhone. Fit Shapes does not record or send audio.
• You can export your history from the app, bring your history in from another app, and delete your account and its data from inside the app.

What we collect

Account information

• Your email address, or the private relay address Apple gives us if you sign in with Apple and choose to hide your address.
• Your name, if Sign in with Apple passes it to us, and a display name if you set one.
• An internal account identifier.

What you log and tell us

This is the substance of the product, and you enter almost all of it deliberately.

• Personal details used to calculate your targets: sex, date of birth, height, activity level, unit preference, and time zone.
• Goals and targets: your goal direction and rate, diet and protein preferences, calorie and macro targets, and the history of how those targets have changed.
• Food entries: the food name, brand, portion, category, nutrition values, and the date and time you logged it. Saved, recent, and frequently used foods.
• Body measurements: weight entries and the values behind them.
• Workouts, where you log them.
• Check-in history: when you last completed a weekly check-in, and the record of it.
• Founding Membership, if you have one: your member number, the date you joined, and the finish you chose for your member card.

Most of this is health information, and some of it is treated as a special category of personal data under the UK and EU GDPR. We handle it as sensitive throughout, and we do not use it for any purpose beyond running the app for you.

Your subscription

Fit Shapes is a subscription, bought through Apple. When you start a free trial or subscribe, Apple handles the payment. We never receive your card or bank details. Apple tells our subscription provider, RevenueCat, and RevenueCat tells us:

• whether you have access, and whether it comes from a trial, a paid subscription, or free access we gave you;
• which plan you chose, and when it renews or ends;
• the store’s transaction identifier for the subscription, and whether it was a test purchase.

RevenueCat links this to your internal account identifier. It does not receive your email address, your name, or anything you log.

Apple Health

If you connect Apple Health, and only if you grant permission on your device, Fit Shapes reads weight, body fat, and active energy, so numbers you have already recorded elsewhere do not have to be logged twice. Fit Shapes does not write anything to Apple Health.

You control this in the Health app’s privacy settings, and you can withdraw it at any time. Weight and body fat imported from Apple Health are stored alongside the rest of your log. Active energy is used on your device to show what you burned today; we do not store it on our servers. Data read from Apple Health is never used for advertising and is never sold.

Meal photos and food descriptions

There are two ways to have Fit Shapes estimate a meal: photograph it (a meal, or a nutrition label), or describe it in words, with up to three photos if you like. Either way, what you submit leaves your device: the photo, or the description and any photos you add, is sent to our analysis provider, which returns an estimate of the food and its nutrition. It has to, because that is how the estimate is produced. If you ask for a correction, your correction and the earlier estimate are sent too.

What happens to it after that:

• We do not store it. Photos and descriptions are never written to our database. The only copy we keep is the one on your own device, so you can correct an entry against what you actually ate, and that copy is automatically deleted after 30 days. Deleting the entry, or the app, removes it sooner.
• Our analysis provider holds it briefly. It does not use API submissions to train its models by default, and retains them for a limited abuse-monitoring period — up to 30 days under its standard terms — after which they are deleted. See “Who we send it to” below.
• The resulting estimate — the foods and their nutrition — is saved with the log entry, because that is the entry.

Data you import

You can bring your history in from MacroFactor, Cronometer, Lose It!, Cal AI, or MyFitnessPal. When you choose an export file from one of those apps, the app uploads it to our server, which reads it and saves the food entries and weigh-ins it contains to your log, marked as imported. We do not store the file itself: it is read in memory and discarded. No other service receives it.

Data you export

Export data in the app builds one CSV file of your history on your iPhone and opens the share sheet, so you decide where it goes. We do not receive a copy.

Voice input

When you describe a meal, you can speak instead of typing. Your iPhone turns your speech into text on the device, using Apple’s on-device speech recognition. Fit Shapes does not record audio, does not save it, and does not send it anywhere. Only the resulting text is part of your description. If your iPhone cannot recognize speech on the device, voice input is not offered.

Founding Membership

If you are a Founding Member, the member who invited you, and the members you invited, can see your display name, member number, and the date you joined. Nobody else can. Members who join through the app have no inviter.

Messages you send us

When you use Contact support or Send feedback in the app, we receive what you write, any photos you attach (up to three), and the app’s recent diagnostic log for your account (see “On your device”). The message also carries your app version, your iPhone’s system version, language, and time zone, the screen you sent it from, and your subscription status, so we can answer without asking you for them. A person reads every message. We reply by email to the address on your account; if you hid your email with Sign in with Apple, the reply goes to Apple’s relay address.

On your device

Some things are kept only on your iPhone and never sent to us:

• Meal photos, and food descriptions with their photos, for 30 days (see above).
• Scans that are still being analyzed, until they finish or you discard them.
• A diagnostic log the app writes when something goes wrong. It is tagged with your account identifier so we can match it to a report you send, and email addresses and sign-in tokens are removed from it. It leaves your iPhone only inside a message you send us, and then only the records for your account (see “Messages you send us”).

The app also uses your iPhone’s camera (to scan food and barcodes), your photo library (only the pictures you choose), and motion (so your member card responds to how you hold your phone). Motion data is not stored or sent.

Service records

• Analysis usage records: which model ran, how long it took, how many tokens it used, and whether it succeeded. These enforce a daily limit and let us watch cost and reliability. They record the shape of a request, not the content of your food, your description, or your photo.
• Technical logs kept by our hosting providers in the ordinary course of serving requests, which include IP addresses and timestamps.
• Diagnostic records the app writes when something goes wrong. These stay on your device and are not sent anywhere automatically (see “On your device”). A message you send us includes your account’s recent records.

This website

This site is static and serves no advertising. It sets no cookies and runs no analytics or tracking scripts. Our hosting provider keeps standard server logs of requests, as above.

What we do not collect

To be explicit, because the absence is the point:

• No advertising identifiers, and no advertising.
• No third-party analytics, product analytics, or session-recording tools.
• No cross-app or cross-site tracking, and no data brokers.
• No location data, contacts, or calendar.
• No audio. The microphone is used only for voice input, which becomes text on your iPhone.
• We do not respond to browser Do Not Track signals, because there is nothing on this site for them to turn off.

Why we use it, and on what legal basis

What for	Legal basis (UK/EU GDPR)
Creating and running your account	Performance of a contract with you
Calculating your calorie and macro targets, and showing your log and trends	Performance of a contract with you
Analyzing a meal photo, label, or description you submit	Performance of a contract with you
Checking your subscription, and selling and renewing it through Apple	Performance of a contract with you
Showing your Founding Membership to the members connected to it	Performance of a contract with you
Reading from Apple Health	Your consent, given on your device
Processing health information generally	Your explicit consent, given when you enter it
Keeping the service secure, preventing abuse, and enforcing usage limits	Our legitimate interests in operating a safe service
Fixing faults and improving how the app works	Our legitimate interests in improving our product
Meeting legal obligations, and establishing or defending legal claims	Legal obligation, or our legitimate interests

We do not use your information to profile you for advertising, and we do not make automated decisions about you that produce legal or similarly significant effects.

We do not use your food log, your photos, or your health data to train artificial intelligence models.

Who we send it to

We use a small number of service providers. They process your information on our instructions and for no purpose of their own.

Provider	What they handle	Where
Supabase	Database, authentication, and server functions — your account, everything you log, the files you import (read and not stored), and the messages, photos, and diagnostic logs you send us	United States
OpenAI	Analysis of meal photos, nutrition labels, and food descriptions	United States
RevenueCat	Subscription status and purchase history from the App Store, linked to your account identifier	United States
Apple	Sign in with Apple, App Store and TestFlight distribution, subscription payments, and Apple Health on your own device	United States and elsewhere
Cloudflare	Hosting for this website	Global edge network

On analysis specifically: our provider does not use data submitted through its API to train its models by default, and retains it for a limited period for abuse monitoring — up to 30 days under its standard terms — after which it is deleted.

When you search for a food or scan a barcode, the search terms or the barcode are sent from your device to public food databases — USDA FoodData Central and Open Food Facts — to find matching entries. Your account identifier is not sent with those requests.

We may also disclose information where the law requires it, to enforce our terms, to protect someone’s safety, or in connection with a sale or transfer of the business. If that last one ever happens, this page will say so before it takes effect.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as California’s privacy law defines those terms. We have never done so.

Where it is stored

Your account and log are stored in the United States. If you use Fit Shapes from the United Kingdom, the European Economic Area, or Switzerland, your information is transferred to the US and to our providers there. Where those transfers require a safeguard, we rely on the European Commission’s standard contractual clauses, and the UK addendum where it applies.

How long we keep it

• Your account and log: until you delete them. We do not expire your history — the point of the product is that it is still there in a year.
• Meal photos and food descriptions: 30 days on your device, then deleted automatically.
• Analysis usage records: retained while your account exists, and removed with it.
• Subscription records: retained while your account exists. Deleting your account deletes our record and RevenueCat’s. Apple keeps its own record of the purchase under its own policy.
• Messages you send us: the message, its photos, and its diagnostic log are kept while your account exists, and removed with it. Our email conversation with you stays in our support mailbox while it helps us support you, and we delete it if you ask.
• Provider technical logs: for the limited retention period each provider applies.

Deleting your account deletes your profile, food entries and weight entries (including the ones you imported), workouts and routines, saved foods, goals and targets, Apple Health connections, Founding Membership, analysis usage records, the messages you sent us with their photos and logs, and your subscription record, at Fit Shapes and at RevenueCat. Deleting your account does not cancel an Apple subscription: cancel it in your App Store account settings first. It also deletes the photos, descriptions, and diagnostic log on that iPhone. Member numbers are never reused. Backups are overwritten on their ordinary cycle.

Your rights

Wherever you are, you can:

• Get a copy of everything you have logged: use Export data in the app, or write to the address above.
• Correct any entry, at any time — editing and deleting entries is a normal part of using the app.
• Delete your account and its data, from inside the app. If you cannot open the app, write to us at the address above and we will do it for you.

If you are in the UK, the EEA, or Switzerland, you also have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time — withdrawal does not affect processing already carried out. You have the right to complain to your local supervisory authority, and we would rather you came to us first so we can fix it.

If you are in California or another US state with a privacy law, you have the right to know what we collect and why, to access and delete it, to correct it, and not to be discriminated against for exercising those rights. Because we do not sell or share personal information, and do not use sensitive information for purposes that require an opt-out, there is no “Do Not Sell or Share My Personal Information” link to provide. You may use an authorized agent, and we will verify the request through your account.

If you are in Washington or Nevada, our consumer health data privacy policy describes your additional rights over health data.

To exercise any of these, use the in-app controls or write to privacy@fitshapes.com. We respond within the period the applicable law requires.

Security

Every row of your data is protected by database-level access rules that tie it to your account, so one account cannot read another’s. Data is encrypted in transit and at rest, and access to production systems is limited.

No system is perfectly secure, and we will not claim otherwise. If a breach affects you, we will notify you and the relevant regulator as the law requires.

Children

Fit Shapes is for adults. You must be 18 or older to use it, and we do not knowingly collect personal information from anyone under 18. Tracking calories and body weight is not appropriate for everyone, and it is not designed for children or teenagers.

If you believe someone under 18 has given us personal information, write to us and we will delete it.

Changes

If we change this policy, we will update the date at the top of the page. If a change materially affects what we collect or who we send it to, we will say so in the app before it takes effect.

Contact

privacy@fitshapes.com Sam Solomon, 3423 Piedmont Rd NE, Atlanta, GA 30305