Privacy policy

What we collect

• Account: your email, name, username and a securely hashed password. If you sign in with Apple, Google or Discord we store that account's ID and, when the provider has verified it, your email (with Apple this may be a private relay address), plus your Discord or Google avatar and username.
• Training data: workouts, sets, plans, records, goals and anything you choose to log, like body weight and measurements.
• Optional profile details from onboarding (age, sex, height, goals, experience). All optional.
• Security data: for each signed-in device we store the browser or phone model and IP address so you can review and sign out sessions.
• Push notifications (apps): if you allow notifications, we store a push token for your phone so we can send training reminders. Messages are delivered through Expo, Apple and Google. Turn them off any time in the app's Settings.
• Activity log: a record of account events — sign-ins (including failed attempts), sign-ups, password and account changes, completed workouts and use of the AI coach — with the IP address and browser type. It's used only to keep accounts secure and investigate problems, is visible only to our administrators, and is deleted after 90 days or when you delete your account.
• AI coach conversations: if you use the coach, your messages are stored in your account. To write replies, your messages and relevant parts of your profile and training history (goals, experience, equipment, current plan, recent best lifts) are sent to our AI provider, Anthropic, which processes them on our behalf and doesn't use them to train its models.
• Feedback: anything you send through the feedback form or pop-up, with the page you were on and your browser type, so we can follow up and fix things. It's deleted with your account.
• How you found us: when you first visit, we note where you came from — the site that linked to us (for example Reddit or Google), any campaign tag in the link, or a friend's invite — in a first-party cookie, and save it on your account if you sign up. It helps us see which places people discover Get Shredded; it isn't shared with anyone.
• Payments: if you buy Pro, a programme or a gift, the payment is handled by Stripe (website), Google Play or the App Store — we never see or store your card details. We keep a record of what you bought, your subscription status and renewal date, and for gifts the code and any recipient name or message you add.
• Invites: if you join through a friend's invite link, your account is linked to theirs so you can both receive the invite reward. They see how many of their invites have joined and trained, not your details.
• Product analytics: first-party events such as "workout completed" with non-personal properties (for example, how many sets). No names, emails, body metrics or free text.

Why

To run the app: store your training history, calculate progress, records and XP, keep your account secure, and improve features. We don't sell your data and we don't use advertising trackers.

Cookies and storage

We use one essential cookie to keep you signed in on the website, plus two first-party cookies before you sign up: one remembering how you found us (up to 90 days) and one remembering a friend's invite (up to 30 days); the iOS and Android apps keep your sign-in in the phone's secure keychain instead. Your in-progress workout is kept on your device so it survives losing signal. No third-party advertising or tracking cookies.

Who can see your data

You. Profiles, workouts and measurements are private by default, and if social features launch, sharing will be opt-in. Our administrators can see account details and the activity log when they need to support you or keep the service safe, and every administrator action is itself logged.

Where it's stored

On servers we operate in the UK, with encrypted off-site backups. Email for password resets is sent through our mail provider.

How long we keep it

For as long as you have an account. Delete your account from Settings and your data is removed immediately from the live database; backups roll off within 60 days.

Your rights

Under UK GDPR you can access, correct, export or delete your data, and object to processing. Delete your account any time in Settings; for anything else email [email protected].

Health information

Body measurements you log may be health-related. They're used only to show you your own progress and are never shared.

Apple Health and Health Connect

In the iOS and Android apps you can choose to connect Apple Health (iPhone) or Health Connect (Android). With your permission the app saves finished workouts there, and reads the heart rate and active calories recorded during your workouts (for example by a smart watch) and your body-weight readings. Heart rate and calories are only shown to you inside the app and stay on your phone — they're never sent to our servers. Body weight is sent to your Get Shredded account only if you turn on “Import body weight”. Health data is never used for advertising, never sold, and never shared with anyone. You can revoke access at any time in the Health app or Health Connect settings.