Last updated: 13 Aug 2026

Privacy Policy

Shapier provides a nutrition, health, and training tracking service. This policy describes processing related to the public website, web application, and mobile application. For questions about your data, email privacy@shapier.app.

Document navigation

Jump directly to a section

Data processed

Depending on the features used, Shapier processes account and profile data (name, email address, user identifier, gender, date of birth, and preferences), health, fitness, and nutrition data (height, weight, hydration, goals, meals, and workouts), Coach relationship data (roles, invitations, consent settings, assigned programs, schedules, private messages, replies, and check-ins), and Meals data (household size, budget, available time, preferences, declared allergies and exclusions, meal plans, recipes, and shopping lists). Photos, audio recordings, notes, captions, and comments may also be added by the user in features that offer them. Food searches and barcodes may be transmitted to look up a product. Technical events, error and crash logs, and a pseudonymous identifier may be processed to operate and monitor the service.

Purposes

This data is used to create and authenticate the account, provide and personalize selected features, calculate goals, display histories, store journals and media, organize authorized private exchanges between a coach and client, generate and adapt meal plans and shopping lists, answer product searches, provide support, limit abuse, secure the service, diagnose incidents, and measure use of the public website. Optional features such as photos, audio, or scanning are used only when the user chooses to activate them.

Service providers and recipients

In Shapier Coach, the linked coach and client can each access the data needed for their private relationship according to their role, active permissions, and recorded consent; these exchanges are not distributed through a public feed. To provide the other features, data may be accessed by people authorized to operate Shapier and transmitted, as needed, to the following categories: cloud hosting, database, authentication, and storage; API infrastructure, rate limiting, security, and monitoring; public-site audience measurement; public food product databases for searches and barcodes; and device or operating-system services activated for voice recognition. In the planned configuration, these categories include Supabase, Vercel, Cloudflare, and Open Food Facts. Data may also be disclosed to an authority when required by law. The role, contractual safeguards, processing regions, and transfers of each provider remain to be confirmed in the provider register before production release.

Storage and Security

Network exchanges configured by Shapier use HTTPS/TLS for encryption in transit. Authentication, access controls, and database and storage policies restrict access to the data. Some authorized service providers nevertheless need to process data to provide the service. No security measure eliminates all risk.

Retention and deletion

Data linked to the account is kept while the account is active and for as long as needed to provide requested features, ensure security, or meet an applicable obligation. A deletion request covers the account and associated active data, except for information that must be retained for a clearly explained legitimate reason. Exact periods and procedures for backups, security and monitoring logs, and copies held by service providers remain to be finalized and documented; this data may therefore persist for a limited technical period after active data is deleted.

Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your data, or object to certain processing. You may also lodge a complaint with the competent supervisory authority. Email privacy@shapier.app; Shapier may request information needed to verify your identity. The public deletion pathway separately lets you request deletion of the account and its associated data.

Public website and audience measurement

The public website loads Ahrefs Web Analytics, a third-party audience measurement service. When it loads, this provider may receive technical connection and usage data, including the IP address, browser and device information, visited page, referrer, timestamp, and an inferred approximate location. Shapier may also send navigation and interaction events limited to the page path, without query parameters or fragments, to a configured measurement endpoint. The exact use of cookies or identifiers, transformations, retention, and onward transfers depend on the provider and production configuration and remain to be confirmed before production release.

Contact

Shapier is the contact point for the processing described in this policy. To exercise a right, report a privacy issue, or request details about providers and retention, email privacy@shapier.app. To delete a Shapier account, also use the public account-deletion pathway.

Your data, your decision

Exercise a right or ask a question.

For any request about your data, write directly to the privacy address. The dedicated pathway separately lets you request deletion of your Shapier account and its associated data.

Email privacy Delete a Shapier account