Privacy Policy

Last updated: September 24, 2026

The short version

Your progress photos and history are yours. They stay free and accessible for as long as you use ShapeTrack — Pro unlocks new analyses, never your past.

We do not sell your data, we do not run ads, and nothing about your body is ever shared with other users.

What we collect

Progress photos you upload for a scan (front, side, back), the measurements and weights you log, and the estimates our scans produce.

If you choose to: cycle data, daily logs (energy, mood, notes), a display name, and an optional email for account recovery.

A random device identifier acts as your account — no password, no profile. Optional daily photos you take in the log screen never leave your phone.

How we collect it

Scan photos are collected only inside the app, when you capture or import them and then choose “Analyze with Coach”. Measurements, weights and daily logs are collected only when you type them in and save. Nothing is collected in the background, and the camera opens only when you start a scan.

How we use it

Your data is used to build your body map, trend lines, transformation views, and coach answers — and for nothing else. There are no third-party trackers and no advertising SDKs.

AI processing & sharing

ShapeTrack uses OpenAI (ChatGPT) as its AI provider. Two features send data to OpenAI’s servers for processing:

Scan analysis. The three photos of the scan you chose to analyze are uploaded to our server and sent to OpenAI to generate your measurements and estimates. The app asks for your clear permission the first time you analyze a scan, and tells you on every scan that photos are sent to OpenAI. Only the photos of that scan are sent — never your name, email, or photos from other scans.

Coach chat. When you send a question, your question, your recent conversation, and anonymized body numbers (approximate age, height, goals, and scan metrics — no name, no email, no photos) are sent to OpenAI to generate the reply. This is disclosed in the Coach screen.

Under OpenAI’s API terms, content sent through the API is not used to train OpenAI’s models and is deleted from OpenAI’s systems within 30 days. We only share data with service providers whose contractual terms offer the same or equal protection as this policy, and OpenAI processes this data solely to provide the service we requested.

Face data

Some progress photos uploaded or captured by users may contain their face. We process these images only to provide the app’s body scan, AI analysis, and historical progress features.

We do not create or use facial recognition profiles, facial templates, facial embeddings, or other biometric identifiers to identify or authenticate users.

For AI scan analysis, the selected photos are securely transmitted through our backend to OpenAI for processing and generating the requested measurements and estimates. We do not sell face data or use it for advertising, marketing, user profiling, identification, authentication, or tracking.

Progress photos are stored securely on our backend servers so users can access their previous scans and historical progress. Photos are retained until the user deletes them.

Users can delete all progress photos from the Settings section. Deleted photos are removed from our servers within 24 hours. Users can also delete their account, which removes their account and associated data, including photos.

We do not use face data for any purpose unrelated to providing the features described above.

Payments

Purchases are processed by Apple. We use RevenueCat to check your subscription status. Card details never reach our servers.

Storage & security

Photos are stored on our servers and served only through authenticated, token-signed requests — never from public, guessable, or indexed URLs. Access requires the unique token issued to your device.

What we never do

Sell or rent your data. Show ads. Rank bodies. The optional community board only ever shows consistency — weeks of showing up — and only if you join it yourself.

Your controls

“Delete all photos” in Settings removes every progress photo from our servers within 24 hours. “Delete account” in Settings goes further: it removes your account and everything in it — photos, measurements, logs, and coach history — right away.

Retention

We keep your data only until you delete it. If an account stays inactive for an extended period, we may clean up associated photos; your in-app deletion always takes priority.

Age requirement

ShapeTrack involves body photos and is intended for adults only. You must be at least 18 years old to use the app.

Not medical advice

ShapeTrack gives motivational estimates, not medical diagnosis. Nothing in the app should replace a qualified professional’s judgment.

Changes & contact

If this policy changes materially, we will say so in the app before it takes effect. Questions? Reach us through the ShapeTrack support page.