Privacy policy

Welcome to Shape Calendar (under sole trader Samuel Kraft) ("we", "our", "us")! We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the service.

1. Information We Collect

• Personal Information: When you register for an account, we may collect personal information such as your name and email
• Activity Data: If you choose to connect to third party providers (e.g. Garmin Connect, Wahoo, Apple Health, Intervals.icu etc.), we will collect activity data from those provider(s), including workout details, performance metrics, and other activity-related information.
• Health Data: If you choose to connect Garmin Connect, Apple Health or Intervals.icu, we will also collect daily health metrics from those provider(s), including sleep duration, resting heart rate, heart rate variability (HRV), stress level, Body Battery, and step count. This data is stored to display your own health trends back to you within the app.
• Usage Data: We collect information about your interactions with our app, such as the features you use, the time and date of your visits, your IP address, device and browser type, and other diagnostic data.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• To provide and maintain our app and its features
• To sync your workout activities from third parties
• To personalize your experience and improve our app
• To generate insights and workout suggestions
• To enable the "Calendar sync" feature, allowing you to share your workout activities with your personal calendar
• To enable the "Sync to Device" feature, allowing you to sync your planned workouts to your fitness devices
• To communicate with you, including sending updates and notifications
• To monitor and analyze usage and trends to improve our app
• To comply with legal obligations

3. How We Share Your Information

We do not sell or rent your personal information to third parties. We may share your information with:

• Service Providers: We share your information with service providers who process it on our behalf to run the app, in these categories:
  • Hosting, file storage and database (all app data)
  • Background processing, such as device sync and imports (the activity and health data being processed)
  • Analytics and error tracking (usage data, and the inputs and outputs of in-app AI features)
  • Email delivery (your name, email address and the emails we send you)
  • Payments and subscriptions (purchase and subscription status; card details go to the payment provider and never reach us)
  • Maps (the route of an activity you view on a map)
  • AI providers, listed below (1)
  Contact us for the current list of providers.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• AI: When you enable AI features and explicitly trigger them (e.g. requesting a generated workout or a training overview), relevant activity and health data (which may come from Garmin, Apple Health or Intervals.icu) is sent to AI providers (1) to generate the response. If you turn on the AI coach, your recent training, health metrics, goals and coach memory are sent to an AI provider on a schedule so the coach can message you; you can turn the AI coach off in Settings, Coach. We may read your conversation with the coach when you ask us for help, or to look into a problem with the coach. Otherwise your data is never shared with AI providers automatically or in the background. It will never be used for model training as per our terms with these providers.
• Connected Applications: You can authorize third-party applications and tools of your choice (including AI assistants) to access your Shape data. Access starts only when you approve it on our consent screen, which shows what it will be able to do, or when you create an API token for it yourself. You can revoke access at any time in Settings, API access. We don't control how an application processes data once it has it; that is covered by the application provider's own privacy policy (for example OpenAI for ChatGPT).
  • What it can read: your Shape data, including your workouts (with routes and recorded data such as heart rate), health metrics, training status and profile. Some of this may come from services you've connected to Shape.
  • What it can change: when you ask it to, it can add, change and delete your Shape data, such as workouts and profile details. Planned workouts can reach your device if you turned on Sync to Device.
  • What we receive from it: only the parameters of each request, such as a date range or the workout you asked for. We do not receive your conversation history.
  • What we log: for each request, the tool name, time, duration, whether it succeeded, and the name of the application. Never the parameters or the results.
• Calendar Sync Feature: If you enable the calendar sync feature, the link generated will contain your workout activities and can be accessed by anyone with the link. Only share it with trusted individuals.

4. Data Retention

• Your account, training, health and coach data, and your connections: until you delete them or your account
• Photos you send the coach: stored privately, used only to answer that message, and deleted after 7 days
• The phone number you pair with the coach: kept as a one-way hash after you delete your account, used only so a number gets one free coach trial
• Logs, temporary files and in-app AI request contents: up to 30 days
• Usage analytics: up to 7 years
• Billing records: as long as tax and accounting law requires

When you delete your account, we delete your data right away, except the hashed phone number above, and revoke our access to your connected services.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure.

6. Third-Party Services

Our app may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

7. Your Rights and Controls

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data. To exercise these rights, please contact us at contact[at]shapecalendar.com. You can also, at any time:

• Delete your account in Settings, General on the web, or in Settings in the iOS app
• Edit or delete any activity, goal or coach memory in the app
• Disconnect a device service in Settings, Connections
• Disconnect an AI assistant or app in Settings, API access
• Turn off AI features in Settings, AI, and the AI coach in Settings, Coach
• Turn off Calendar sync in Settings, Calendar sync
• Unsubscribe from emails in Settings, Notifications, or from any email

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact[at]shapecalendar.com.