ShapeGap Privacy Policy
Effective date: September 11, 2026 / Last updated: October 7, 2026
Toshiki Sakuraya (the Operator) explains here how ShapeGap handles your information.
1. Information on your device
No email or password registration is needed. ShapeGap keeps your records and photos in SQLite and app files on your device. The Operator does not store them on a server.
- Age information, including your age range and any birth year entered in an earlier version
- Body measurements and training goals
- Workout and food logs, including pain and readiness entries
- Current, goal and progress photos
- Available equipment and training constraints
The App uses this information to prepare plans and display your records. Progression targets and nutrition calculations follow fixed rules. Readiness is also assessed by fixed rules.
2. Safety health check
A single statement confirms that none of these apply: a doctor has restricted your exercise, you are pregnant, or you are receiving treatment for an eating disorder. The statement appears under the button that creates your plan, and tapping the button confirms it. We do not ask for separate condition or pregnancy entries. The only health-check information saved is its completion time (safetyAttestedAt), kept on your device.
If any of these apply or you have health concerns, consult a doctor and do not use weight-loss settings. You can choose "Do not use weight-loss phases" yourself. This setting is not a health question, and we do not record your reason for choosing it.
3. Photos and comparisons
Photo viewing and comparisons take place on your device. You confirm the comparison between your current and goal photos. Progress photos stay on your device. The exception is a photo you take to review your plan, which is sent with that review only if you have consented to AI design. Your current and goal photos are sent only if you have consented to AI design, when you create a plan or review it (see section 4).
You compare your current and goal photos on your device and confirm six groups: shoulders, back, chest, arms, waist and legs. AI design uses these confirmed visual comparisons. We do not use photos for advertising or tracking.
4. AI plan design and nutrition label reading
Only when you ask for a plan, or for a review with photos, does the App send the following information to OpenAI OpCo, LLC (United States; "OpenAI"). Before anything is sent, the App shows what will be sent and to whom, and asks for your consent.
- Your current and goal photos (the template image if you chose a template)
- Height, body weight (rounded to a whole number), sex, age range and goal
- Questionnaire answers needed to design the plan
- Visual comparisons you have confirmed for six groups: shoulders, back, chest, arms, waist and legs
- Training conditions such as available equipment
- For a review: the photo you take for it, your recent weight trend, the exercises and sets in your current menu, and exercises you want replaced because of pain, a plateau or boredom
Photos are resized on your device and stripped of metadata such as location before they are sent.
We do not send your name, progress photos other than one taken for a review, geometric ratios, contact details, condition names, meal log contents (what and when you ate) or step counts. Nutrition label photos are sent only when you use the label-reading feature described below.
Requests pass through the Operator's relay server, which runs on services provided by Cloudflare, Inc. (United States). The relay does not store request or response content such as photos or body measurements. To answer a repeated request, it may keep a finished plan in memory temporarily. The plan is reused for up to 24 hours and is cleared when later requests are handled or the server restarts.
The first time you create a plan or read a nutrition label after consenting, the relay creates an anonymous guest account. It stores only:
- information that identifies the account (a hash of its credential)
- your usage count
- key information that confirms requests come from the genuine app (App Attest)
These are used to manage usage limits and prevent abuse. To stop accounts from being created in bulk, the relay also keeps a daily code derived from your IP address and the number of accounts created with it. These records do not contain the IP address itself. Records older than the previous day (UTC) are deleted by an hourly cleanup or when an account is created. To limit bursts of requests, the relay also passes your IP address (the first 64 bits for IPv6) to Cloudflare's rate-limiting feature, which counts requests. Records that prevent the same request from being sent twice (hashes of the content) are deleted by an hourly cleanup once they are 24 hours old.
If you do not consent, nothing is sent and no guest account is created. Consent is required to create your first plan and to review a plan with photos. You can change training days, frequency and session length without it. You can withdraw consent from your profile or plan settings.
By default, OpenAI does not use data received through its API to train its models. It normally keeps request and response content for up to 30 days to monitor abuse, and may keep it longer when the law requires it or when needed to prevent harm. Content flagged as possibly breaking its usage policies, including images, may be kept and reviewed by people. See OpenAI's explanation for details.
A plan takes effect only with your approval and cannot change without your consent.
Nutrition label reading
When you take or choose a photo of a food's nutrition label while logging food, the App sends it to OpenAI to read the nutrition values only if you have given the same AI consent used for plan design. Consent is checked again immediately before sending. The photo is resized before it is sent through the Operator's relay server on Cloudflare. The relay does not store or log the photo or the values read from it. OpenAI handles this data as described above in this section.
The App does not save the label photo. Only the nutrition values you review and save remain in your on-device food log. Without consent, after you withdraw consent or when offline, the photo is not sent and the label is read only on your device. If AI reading fails, the App uses the on-device result; the photo may already have been sent by then. This uses Apple's on-device text recognition and, on supported devices, Apple Intelligence. Both process the photo entirely on your device.
5. HealthKit
With your permission, ShapeGap reads step counts from HealthKit. Steps are used for target calculations on your device and are never sent to an external service. The App does not write to HealthKit.
You can change access in Apple's Health settings.
6. Usage analytics
We use PostHog to improve the App. It receives an anonymous ID and interaction events such as screen views or button taps. Body measurements and photos are excluded. We also exclude food contents and health answers.
You can opt out in the App's settings. Opting out stops future analytics events. Health data is never used for advertising or tracking.
7. Purchases
RevenueCat receives purchase receipts and an anonymous ID to check subscription access. Apple processes payments through the App Store. The Operator does not receive your card number.
Apple handles cancellation and refund requests. Deleting your App data does not cancel an automatically renewing subscription.
8. Export and deletion
You can export records in the App. The delete-all control removes records and photos stored by the App on your device, including thumbnails and other files derived from them.
Files you have exported to your photo library or shared elsewhere remain in those locations. Delete those copies separately. This does not erase billing records held by Apple or information independently retained by external providers. Contact the Operator for help with requests concerning externally held data.
Delete all also removes drafts, derived observations, temporary sharing files and scheduled notifications. It deletes any guest account created for you and its server-side usage allowance. If server deletion fails, credentials are retained so you can retry.
Plans do not transfer to a new device. Export lets you take a copy of your data; it does not restore plans.
9. Providers and retention
Local records remain until you delete them. The Operator does not provide cloud sync.
External services and their roles: OpenAI designs plans and reads nutrition labels, Cloudflare runs the relay server, PostHog handles usage analytics and RevenueCat manages purchase status. All four are based in the United States. Retention periods and processing locations follow each service's terms. The Operator requires each service to protect personal data to the same standard as this policy.
Under Japan's Act on the Protection of Personal Information, these transfers count as providing personal data to third parties in a foreign country (the United States). The United States has no comprehensive personal data protection law; protection comes from laws for particular sectors and similar rules. For details, see the report by Japan's Personal Information Protection Commission (in Japanese).
Each recipient publishes the safeguards it applies: OpenAI in how it handles API data, Cloudflare in its privacy policy, PostHog in its privacy policy and RevenueCat in its privacy policy.
If you contact support, we use your message and reply address to respond. You do not need to include body photos or condition names in a support request.
10. Age requirement
You must be at least 18 to use ShapeGap. We ask you to select your age range and do not collect a new date of birth. A birth year entered in an earlier version may still be stored on your device.
11. Changes and contact
Updates to this policy will appear here. We also announce material changes in the App. Contact the Operator about access, correction or deletion rights under applicable law.
Operator: Toshiki Sakuraya
rebirth.sakuraya@gmail.com