Shed Privacy Policy

Effective: May 5, 2026

This privacy policy describes how Shed ("we", "us", "the app") collects, uses, and protects your information when you use the Shed iOS application.

What We Collect

Shed collects only the information you choose to enter or sync. This includes:

• Account information: email address and password (used solely for sign-in).
• Health and fitness data you log in the app: medication injections, weight, body measurements, water intake, food and meals, exercise, side effects, vitals (blood pressure, heart rate, blood sugar), and weight goals.
• Profile information you provide: height and daily water goal.
• Apple Health data you authorize us to read: nutrition data (calories, protein, carbohydrates, fat, sugar), weight, steps, active energy, and resting heart rate. We only read data types you explicitly authorize via the Apple Health permission sheet.

We do not collect device identifiers, advertising identifiers, location data, contacts, photos, or any data not directly related to the tracking features you use.

How We Use Your Information

• To display your tracked data back to you within the app (charts, lists, dashboards).
• To sync compatible data (weight, vitals, nutrition) with Apple Health, if you grant permission.
• To compute summaries such as BMI, weight-loss totals, calorie totals, and shot streaks.
• To send local notifications reminding you of your next scheduled shot, if you grant notification permission.

We do not use your data for advertising, marketing, profiling, or analytics. We do not sell your data.

Apple Health (HealthKit)

Information that Shed reads from or writes to Apple Health is stored on your device and in your iCloud Health database, as configured by Apple. In accordance with Apple's HealthKit policies:

• We do not use HealthKit data for advertising or any data-mining purposes.
• We do not share HealthKit data with any third party.
• We only access HealthKit data types that you explicitly authorize.

How Your Data Is Stored

Tracking data you enter (other than data confined to Apple Health) is stored in our backend, hosted by Supabase. Supabase acts as our data processor. Each user's records are protected by row-level security so only you can read or modify them.

Third-Party Services

• Supabase — backend storage and authentication. Supabase privacy policy.
• Apple HealthKit — health data sync, on-device.
• USDA FoodData Central — public food nutrition lookup. We send only the search query (e.g. "egg") and never any personal information.
• Open Food Facts — public barcode lookup. We send only the scanned barcode and never any personal information.

Your Rights

• Access: you can view all your data inside the app at any time.
• Export: you can export all your data as a JSON file from the More tab.
• Deletion: you can delete any individual entry from within the app. To delete your entire account and all associated data, email us at the address below; deletion will be completed within 30 days.
• Revoke Apple Health access: any time, in iOS Settings → Health → Data Access & Devices → Shed.

Children's Privacy

Shed is not directed to children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy. The effective date at the top will reflect the most recent revision. Material changes will be communicated in-app on next launch.

Contact

Questions, deletion requests, or concerns: support@shedwithglp1tracker.com