Effective date: October 12, 2026 · Last updated: October 15, 2026
This Privacy Policy explains how ANA Enterprises LLC, doing business as Shredify ("Shredify," "we," "us"), collects, uses, shares and protects personal information when you use getshredify.com and the Shredify apps (the "Service"). It also explains your choices and rights.
The short version
- We collect what we need to run a fitness app: your account, your training and nutrition logs, and the body stats you give us.
- Your before/after photos are private by default and encrypted. Nobody else sees them unless you share them.
- We don't sell your personal information, we don't use it for targeted advertising, and we don't run ad trackers in the app.
- We don't collect your location from your device (no GPS).
- Shredify is 18+ only.
- You can export or delete your data at any time in Settings.
If you live in Washington, Nevada or Connecticut, also see our Consumer Health Data Privacy Policy.
1. Information we collect
a) Information you give us
| Category | Examples |
|---|---|
| Account and identity | Email address, password (stored hashed), username/display name, date of birth (to confirm you're 18+), optional profile photo |
| Body and profile stats | Sex, age, height, body weight, goal, experience level, available equipment, training schedule, your goal for each arc |
| Health and fitness data | Workouts, sets, reps, weights, PRs, estimated 1-rep maxes, strength ranks, streaks, weigh-ins, body measurements (if entered), food and drink logs, calories and macros, notes |
| Photos and video | Meal photos (for food logging), before/after progress photos, proof videos (for verified ranks and badges), share cards you create |
| Social content | Friends and follows, squads, kudos and reactions, comments, challenge entries, leaderboard participation, reports you file |
| Gym partner code | Which partner gym's code you redeemed, and whether you joined that gym's leaderboard |
| Purchases | Plan, price, purchase and renewal dates, subscription status. Square processes payments; we receive a payment token, the card brand, the last 4 digits and the expiry, never your full card number |
| Communications | Support emails, feedback, survey answers |
b) Information collected automatically
| Category | Examples |
|---|---|
| Device and log data | IP address, browser and device type, operating system, app version, time zone and language settings, timestamps, error and crash logs |
| Usage data | Screens viewed, features used, buttons tapped, session length (through privacy-respecting product analytics) |
| Push and notification data | Push notification tokens and notification preferences |
| Cookies and local storage | Essential cookies and local storage to keep you signed in, save workouts offline and remember settings, plus analytics cookies (see Section 8) |
c) What we don't collect
- No precise or approximate location from your device (no GPS or location permission). Country leaderboards use the country you choose. Our hosting and security providers process IP addresses, which can reveal a general area. We don't use IP addresses to track your location.
- No contacts, microphone recordings or browsing activity on other sites.
- No Apple Health or Google Health Connect data. If we add those integrations to the native apps, we'll only read the data types you approve, we won't use them for advertising, and we'll update this policy first.
d) Information from others
- Partner gyms may give us their gym name and logo and a staff contact email for their dashboard. They don't give us member data.
- Friends may invite you, which gives us your email or username.
- Payment providers (Square, and later Apple or Google) tell us whether a payment succeeded.
2. How we use your information
- To provide the Service: build your plan, calculate calorie and macro targets, log workouts and food, detect PRs, suggest progressive overload, track streaks, run leaderboards and challenges, create share cards and Wrapped recaps.
- To identify foods in meal photos: see Section 4.
- To verify ranks and badges and to detect cheating (for example, impossible jumps in lift numbers).
- To keep the community safe: moderate content, handle reports and enforce our Terms and Community Guidelines.
- To process payments and manage subscriptions, including renewal reminders and cancellation confirmations.
- To communicate with you: service messages, security alerts, support replies and motivational notifications you've turned on (capped at 2 a day). You can turn off any category of notification.
- To improve the Service: understand which features get used, fix bugs and measure performance, using aggregated or de-identified data where possible.
- To meet legal obligations and protect our rights, users and the public.
We do not sell your personal information, use it for targeted or cross-context behavioral advertising, or use your health data, meal photos or progress photos to train third-party AI models.
3. Health data and sensitive information
Body stats, workout and nutrition logs and progress photos are health-related, and some laws treat them as sensitive personal information or consumer health data. We collect them only with your consent (asked during onboarding, separate from these terms) and use them only to provide the features you ask for. You can withdraw consent at any time by deleting the data or your account, but some features won't work without it.
4. Photos, video and AI
- Progress (before/after) photos are private by default, encrypted in transit and at rest, and protected by database access rules so only your account can open them. They're never shown in feeds or leaderboards unless you explicitly share one. Before a photo is shared publicly, it's automatically scanned for nudity (see Section 5) and you can crop or blur it. We don't use progress photos in marketing without your separate written consent.
- Meal photos are sent to our AI provider (Google's Gemini API) to identify foods and portion sizes. Calorie and macro numbers then come from food databases. We resize photos before sending them and send only the image, not your name or account details.
- Proof videos are reviewed (automatically and/or by our team) to verify a lift. We delete the raw video about 30 days after verification, keeping a thumbnail and the result.
- AI outputs are estimates. See the Photo Calorie Estimate Disclaimer.
5. How we share information
We share personal information only as described here:
| Recipient | What and why |
|---|---|
| Other Shredify users | What you choose to make visible: your display name, profile photo, streaks, ranks, leaderboard scores, proof videos, kudos, comments and shared cards, according to your privacy setting (public, friends-only or private). Body weight and food logs are private unless you share them. |
| Partner gyms | If you redeem a gym code: the gym sees aggregate counts (how many accounts used its code and how many are active). If you choose to join the gym's leaderboard, members of that board (and the gym) can see your display name and board stats. Gyms never see your food logs, body weight, photos or other health data. |
| Service providers (processors) | Under contracts that limit their use of the data: Supabase (database, login, storage), Cloudflare (hosting, content delivery, media storage), Square (payments), Google (meal-photo food recognition), OpenAI (moderating text and images people share), Resend (email delivery), Sentry (error reporting), PostHog (product analytics), and food databases (USDA FoodData Central, FatSecret, Open Food Facts), which receive search terms and barcodes but not your identity. From December 2026, Apple, Google and RevenueCat for in-app purchases in the iPhone and Android apps, and Expo for delivering push notifications to those apps. If you turn on notifications in a web browser, your browser's push service (for example Apple, Google or Mozilla) delivers them; the message content is encrypted. |
| Legal and safety | When required by law, subpoena or court order, or when we believe in good faith it's necessary to protect someone's safety, investigate fraud or enforce our Terms. |
| Business transfers | If ANA Enterprises LLC is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner, which must honor this policy or give you notice and choices. |
| With your consent | Any other sharing you ask for, for example when you post a share card to TikTok or Instagram. |
6. How long we keep information
| Data | Kept for |
|---|---|
| Account, profile and logs | While your account is active. Deleted within 30 days of account deletion |
| Progress photos and meal photos | Until you delete them or your account |
| Proof videos | About 30 days after verification (thumbnail and result kept while your account is active) |
| Backups | Overwritten on a rolling basis within about 35 days |
| Purchase and tax records | As long as tax and accounting law requires (typically up to 7 years) |
| Records of auto-renewal consent | At least 3 years, or 1 year after the subscription ends, whichever is longer (California law) |
| Moderation records for banned accounts | Up to 2 years, to prevent repeat abuse |
| Inactive free accounts | We may delete an account after 24 months of inactivity, with prior email notice |
7. Your choices and rights (all users)
Wherever you live, you can:
- Access and export your data: Settings → Privacy → Export my data
- Correct your profile and logs in the app
- Delete individual photos, logs or posts, or your whole account: Settings → Account → Delete account (or email privacy@getshredify.com)
- Control visibility: set your profile to public, friends-only or private, and choose whether to appear on leaderboards
- Control notifications by category, and unsubscribe from marketing emails using the link in any email
- Withdraw consent to health-data processing (this may disable features)
We'll respond to requests within 45 days (or sooner if your state requires it) and verify your identity by having you sign in or confirm through your account email.
8. Cookies and analytics
We use essential cookies and local storage to sign you in, keep the app working offline and remember your settings. We use PostHog for product analytics, configured to [mask text inputs, not record sessions and not share data with advertisers]. We don't use advertising cookies, pixels or third-party ad trackers in the Service. We honor Global Privacy Control (GPC) signals as an opt-out of any "sale" or "sharing."
9. US state privacy rights
Depending on your state (for example California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island), you may have the right to:
- Know/access the personal information we've collected about you and get a portable copy
- Correct inaccurate information
- Delete your personal information
- Opt out of the sale of personal information, "sharing" for cross-context behavioral advertising, targeted advertising and certain profiling. We don't do any of these.
- Limit the use of sensitive personal information (we only use it to provide the Service)
- Appeal a decision we make about your request, by replying to our decision or emailing privacy@getshredify.com with "Appeal" in the subject. If we deny your appeal, you can contact your state Attorney General.
- Not be discriminated against for exercising your rights
You can make a request in the app, by emailing privacy@getshredify.com, or through an authorized agent (we may ask for proof of authorization and to verify your identity directly).
California notice at collection (CCPA/CPRA)
| Category (Cal. Civ. Code §1798.140) | Collected? | Examples | Purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Yes | Email, username, IP address, account ID | Provide the Service, security | Service providers |
| Customer records | Yes | Name (if given), email, payment card last 4 | Payments, support | Square, service providers |
| Protected characteristics | Yes | Age, sex | Personalize plans and targets, fair rankings | Service providers |
| Commercial information | Yes | Plans purchased, subscription history | Billing | Square, service providers |
| Internet/network activity | Yes | App usage, logs | Operate and improve the Service | Service providers |
| Geolocation | No precise location | (IP-derived general area only, processed by hosting providers for security) | Security | Service providers |
| Audio/visual | Yes | Meal photos, progress photos, proof videos | Food logging, progress tracking, verification | Service providers; other users only if you share |
| Sensitive personal information | Yes | Account login, health and body data, progress photos | Provide the Service only | Service providers |
| Inferences | Limited | Plan recommendations, calorie targets, strength tier | Provide the Service | Not disclosed for advertising |
We have not sold or "shared" personal information in the past 12 months, and we don't knowingly sell or share data of consumers under 16. Retention periods are in Section 6.
Shine the Light (Cal. Civ. Code §1798.83): we don't share personal information with third parties for their direct marketing.
10. Children
Shredify is only for people 18 and older. We don't knowingly collect personal information from anyone under 18. If we learn that we have, we'll delete it and close the account. If you think a minor is using Shredify, email privacy@getshredify.com.
11. Security
We use industry-standard safeguards, including encryption in transit (TLS) and at rest, row-level access controls in our database, private-by-default storage for progress photos, least-privilege staff access and logging. No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires.
12. Where data is processed
Shredify is based in the United States, and we store and process data in the United States. If you use the Service from outside the US, your information will be transferred to the US.
13. Changes to this policy
We'll post any changes here and update the "Last updated" date. If a change is material, especially one that affects how we use health data or photos, we'll notify you in the app or by email before it takes effect and ask for your consent where the law requires.
14. Contact
ANA Enterprises LLC (Shredify), Attn: Privacy 6848 N Government Way, Ste 114 #774, Dalton Gardens, ID 83815 privacy@getshredify.com