Privacy Policy

1. Information We Collect

The information processed by Shape Journey depends on which features you choose to use.

Account Information

To create and maintain your account, Shape Journey may collect:

• Name.
• Email address.
• Authentication credentials and account identifiers.
• Subscription information.

Payments and subscription transactions may be processed by third-party platforms such as Google Play or the Apple App Store.

Shape Journey does not directly store your complete payment card information.

Fitness and Workout Data

If you choose to record workouts, Shape Journey may store information such as:

• Workout type.
• Exercise names.
• Sets and repetitions.
• Loads and other strength-training information.
• Workout duration.
• Distance.
• Pace.
• Speed.
• Activity progression.
• Sport-specific workout information.
• Workout notes and other information you choose to record.

This information remains associated with your account and is automatically processed to provide workout history, statistics, progress tracking, comparisons, trends, and other features available to you inside Shape Journey.

Nutrition Data

If you use Shape Journey's nutrition features, the App may store information that you choose to record, including:

• Meals and foods.
• Calories.
• Protein, carbohydrates, fat, and other nutritional information.
• Nutrition goals.
• Meal images that you choose to provide.
• Other dietary information that you choose to record.

This information is automatically processed to provide your nutrition tracking, summaries, comparisons, goals, and related features.

Body and Physical Assessment Data

Shape Journey may store body and physical assessment information that you choose to provide, including:

• Body weight.
• Body measurements such as waist, hips, chest, arms, and other measurements.
• Body fat percentage.
• Estimated lean mass and other body composition information.
• Posture and body proportion assessments.
• Progress photos.
• Assessment dates and historical measurements.

This information is stored for your account and automatically processed to provide progress tracking, comparisons, assessments, charts, reports, and other features requested by you.

Wellness and Lifestyle Information

If you use wellness tracking features, Shape Journey may store information that you choose to record, such as:

• Sleep.
• Stress.
• Energy.
• Motivation.
• Mood.
• Soreness or discomfort.
• Recovery.
• Self-esteem.
• Social connection.
• Habits.
• Goals.
• Notes and other lifestyle information.

This information is processed to display your history and provide the tracking, comparisons, trends, and insights available through the Services.

Location Data

When you choose to start a GPS-tracked workout, Shape Journey accesses and collects precise location data from your device.

This may include:

• GPS coordinates.
• Location points recorded during the activity.
• Timestamps associated with location points.
• Distance and movement information derived from those points.
• The route generated from your GPS activity.

Location data is accessed and collected specifically to provide GPS-based workout functionality, including:

• Recording your workout route.
• Measuring distance traveled.
• Calculating activity-related statistics.
• Displaying your workout on a map.
• Recording the progression of your activity.

When you start a GPS-tracked workout, Shape Journey may continue accessing your precise location while that workout remains active, even when the App is running in the background or your device screen is turned off.

This background access is necessary so that your route and workout are not interrupted when Shape Journey is not visible on the screen.

Shape Journey accesses location in this manner only in connection with a GPS-tracked workout initiated by you.

Shape Journey does not access or collect your precise location outside an active GPS-tracked workout.

Location data is not processed for advertising, marketing, behavioral profiling, or tracking your movements unrelated to a workout.

Shape Journey does not sell location data.

You can control Shape Journey's access to your location through your device settings. Disabling the required location permissions may prevent GPS-based workout tracking from functioning correctly.

Email Address and Progress Summaries

Shape Journey may process your registered email address to provide account-related and service-related communications.

Shape Journey may also send biweekly progress summaries based on information stored in your account.

Depending on the information you have recorded, a progress summary may include:

• Recent workouts.
• Training activity.
• Nutrition and meal records.
• Body measurements.
• Physical assessment information.
• Progress over time.
• Trends and comparisons generated from your records.

The information used to prepare these summaries is processed automatically by Shape Journey's systems.

Shape Journey personnel do not manually read or analyze individual users' workout, nutrition, or body assessment records in order to create these summaries.

When a summary is sent by email, the email address and the information included in that specific message must be processed through the email delivery infrastructure used to deliver the email to you.

Any email service provider acting on our behalf receives only the information necessary to perform the email delivery service and is not authorized by Shape Journey to use your personal records for its own advertising or marketing purposes.

Push Notification Information

If you enable push notifications, Shape Journey may process a push notification token, device identifier, or similar technical identifier associated with your installation of the App.

This information allows Shape Journey to send notifications to your device.

Notifications may include:

• Workout-related reminders.
• Tracking or check-in reminders.
• Progress-related notifications.
• Account notifications.
• Service information.
• Information related to Shape Journey features you use.

Push notification identifiers are used to deliver notifications and are not used to determine your physical location.

You can disable push notifications at any time through your device settings.

Device, Technical and Usage Information

Shape Journey may automatically process certain technical information required to operate, secure, diagnose, and improve the App, including:

• Device type.
• Operating system.
• App version.
• Technical device or application identifiers.
• Crash information.
• Diagnostic information.
• Performance information.
• Feature usage and interactions with the App.

This information may be processed to identify technical problems, maintain security, understand application performance, and improve the reliability and functionality of the Services.

2. How Your Information Is Processed

Shape Journey is designed so that your personal fitness, nutrition, body assessment, wellness, workout, and location information remains private.

Your data is transmitted using encrypted connections and is protected through technical and organizational access controls designed to prevent unauthorized access.

Your personal records are processed primarily by automated systems to provide the functionality that you request through Shape Journey.

This automated processing may include:

• Storing and displaying your personal records.
• Maintaining your personal history and timeline.
• Calculating workout statistics.
• Calculating nutrition totals and comparisons.
• Tracking progress over time.
• Generating charts and trends.
• Comparing measurements and assessments.
• Generating personal insights and summaries.
• Recording GPS workout routes.
• Calculating distance, pace, speed, and related activity information.
• Creating periodic progress reports.
• Preparing information that you specifically choose to export or share.
• Providing other features that operate on the information stored in your account.

No Routine Human Review of Personal Records

Shape Journey personnel do not routinely access, read, review, or monitor individual users' workout records, nutrition logs, body measurements, body assessments, wellness records, progress photos, or GPS workout history.

Human review of individual personal records is not part of the normal operation of Shape Journey.

Access to personal user information is restricted through technical and organizational controls.

In exceptional circumstances, limited access may be necessary when reasonably required to:

• Provide technical support specifically requested by you.
• Investigate a security incident or suspected abuse.
• Diagnose a technical problem affecting your account.
• Protect the security and integrity of the Services.
• Comply with a valid legal obligation or governmental request.

Where such access is necessary, it is limited to the information reasonably required for that specific purpose.

No Advertising Use of Personal Fitness Records

Your workout, nutrition, body assessment, wellness, progress photo, and GPS workout information is not processed to create advertising profiles.

Shape Journey does not sell your personal information.

Shape Journey does not sell your health, fitness, nutrition, body assessment, wellness, progress photo, or precise location information.

Shape Journey does not process precise GPS location for advertising or marketing purposes.

3. Device Permissions

Some Shape Journey features require permission to access specific capabilities of your device.

Location Permission

GPS workout tracking requires access to your device's precise location.

When you start a GPS-tracked workout, Shape Journey may continue accessing location while that workout remains active, including when:

• Shape Journey is running in the background.
• Another application is visible.
• Your device screen is turned off.

This enables Shape Journey to continuously record the workout route you requested.

Location access is associated with an active GPS workout and stops when the GPS workout or tracking session is ended.

You may deny or revoke location permission using your device settings. GPS-based functionality may not work correctly without the required permission.

Camera and Photo Access

Shape Journey may request access to your camera or photo library when you choose to use functionality involving images, such as:

• Progress photos.
• Body or posture assessments.
• Meal images.
• Other image-based features.

Shape Journey accesses the camera or selected images only when necessary to provide the feature you choose to use and according to the permissions provided through your device.

Notification Permission

Shape Journey may request permission to send push notifications.

You can allow, deny, or later revoke notification permission through your device settings.

Disabling notifications does not prevent you from using Shape Journey's primary tracking features.

4. Automated Progress Summaries

Shape Journey may automatically generate progress summaries using information stored in your account.

Depending on the features you use, these reports may process workout, nutrition, physical assessment, body measurement, and other progress information to provide a consolidated view of your recent activity.

The generation of these reports is automated.

Shape Journey personnel do not manually analyze individual user records to prepare these reports.

If the report is delivered by email, the information included in the message is processed by the infrastructure necessary to deliver that email to your registered email address.

5. Sharing and Exporting Your Information

Some Shape Journey features allow you to choose to export or share information.

For example, you may choose to share:

• Reports.
• Progress images.
• Before-and-after comparisons.
• Workout information.
• GPS workout routes.
• Body assessment information.
• Other information made available through a sharing feature.

Shape Journey does not initiate this sharing on your behalf.

When you use a sharing or export feature, you determine whether to provide the resulting information to another person, application, service, healthcare professional, coach, trainer, or other recipient.

Once information is shared outside Shape Journey at your request, the recipient's handling of that information may be subject to their own privacy practices.

6. Service Providers

Shape Journey relies on selected third-party service providers to operate technical components of the Services.

These may include providers supporting:

• Cloud hosting and database infrastructure.
• Authentication.
• Subscription and payment processing.
• Application diagnostics and performance.
• Email delivery.
• Push notification delivery.
• Other infrastructure necessary to operate Shape Journey.

These providers may process limited information when technically necessary to perform services on behalf of Shape Journey.

They are not authorized by Shape Journey to sell your personal information or use your private fitness, nutrition, body, wellness, or location information for their own advertising purposes.

Shape Journey does not provide third parties with unrestricted access to your personal records.

7. Other Circumstances in Which Information May Be Disclosed

Information may be disclosed when reasonably necessary to:

• Comply with applicable law, regulation, legal process, or a valid governmental request.
• Enforce applicable agreements.
• Investigate fraud, abuse, or security incidents.
• Protect the rights, property, security, or safety of Shape Journey, Rio Insight Group, our users, or others.

Any disclosure is limited to what is reasonably necessary under the circumstances.

8. Data Security

Shape Journey applies technical and organizational measures designed to protect your personal information.

These measures include:

• Encryption of data during transmission.
• Authentication controls.
• Access restrictions.
• Technical safeguards intended to prevent unauthorized access.
• Monitoring and safeguards intended to reduce the risk of loss, theft, misuse, or unauthorized disclosure.

Direct human access to individual user records is not part of Shape Journey's normal operating process.

No system connected to the internet can guarantee absolute security. However, Shape Journey maintains safeguards appropriate to the nature of the information processed.

If a personal data breach occurs, we will take appropriate measures and provide notifications to affected individuals or authorities where required by applicable law.

9. Legal Bases for Processing

Depending on your country or region, privacy laws such as the European Union General Data Protection Regulation ("GDPR") or Brazil's Lei Geral de Proteção de Dados ("LGPD") may require a legal basis for processing personal information.

Depending on the type of information and the purpose of processing, Shape Journey may process personal information based on:

• Your consent.
• The need to provide Services or functionality requested by you.
• Legitimate interests related to security, fraud prevention, service reliability, and improvement of the Services, where permitted by law.
• Compliance with applicable legal obligations.
• Other legal bases permitted under applicable law.

Where personal information is considered sensitive information or special-category data under applicable law, Shape Journey processes that information only under a legal basis permitted for that category of data, including explicit consent where required.

When processing is based on consent, you may withdraw that consent as permitted by applicable law.

Withdrawal of consent does not affect processing that lawfully occurred before consent was withdrawn.

10. Data Storage and Retention

Shape Journey retains personal information for as long as reasonably necessary to:

• Maintain your account.
• Provide the Services you request.
• Preserve the personal history and progress information you have chosen to store.
• Meet applicable legal obligations.
• Resolve disputes.
• Protect the security and integrity of the Services.

Your fitness, nutrition, body assessment, wellness, and workout history remains stored for your account while required to provide the history and tracking functionality of Shape Journey, unless you delete the applicable information or your account.

11. Account and Data Deletion

You may request deletion of your Shape Journey account and associated personal information.

Where available, you may initiate account deletion through the functionality provided inside the App.

You may also contact us regarding account or data deletion requests.

When an account is deleted, personal information associated with the account will be removed in accordance with applicable law, except for limited information that we may be legally required or permitted to retain for purposes such as:

• Legal compliance.
• Fraud prevention.
• Security.
• Accounting obligations.
• Resolution of disputes.

Any information retained for such purposes will not continue to be processed for the ordinary functionality of a deleted account.

12. Your Privacy Rights

Depending on your country or region, you may have rights regarding your personal information.

These may include the right to:

• Confirm whether personal information about you is being processed.
• Access personal information associated with your account.
• Correct inaccurate or incomplete information.
• Request deletion of personal information.
• Request information about how your personal information is processed.
• Request portability of certain information.
• Restrict or object to certain processing where applicable.
• Withdraw consent where processing relies on consent.
• Exercise other rights provided by applicable privacy laws.

To exercise applicable privacy rights, contact us at:

support@shapejourney.com

We may request information reasonably necessary to verify your identity before completing certain privacy requests.

13. International Data Transfers

Shape Journey may rely on infrastructure or service providers located outside your country of residence.

As a result, personal information may be processed in countries whose data protection laws differ from those of your jurisdiction.

Where required by applicable law, Shape Journey uses appropriate safeguards for international transfers of personal information, which may include contractual protections or other legally recognized transfer mechanisms.

14. Children's Privacy

Shape Journey is not directed to individuals under 18 years of age.

We do not knowingly collect personal information from children under 18.

If we become aware that personal information from an individual under 18 has been collected in violation of this Policy, we will take reasonable steps to remove that information.

15. Third-Party Platforms and Services

Certain aspects of Shape Journey may interact with third-party platforms or services.

For example, subscriptions may be processed through an application store, emails may be delivered through an email infrastructure provider, and notifications may be delivered through a push notification service.

When you independently interact with a third-party service, that service may also process information according to its own privacy policy.

Shape Journey is not responsible for privacy practices independently performed by third parties outside the Services provided on our behalf.

16. Changes to This Privacy Policy

We may update this Privacy Policy when:

• Shape Journey introduces new functionality.
• Our technical infrastructure changes.
• Our data processing practices change.
• Applicable legal or regulatory requirements change.

When this Privacy Policy is updated, we will revise the "Last Updated" date shown at the beginning of the document.

If changes materially affect the way personal information is processed, we may provide additional notice through the App, by email, or through another appropriate method where required.

17. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or how Shape Journey protects personal information, please contact:

Shape Journey Operated by Rio Insight Group

Av. Valdemar Ferreira 168 São Paulo, SP Brazil

support@shapejourney.com