Privacy Policy

Effective Date: 01/12/2025

Shapo (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring transparency in how your personal information is collected, used, and safeguarded. This Privacy Policy outlines the data practices for both the Shapo website and app and may be adapted for similar applications and services in the future.

1. Introduction

This Privacy Policy explains:

  • What data we collect and how we collect it.
  • How we use your data.
  • Your rights regarding your data.
  • How we protect your data.
  • Who to contact for data-related inquiries.

By using the Shapo website or app, you agree to this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

Website

We collect the following types of data via the Shapo website:

  1. Personal Information Provided by You:
    • Email Address: If you choose to sign up for updates on app availability or other related information.
  2. Cookies and Analytics:
    • Google Analytics Data: Includes anonymized information such as your IP address, browser type, operating system, pages visited, and time spent on the site.
    • Cookies: Small text files stored on your device to track site activity and preferences.

App

The Shapo app collects the following data:

  1. Usage Data:
    • App interaction logs, device type, operating system, and crash reports to monitor performance and improve user experience.
  2. Optional Data Provided by You:
    • Profile details such as age, gender, weight, and training preferences.

3. How We Use Your Information

We collect and process data for the following purposes:

Website:

  • To send email updates about app availability and related news.
  • To analyze website traffic and user behavior through Google Analytics to improve user experience.

App:

  • To create hyper-personalized training plans using health and fitness data retrieved via OAuth2 from Garmin and Apple Health.
  • To provide ongoing app functionality, such as tracking progress and adjusting training plans.
  • To conduct performance monitoring and enhance app features.

4. Legal Bases for Processing Your Data

We process your personal data under the following legal bases:

  1. Consent: When you sign up for email updates or grant permission to connect to Garmin or Apple Health via OAuth2.
  2. Legitimate Interest: To analyze website and app performance and improve our services.
  3. Contractual Necessity: To provide personalized coaching services as part of the app’s functionality.

5. Cookies and Analytics

Cookies are used on the Shapo website to:

  • Enable core functionalities.
  • Enhance user experience by remembering your preferences.
  • Analyze user behavior via Google Analytics.

You can manage or disable cookies through your browser settings; however, this may affect website functionality.

For more details about Google Analytics, refer to their privacy practices: Google Analytics Privacy Policy.

6. Data Sharing and Security

We do not sell or rent your personal data to third parties. However, we may share data in the following circumstances:

  1. With Trusted Third-Party Services:
    • Google Analytics: For website traffic analysis.
    • OAuth2 Providers (Garmin and Apple): To securely retrieve fitness and health data.
  2. Legal Compliance:
    • If required to comply with legal obligations or to protect against fraud, abuse, or harm.

Data Security:

We implement robust security measures, including:

  • Encrypted storage of sensitive data.
  • Secure transmission of OAuth2 data.
  • Regular audits and security checks.

7. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Privacy Policy:

  • Email Data: Retained until you unsubscribe or request deletion.
  • App Data: Retained for active users to provide services. Data is deleted upon account closure or a valid deletion request.
  • Cookies and Analytics Data: Retained as per Google Analytics’ data retention policies.

8. Your Rights

You have the following rights regarding your personal data:

  1. Right to Access: Request details of the data we hold about you.
  2. Right to Rectify: Correct inaccurate or incomplete data.
  3. Right to Erasure: Request deletion of your data, including via a Data Subject Access Request (DSAR).
  4. Right to Data Portability: Obtain a copy of your data in a structured, machine-readable format.
  5. Right to Restrict Processing: Limit how your data is processed in certain situations.
  6. Right to Object: Opt-out of data processing based on legitimate interests or direct marketing.

To exercise your rights, contact us at shapo.cc@stimulatingminds.co.uk

9. Submitting a Data Subject Access Request (DSAR)

To submit a DSAR, email shapo.cc@stimulatingminds.co.uk with:

  • Your name.
  • Email address.
  • Details of your request.

We will verify your identity and respond within 30 days.

10. Children’s Privacy

Shapo is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we discover such data, it will be deleted promptly.

11. International Data Transfers

Your data may be processed in countries outside of your residence, including countries that may not provide the same level of data protection. By using our services, you consent to such transfers.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Changes will be posted on this page with a revised effective date. We encourage you to review this policy regularly.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

By using the Shapo website or app, you agree to this Privacy Policy. Thank you for trusting us to support your fitness journey.