Consumer health data.

Scope & who this covers

"Consumer health data" means personal information that identifies your past, present, or future physical or mental health status. Shape is a consumer fitness and coaching platform; the trainers and nutritionists on Shape are independent professionals, not your medical providers. The health information you enter here is therefore consumer health data — not "Protected Health Information" under HIPAA — and HIPAA generally does not apply. We nonetheless treat it as sensitive and protect it as described below. Shape ("we," "our") is the entity that determines how this data is processed.

Health data we collect

Only what you choose to provide or connect, for coaching and safety:

• Health & safety screening: PAR-Q answers; prescription medications; allergies; pregnancy or postpartum status; ongoing medical conditions; injuries and surgeries; and an emergency contact.
• Body & progress: weight, body-fat percentage, girth measurements, and progress photos.
• Activity & recovery: heart rate, heart-rate variability, sleep, resting heart rate, recovery, workout minutes, and training logs.
• Nutrition: meal logs, calories and macros, recorded voice meal-notes, and grocery lists.
• Weekly check-ins: your ratings of sleep, energy, stress, hunger, and adherence.
• Goals: body-composition targets and the reasons behind them.
• Connected sources: data from any wearable or health app you choose to connect (see Section 03).

Where it comes from

Directly from you (what you type, upload, or record); from devices and apps you choose to connect — Apple Health, Strava, Garmin, Whoop, Oura — pulling only the metrics you authorize at each connection; and generated within Shape as you use it (for example, your Shape Score or a coaching summary).

How we use it

• To deliver coaching — sharing relevant data with the specific coach(es) you link with so they can program safely and effectively.
• To run the features you use — logging, progress tracking, check-ins, your Shape Score, and the "Nora" assistant and voice features (which are powered by OpenAI and may receive health and fitness context to generate your response).
• To keep you safe — surfacing your safety screening to a linked coach.
• To run Shape Radio's heart-rate sync, if you connect a monitor — your live heart rate drives the on-screen tempo and light effects. This reading stays on your device: it is read from the monitor by the app and used to render what you see. It is not sent to our streaming provider and is not stored as part of Shape Radio.
• To secure the platform and meet legal obligations.

We do not use your consumer health data for advertising, to build advertising profiles, or to train artificial-intelligence models, and we do not sell it.

Who we share it with

We share consumer health data only in these ways, and only with your consent:

• The coach(es) you choose. Independent trainers and nutritionists you link with are third-party recipients of the data you share with them, for the purpose of coaching you. Ending a coaching relationship ends that coach's ongoing access.
• Processors that operate Shape on our behalf — including Supabase (storage) and OpenAI (the "Nora" assistant and voice features). The basis differs by recipient, and our Subprocessors page states it for each one — for some it is a contract we have signed, for others it is currently the provider's own published terms. A wearable service you connect is not one of our processors: it is a third party you have your own relationship with, and the data flows because you authorized that connection — its own terms govern it, and disconnecting it ends the flow. The full list, with the data each receives, is on the Subprocessors page.
• When the law requires it, or to protect safety, rights, or property.

We do not share consumer health data with advertisers or data brokers.

Consent

Where consent is how we ask. Some health features are built entirely around your explicit consent, and will not collect anything until you give it. Cycle tracking works this way today: nothing is recorded until you opt in, sharing it with a coach is a separate choice you make on its own, we keep a record of the exact wording you agreed to, and turning it off deletes the data along with the setting. That is the standard we are extending to every health feature.

Where you choose by acting, today. For the rest of the health data in Section 02, you decide by choosing to provide it: you complete the readiness screening, log a weigh-in, upload a progress photo, connect a wearable and authorize the specific metrics it shares, or log a meal. Nothing in Section 02 is taken automatically or inferred without you — and your safety screening is always visible to a coach you link with, because a coach cannot program safely without it. If you would rather they not have it, do not link with a coach.

Withdrawing. You can disconnect any connected app, delete individual records, export everything, or delete your account and its health data — all in Settings — or email privacy@theshapecommunity.com and we will action it. Withdrawing applies going forward and does not undo processing already carried out. Ending a coaching relationship ends that coach's ongoing access.

What we are still building, stated plainly. We are rolling out an explicit consent step — with a recorded receipt of the exact wording, and a separate share decision — in front of each category of health data in Section 02, matching how cycle tracking already works. Until that ships, the paragraphs above describe exactly how consent works for each kind of data. We would rather tell you what is true today than describe a flow you have not seen.

No sale of health data

Shape does not sell your consumer health data, and we do not exchange it for anything of value. We would not sell it without first obtaining your valid, written authorization that meets the specific requirements of the My Health My Data Act — and we have no plans to do so.

Your rights

You have the right to:

• Confirm and access the consumer health data we have about you, including a list of the third parties and processors with whom we have shared it.
• Withdraw consent to our collection or sharing of it.
• Delete it. When you ask us to delete your consumer health data, we delete it from our systems and our storage and direct our processors to do the same. Deletion of consumer health data is not subject to the broad legal-retention exceptions that can apply to other records.

To exercise any of these, use our privacy request form, export or delete your data directly in Settings, or email privacy@theshapecommunity.com. We verify your identity proportionately and respond within 30 days, wherever you live; California requests are acknowledged within 10 business days. If we deny a request, you may appeal by replying to our response; if an appeal is denied, you may contact your state attorney general or, in the EEA or UK, lodge a complaint with your data protection authority.

Security & who can access it

Consumer health data is protected with per-user, row-level access controls, encryption in transit and at rest, and private storage served only through short-lived signed URLs. Access is limited to the people and processors who need it to provide the service to you: the coach(es) you link with, the processors listed on our Subprocessors page, and the minimum number of Shape personnel required to operate and support the platform — each under confidentiality obligations.

No geofencing

Shape does not use geofences around any healthcare facility, and does not use location to identify or track your visits to such places or to send you related messages.

Changes & contact

If we materially change how we handle consumer health data, we will update this page and the "Last updated" date and give notice as described in our Privacy Policy. Questions, requests, or security reports: privacy@theshapecommunity.com.