Privacy Policy

Last updated: December 2025

Owner and Data Controller

ShredSheet

Owner contact email: support@shredsheet.app

Types of Data Collected

This Application collects some Personal Data from its Users.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.

Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services.

Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.

Mode and Place of Processing the Data

Methods of Processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

Place

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

Retention Time

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

Data We Collect

ShredSheet collects the following types of data to provide its services:

Account Information

  • Email address (via Apple Sign-In or Google Sign-In)
  • Display name and profile picture (optional)
  • Friend codes for social features

Health & Fitness Data

  • Body weight and weight history
  • Calorie and macronutrient intake
  • Fitness goals and target values
  • Progress photos (stored securely and only visible to you)
  • Step count (synced from Apple HealthKit with your permission)
  • Sleep duration and sleep analysis data (synced from Apple HealthKit with your permission)

Food Logging Data

  • Food entries and meal logs
  • Barcode scans for food lookup
  • Photos of meals (when using AI food recognition)

Third-Party Services

ShredSheet uses the following third-party services:

Supabase

We use Supabase as our backend database to securely store your account data, food logs, and fitness progress. Supabase Privacy Policy

Apple HealthKit

With your explicit permission, ShredSheet can read health data from Apple Health. This data is never shared with third parties or used for advertising.

Authentication Providers

We support Sign in with Apple and Google Sign-In. These services only share your email address and name with us.

Open Food Facts

Food nutrition data is provided in part by Open Food Facts. Open Food Facts Terms

AI Services (Groq)

When you use the AI meal recognition feature, photos are processed by Groq's AI service. Images are processed in real-time and are not stored after processing. Groq's Privacy Policy

Featurebase (Feedback)

We use Featurebase to collect user feedback, bug reports, and feature requests. Featurebase Privacy Policy

Account Deletion

You have the right to delete your account and all associated data at any time.

To delete your account:

  1. Open the ShredSheet app
  2. Go to Settings (gear icon)
  3. Scroll down and tap "Delete Account"
  4. Confirm the deletion

Upon deletion, the following data will be permanently removed:

  • Your account and profile information
  • All food logs and nutrition data
  • Weight history and progress photos
  • Goals and settings
  • Friend connections

This action is irreversible. Data deletion is completed within 30 days.

Cookies and Tracking

ShredSheet operates with a strict "privacy-first" approach.

  • We do not use cookies.
  • We do not use third-party trackers or analytics services.
  • We do not track your activity across other websites or apps.

Login sessions and settings are stored locally on your device using secure local storage technologies.

Further Information for Users in the European Union

Legal Basis of Processing

The Owner may process Personal Data relating to Users if one of the following applies:

  • Users have given their consent for one or more specific purposes.
  • Provision of Data is necessary for the performance of an agreement with the User.
  • Processing is necessary for compliance with a legal obligation.
  • Processing is related to a task carried out in the public interest.
  • Processing is necessary for the purposes of legitimate interests pursued by the Owner.

The Rights of Users (GDPR)

Users may exercise certain rights regarding their Data:

  • Withdraw consent at any time.
  • Object to processing of their Data.
  • Access their Data and obtain a copy.
  • Verify and seek rectification of their Data.
  • Restrict processing of their Data.
  • Have their Data deleted or otherwise removed.
  • Receive their Data in a structured format.
  • Lodge a complaint before their competent data protection authority.

How to Exercise These Rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered within one month.

Additional Information

Legal Action

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action.

Changes to This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page.