Shedetics

Privacy Policy

Last updated: August 29, 2026

At Shedetics, we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over your information.

Table of contents

1. Who We Are

The Shedetics website and app are operated by MEDICAL TAB, MB. MEDICAL TAB, MB is the data controller responsible for the personal data described in this policy — it decides why and how that data is processed.

MEDICAL TAB, MB
Company code: 308103891
Registered address: Ažutakio k. 2, Pabradės sen., LT-18184 Švenčionių rajono savivaldybė, Lithuania
Email: hello@shedetics.com

For any questions about this policy, contact us at hello@shedetics.com.

2. Definitions

Some terms are used throughout this policy with a specific meaning:

  • Personal data means any information that identifies you or could be used to identify you, either on its own or combined with other information we hold.
  • Special category data means personal data that data protection law singles out for extra protection. The health and fitness data described below falls into this category.
  • Non-personal data means information that does not relate to an identifiable person, such as aggregate counts, and which we may use without the restrictions that apply to personal data.
  • Automatically collected datameans information recorded by our systems when you use the service, rather than information you type in — for example the server request logs described below.
  • Processor means a company that handles personal data on our instructions and on our behalf, and may not use it for its own purposes.

3. Information We Collect

Information you provide directly

  • Account information: your name and email address when you register or purchase a plan.
  • Quiz responses: fitness goals, gender, age range, activity level, body measurements, and lifestyle preferences you enter during the onboarding quiz.
  • Health & fitness data: this is the most sensitive information we hold, and we set it out in full. From your profile and the onboarding quiz: your gender, age and date of birth, height, starting weight, current weight and goal weight, activity level, dietary preference, and your daily water and step goals. From your use of the app: the workouts you complete and the feedback you give on them, your water intake, the weight entries you record, your fasting sessions, your challenge check-ins, the meal plan assigned to you, and the articles you save.
  • Payment information:your subscription purchase is processed entirely by Apple through the App Store's In-App Purchase system. We do not receive, process, or store your card details, Apple ID, or any other payment information — Apple handles this in accordance with its own privacy practices.
  • Quiz answers on our website: if you complete our online quiz, we also collect the answers you give there, which may include any physical difficulties you report (such as back or knee pain), the areas of your body you want to focus on, and your sleep, eating and exercise habits.
  • Communications: messages you send to our support team.

Information collected automatically

  • Technical data: our hosting provider records standard server request logs — IP address, browser type, and operating system — which are used to serve the site securely and diagnose faults.
  • Cookies and similar technologies: see our Cookie Policy for details.
  • Health app data (Apple Health): if you connect Apple Health, we read your step count to show it in the app. This data stays on your device — we do not transmit or store it on our servers. You can disconnect access at any time in iOS Settings.

4. How We Use Your Information

We use the information we collect to:

  • Generate and deliver your personalised workout and nutrition plan.
  • Process payments and manage your subscription.
  • Send transactional emails such as purchase confirmations and plan updates.
  • Send marketing communications (only where you have consented or where permitted by law).
  • Improve, personalise, and develop our platform and services.
  • Prevent fraud, ensure security, and comply with legal obligations.
  • Respond to support requests and enquiries.

We process your personal data on the following legal grounds:

  • Contract performance: to fulfil our obligations when you purchase a plan.
  • Legitimate interests: to improve our services, prevent fraud, and communicate relevant updates.
  • Consent: for marketing emails and non-essential cookies, which you may withdraw at any time.
  • Legal obligation: where required by applicable law.

Health and fitness data

Some of the data described above — your weight, goal weight, body measurements, body type, activity level and the workout, water, weight, fasting and challenge activity you record — is data concerning health, which is a special category of personal data under Article 9 of the GDPR.

Where you hold a Shedetics account, we process that data on the basis of your explicit consent under Article 9(2)(a). We ask for that consent when you create your account in the Shedetics app, through a specific, unticked control that is separate from your acceptance of our Terms and this Policy, and we record the date and time you give it. This consent covers the health and fitness data held in your account.

You may withdraw your consent at any time by deleting your account in the app, which erases that data. Withdrawal does not affect the lawfulness of processing carried out before you withdrew. Because the app cannot create or maintain a personal plan without this data, withdrawing your consent means the app can no longer be provided to you.

6. Sharing Your Information

We do not sell your personal data. We may share it with trusted third-party service providers who help us operate our business, including:

  • Apple, as the operator of the App Store and In-App Purchase system, for processing your subscription payment.
  • Supabase— our database, authentication, file storage and server-side functions provider. Supabase stores your account, your profile and all the activity data described above, and runs the function that deletes your account when you ask it to. Our production database is hosted in the United States (East US — North Virginia).
  • Zapier— the automation service that carries your quiz submission from our website into our records. When you enter your email address at the end of the quiz, that address and all of your quiz answers are sent to Zapier, which passes selected fields on to Google Sheets. This includes answers that are not kept in our records, such as any physical difficulties, target areas, sleep and eating habits you told us about. Zapier is a US company and processes this data on servers in the United States, keeping a copy in its own activity history for a limited period (currently between 29 and 69 days) before deleting it.
  • Google— we store the resulting record in a Google Sheets spreadsheet held in our Google Drive account. Each row contains your email address, the date of your submission, your gender, age range, goals, current and desired body type, motivation, height, current weight, target weight, whether you have used Shedetics before, and your dietary preference. Google processes and stores this data on servers in the United States.
  • Email and communication platforms for sending plan and account updates.
  • Cloud hosting and infrastructure providers.

All third parties are contractually required to handle your data in accordance with applicable data protection law and only for the purposes we specify.

We may also disclose your data where required by law, court order, or to protect the rights, property, or safety of Shedetics, our users, or others.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you close your account, we will delete or anonymise your data within a reasonable period, unless we are required to retain it for legal or regulatory reasons.

Quiz submissions.If you complete our online quiz and give us your email address, we keep that submission — the record described in section 6 — until you ask us to delete it. We do not currently apply an automatic expiry to these records. You can ask us to delete your submission at any time by emailing hello@shedetics.com.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request that we correct inaccurate or incomplete data.
  • Deletion: you can permanently delete your account and all associated data at any time directly in the app, via Profile → Delete account — this takes effect immediately and does not require contacting us. You can also request deletion by emailing us (see below), including for data we may hold outside your account.
  • Restriction: request that we limit how we process your data.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interests or direct marketing.
  • Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@shedetics.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data lawfully. Our supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) in Lithuania. You may also complain to the supervisory authority in your own country of residence.

9. Your Rights Under the California Consumer Privacy Act

To the extent the California Consumer Privacy Act (“CCPA”) applies to you, you have the following rights in addition to those described above:

  • the right to know what personal data we collect about you;
  • the right to request deletion of your personal data;
  • the right to access your personal data;
  • the right to opt out of the collection or sale of your personal data; and
  • the right not to be discriminated against for exercising any of these rights.

We do not sell, share, lease, or rent your personal data, as those terms are defined in the CCPA. To exercise any of these rights, contact us at hello@shedetics.com.

10. International Data Transfers

Your personal data, including the health and fitness data described above, is stored and processed on servers in the United States. Our database provider (Supabase), the automation service that carries your quiz submission (Zapier), and the service that stores that submission (Google) all operate there. If you are in the European Economic Area or the United Kingdom, this means your data is transferred outside that area.

Where your data is transferred outside the European Economic Area, we rely on the safeguards required by applicable data protection law for such transfers. You may contact us at hello@shedetics.com for more information about the safeguards that apply to your data.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are intended for adults. You must be at least 18 years old to create an account or use the app, as set out in our Terms and Conditions. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it. If you believe someone under 18 has provided us with personal data, please contact us at hello@shedetics.com and we will delete it promptly.

The app and website contain links to websites operated by other organisations — for example the published research cited in our plans and challenges. Those links are provided for reference. We do not control those sites, we are not responsible for their content or their privacy practices, and this policy does not apply to any information you provide to them. Their privacy policies may differ substantially from ours, so we encourage you to read them before using those sites.

14. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you by email or via a prominent notice on our website.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@shedetics.com.

Shedetics