ShipFitPrivacy Policy
The short version
- ShipFit has no accounts. We don't ask for your name, email or phone number.
- Everything you log (workouts, body weight, sleep and soreness check-ins, notes, settings) is stored on your device. We don't receive it and can't see it.
- There are no ads, no analytics and no tracking in the app, and it loads no third-party scripts or fonts.
- Two optional features can involve a third party, and only when you use them: voice input and AI-written coach answers (details below).
- You can back up, restore or erase all of your data from Settings at any time.
Who we are
ShipFit is published by [PLACEHOLDER: your name or company, and postal address] ("we", "us"). Questions about privacy: [PLACEHOLDER: privacy@your-domain].
What the app stores on your device
To work, ShipFit keeps the following in your browser's or app's storage on your device (IndexedDB, with a localStorage copy, plus up to five automatic restore-point snapshots kept inside the app): your profile and goals, your training plan and split, logged workouts and sets, body weight, sleep/soreness/readiness check-ins, notes, coach "memory" you create, equipment settings, and app preferences. This stays on your device. It is not uploaded to us.
Because the data lives on your device, clearing your browser data, uninstalling the app or losing the device can permanently delete it. Your data is also tied to one website address in one browser or one home-screen install: a different address, a different browser, or (on iPhone) Safari versus the installed home-screen app each start empty. Use Settings → Your data → Back up now to keep a backup file; you can restore it anywhere. The restore-point snapshots live in the same storage, so they do not protect against the browser clearing the site's data. There is no sync and no cloud copy.
What leaves your device
| Feature | What happens | Who sees it |
|---|---|---|
| Normal use (logging, plans, recovery, progress, built-in coach) | Everything is calculated on your device. Nothing is sent. | Nobody but you |
| Loading the app | Your device downloads the app files from our web host. As with any website, the host may keep standard server logs (IP address, time, requested file, browser type) for security and operations. | Our hosting provider: [PLACEHOLDER: Netlify / Cloudflare / GitHub Pages, or "n/a" for store apps that bundle the files] |
| Voice input (optional) | If you tap the microphone, speech recognition is performed by your browser or operating system (for example Apple or Google). Depending on your device, audio may be sent to that company to be transcribed. ShipFit only receives the resulting text. Voice input is off unless you tap the mic. | Your browser/OS vendor, under their own privacy policy |
| AI-written coach answers (optional, server-dependent) | ShipFit can use an AI language model for open-ended coach chat, but only if the server hosting the app has been configured with an AI provider key. In that case, the message you type plus a short text summary of your recent training (goal, recent sets, readiness, plan) is sent through that server to the provider (OpenAI or xAI) to write a reply. The provider's API key is held on the server and never in your browser. [PLACEHOLDER – confirm before launch: "The version of ShipFit published at this site does not have an AI provider configured, so no coach messages leave your device." Replace with the accurate statement if you enable the server.] | The AI provider, under their API terms |
| Importing files (Apple Health export, .fit, .tcx, .gpx) | You choose the file. It is read and processed on your device and is not uploaded. | Nobody but you |
| Heart-rate strap (Bluetooth) | Where your browser supports Web Bluetooth, the app connects directly to a strap you select. Readings stay on your device. | Nobody but you |
We do not sell your data, share it for advertising, or use it to train AI models. We have no data to sell: we don't collect it.
Health-related information
Information you enter about sleep, soreness, body weight, injuries and training can be considered health-related. In ShipFit it stays on your device, and we don't access it. Importing an Apple Health export is something you choose to do yourself; the file is processed locally. ShipFit does not read HealthKit or Google Health Connect directly. See also our Terms: ShipFit is not medical advice.
Cookies and similar technologies
ShipFit uses your browser's local storage, IndexedDB and a service-worker cache to save your data and work offline. It does not use advertising or analytics cookies.
Your choices and rights
- Access / portability: Settings → Your data → Save to file (or Back up now) gives you a full backup file, and Export CSV gives you a spreadsheet of your sets.
- Deletion: Settings → Erase all data removes all ShipFit data from your device. Clearing site data in your browser does the same.
- Voice and AI: don't tap the microphone, and the voice feature never runs.
Because we don't collect or hold your personal data, there is generally nothing for us to access, correct or delete on our side. If you are in the EEA/UK, California or elsewhere with privacy rights, you may still contact us at the address above and we will help with any request relating to server logs or correspondence.
Children
ShipFit is not directed to children under 13 and we do not knowingly collect personal information from anyone. Younger users should use it with a parent or guardian, and a doctor's advice before starting a training programme.
Security
Your data is stored in your device's own sandboxed storage and protected by your device's security (screen lock, encryption). We serve the app over HTTPS. No system is perfectly secure. Exports you save are plain files, so keep them somewhere safe.
Changes to this policy
If we change how ShipFit handles data, we will update this page and the "last updated" date. If a change would make ShipFit collect data it doesn't collect today, we will say so clearly in the app.
Contact
[PLACEHOLDER: privacy@your-domain] · Support page