Information we collect
We collect the information you provide when creating and using an account, including your email address, name, username, profile photo, challenge participation, task submissions, scores, progress logs, optional weight and body-fat measurements, optional progress photos, and support messages.
We also receive basic device and service information needed to operate the app, such as notification tokens, app version, device platform, timestamps, network requests, and security logs. If you use Sign in with Apple or Google, that provider gives us an account identifier and any name or email information you choose to share.
How we use information
We use this information to authenticate you, operate challenges, calculate scores, show progress and rankings, deliver notifications, prevent misuse, troubleshoot problems, provide support, and improve ShipShape 90.
Visibility inside challenges
Your display name, username, profile photo, score, rank, and relevant challenge activity may be visible to people participating in the same challenge. Progress photos, body measurements, and private evidence are not made public unless a feature clearly asks you to share them and you choose to do so.
Analytics and diagnostics
We use PostHog to understand product interactions and basic app lifecycle events, and Sentry to diagnose crashes and technical errors. These services may receive a private internal profile identifier, sanitized screen names, device platform, app version, and technical error details. We do not send them your email, name, username, notification content, challenge invite codes, body measurements, private notes, task text, or photos. Session replay, screenshots, and view-hierarchy capture are disabled.
Service providers
We use service providers to run ShipShape 90, including Supabase for authentication, database, storage, and server functions; Expo for mobile builds and push delivery; Ably for realtime updates; PostHog for product analytics; Sentry for crash diagnostics; Vercel for the website; Apple for iOS distribution and optional Apple sign-in; and Google for optional Google sign-in. They process information only to provide their services to us and under their own security and privacy commitments.
We do not sell your personal information, use sensitive fitness information for advertising, or track you across other companies' apps and websites.
Retention and deletion
We keep account information while your account is active and as reasonably necessary to operate, secure, and comply with legal obligations. You can permanently delete your account in the app from Profile → Delete account. Deletion removes your login, profile, personal media, progress logs, notifications, and personal participation records. Challenges you created may remain without your identity so other members can retain their own results.
Backup systems and security logs may retain limited information for a short period before routine deletion. We may retain information when required by law, to resolve disputes, or to prevent fraud and abuse.
Your choices
You can update your name, username, and profile photo in the app. You can pause push delivery in Notification Settings or change system-level permissions in your device settings. You may request access, correction, or deletion assistance by contacting us.
Security and age
We use technical and organizational safeguards designed to protect your information, but no online service can guarantee absolute security. ShipShape 90 is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes and contact
We may update this policy as the product changes. Material updates will be posted here with a revised effective date. Questions or privacy requests can be sent to support@shipshape90.com.