Privacy Policy

Last updated: 21 October 2026

This policy explains what personal data the Shelf app and growyourshelf.com collect, why, who we share it with, and the rights you have. We do not sell your data, show ads, or track you across other companies' apps or websites.

1. Who we are

Shelf is operated by Tomer Tricot, a sole trader based in England, United Kingdom ("Shelf", "we", "us"). We are the data controller for the personal data described here. Contact us at shelfappinfo@gmail.com about anything in this policy.

2. What we collect and why

Data	Examples	Why we use it	Legal basis (UK GDPR)
Onboarding answers	Your goal, experience, where you train, days per week	To build your training plan	Contract
Body details	Weight, height, age, activity level	To calculate your daily calorie and protein targets	Your explicit consent
Training and daily logs	workouts, sets, reps and weights; food entries you log (an optional name, grams of protein and calories); rest days; and the reminder time you choose.	To show your plan, history and streak, and to back them up	Contract
Account details	Email address and name from Sign in with Apple or Google	To create your account and restore your data on a new device	Contract
Subscription status	Whether you are subscribed or in a trial, renewal dates	To unlock Shelf Membership	Contract
App usage	Screens viewed, features used, device type, app version	To understand how Shelf is used and fix problems	Legitimate interests
Messages to us	Emails you send to support	To reply to you	Legitimate interests

We never receive your card or bank details. Apple processes all payments.

If you choose Apple's Hide My Email, we only receive a private relay address, not your real email.

Progress photos

If you choose to add progress photos, they are stored only on your own iPhone, inside the Shelf app. They are never uploaded to us or to any of our service providers, and we cannot see them. Like other app data, they may be included in your iPhone or iCloud backups, which are managed by Apple under your own Apple account settings. You can delete any photo in the app at any time. "Start fresh on this phone" and deleting your account both remove all of them from the app. Shelf only asks for access to your camera or photo library when you first tap "Add photo", and you can change this in your iPhone Settings at any time.

Your weight, height and body goals may count as health data, which UK GDPR treats as special category data. We only use it with your explicit consent, given in the app before it is collected, and only to calculate your targets. You can withdraw consent at any time by deleting your account in the app. Shelf cannot calculate targets without these details.

4. Where your data is stored

Shelf works offline, so your data is saved on your phone first. Once you sign in, it is also backed up to our database so it can be restored on a new device. If you never sign in, your data stays on your phone only.

We use these service providers to run Shelf. Each processes data only on our instructions and under a data processing agreement.

Provider	What they do for Shelf	Data involved
Supabase	Database and sign-in	Account details, onboarding answers, body details, logs
RevenueCat	Manages subscription status	An anonymous or account ID, purchase records
PostHog	Product analytics	App usage data
Apple	Payments, Sign in with Apple, app distribution	As set out in Apple's privacy policy
Google	Sign in with Google	As set out in Google's privacy policy

Explore articles open in an in-app browser and are hosted by their publishers, whose own privacy policies apply. We don't share your data with them.

We may also disclose data if the law requires it, or to a buyer if Shelf is ever sold (you would be told first).

6. International transfers

Some providers store or process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Addendum to keep your data protected to UK standards.

7. How long we keep it

Your account and logs: while your account exists.
After you delete your account: removed from our database straight away, and from backups within 30 days.
Analytics data: up to 24 months, then deleted or anonymised.
Purchase records: kept by Apple and RevenueCat, and by us where needed for tax and accounting (up to 6 years).
Data on your phone: removed when you delete the app.

8. Deleting your account

You can delete your account and its data at any time in the app: Profile → Delete account. Deleting your account does not cancel your subscription. Cancel it in your iPhone's Settings → your name → Subscriptions.

9. Your rights

Under UK GDPR you can ask us to:

give you a copy of your data
correct data that is wrong
delete your data
restrict or object to how we use it
send your data to you or another service in a portable format
stop using data we hold on the basis of your consent (withdrawing consent does not affect earlier use)

Email shelfappinfo@gmail.com and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we'd appreciate the chance to help first.

10. Age

Shelf is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child has given us data, contact us and we will delete it.

11. Security

Data is encrypted in transit, sign-in tokens are kept in your phone's secure storage, and our database only lets each member read and write her own records.

12. Changes to this policy

We will update this page when Shelf changes what it collects, and tell you in the app about any significant change. The date at the top shows the latest version.