Privacy Policy

Everything in Shojin is either entered by you or needed to run the service. Here's the full list.

• Account — your email address (your login) and your password. Passwords are hashed by our authentication provider and are never visible to the developer.
• Profile (all optional) — display name, height, birth year (used to show your age), sex, preferred units (kg/lb), training goal, days-per-week target, default rest time, show-RPE toggle, rounding preference, and the count-dumbbells-twice setting.
• Workouts — workout name, date and time, duration, free-text workout notes, and an optional pre-session "readiness" check-in (sleep, energy, and soreness each rated 1–5).
• Sets — weight, reps, duration (for timed moves like planks), RPE (rate of perceived exertion), set type (working / warm-up / drop), and per-set notes.
• Bodyweight entries — bodyweight, an optional body-fat percentage, and the date.
• Templates and exercises — workout templates, custom exercises, and pinned per-exercise setup notes.
• Feedback — any free-text suggestions you choose to send us.
• Technical / operational — the authentication session token stored on your device, and standard server logs at our hosting providers (such as IP address and request metadata), used only to keep the service secure and running.

We do not use any advertising or analytics SDK, ad identifiers (such as IDFA), or any cross-app or cross-site trackers.

Some of what you log — bodyweight, body-fat percentage, workouts, and readiness (sleep, energy, soreness) — is health and fitness information, including body measurements. We treat this as sensitive information.

We only collect it because you choose to enter it, and we only use it to run the app for you: storing your entries, syncing them across your devices, and showing you your own history and progress charts. We do not use it for any other purpose.

Shojin does not connect to Apple Health or Health Connect.

We use your data to:

• Provide the service — store your workouts, profile, and settings, and show you your history and progress.
• Sync across your devices — keep your data consistent whether you're on the web or a phone.
• Send account emails — password resets and email confirmation links.

A Training Circle is a small, opt-in group of friends who can see each other's weekly training consistency. Nothing is shared until you create or join one, and you can leave at any time.

If you're in a circle, the other members can see your display name, your profile photo, and your weekly training-day counts and which days you trained — never your exercises, weights, sets, notes, or any other workout detail.

Leaving a circle (Profile → Training Circle → Leave circle) stops sharing your training days with that group immediately. Nothing from a Training Circle is ever shared with anyone outside it. Being in a circle never shares your exercises, your templates, or your training loads — handing a template to someone is a separate, deliberate action, described below.

If you report a member (the flag next to their name), your report — including who you reported and which circle — is sent to us so we can review it.

You can give one of your workout templates to a friend. Nothing is shared unless you deliberately create a share code for a specific template. There is no directory and no discovery — nobody can find, browse, or request your templates.

When someone redeems a code you created, they see that template's name, the names of the exercises in it (including any custom exercises you made), and its set, rep, and rest structure. They do not see your logged workouts, your weight history, your bodyweight, your notes, or anything else in your account. Your target weights are removed — the copy arrives with weights set to zero.

The person redeeming previews all of this and has to explicitly accept before anything is added to their account. What they receive is an independent copy that they then own; changes you make to your template afterwards don't reach them.

A share code expires after 30 days, and you can revoke it at any time from Profile → Templates & exercises. Revoking stops new redemptions, but it does not remove copies people have already added.

• We don't sell your data.
• We don't show ads.
• We don't do cross-app or cross-site tracking.
• We don't use third-party analytics or advertising trackers.
• We don't share your data with third parties for advertising or marketing.

To run the app, we use a small number of trusted service providers (sub-processors) that process data on our behalf:

• Supabase — database, authentication, and storage of your data. Auth emails (such as password resets) are delivered through Supabase's email provider.
• Vercel — hosting for the web app.

These providers may store and process data on servers outside Australia (for example, in the United States or other regions). By using Shojin, you understand your data may be stored overseas.

• Your data is encrypted in transit (HTTPS/TLS).
• Access is protected by Row-Level Security, so each account can only read and write its own data — no one else can read yours.
• Passwords are hashed by our authentication provider and never seen by the developer.

No system is perfectly secure, but we take reasonable steps to protect your information.

You're in control of your data, directly inside the app:

• Access and export — export your data anytime from Profile (a CSV of your sets and a full JSON backup).
• Correct — edit or update any of your entries at any time.
• Delete — delete your account and all of your data in-app from Profile → Delete account.

To make any other request about your personal information, email support@shojin.fit.

We keep your data until you delete it. When you delete your account, your account and all your data are removed.

One exception: if you sent us feedback, that feedback is kept but anonymised — the link to your account is removed so it can no longer be traced back to you.

Shojin is not directed at children. It is not intended for anyone under 13 (or under 16 where that is the relevant minimum age), and we do not knowingly collect data from them.

We handle personal and sensitive information in line with the Australian Privacy Principles under the Australian Privacy Act.

We may update this policy from time to time. If we make a significant change, we'll update the effective date above and, where appropriate, let you know in the app.

Questions about this policy or your data: support@shojin.fit.