Privacy Policy

Everything in Shojin is either entered by you or needed to run the service. Here's the full list.

• Account — your email address (your login) and your password. Passwords are hashed by our authentication provider and are never visible to the developer.
• Profile (all optional) — display name, status line, height, birth year (used to show your age), sex, preferred units (kg/lb), training goal, days-per-week target, default rest time, show-RPE toggle, rounding preference, and the count-dumbbells-twice setting.
• Workouts — workout name, date and time, duration, free-text workout notes, and an optional pre-session "readiness" check-in (sleep, energy, and soreness each rated 1–5).
• Sets — weight, reps, duration (for timed moves like planks), RPE (rate of perceived exertion), set type (working / warm-up / drop), and per-set notes.
• Bodyweight entries — bodyweight, an optional body-fat percentage, and the date.
• Templates and exercises — workout templates, custom exercises, and pinned per-exercise setup notes.
• Feedback — any free-text suggestions you choose to send us, plus any screenshots you choose to attach, and which items on the What's coming list you voted for. Screenshots are optional, are stored privately (only you and the developer can open them), and are deleted when you delete your account. If a workout could not be saved to your account and you tap Send to developer on it, the report also carries that workout as you logged it (its name, date, duration, notes, readiness check-in, exercises, and each set's weight, reps, time, effort rating, type and notes), plus the error the save got and your app version, so the developer can add it to your account by hand.
• Purchase history — which Shojin subscription the account holds and whether it is currently active, and the identifier the purchase is recorded against. Payment itself is handled by Apple: we never see your card or your billing details.
• Technical / operational — the authentication session token stored on your device, and standard server logs at our hosting providers (such as IP address and request metadata), used only to keep the service secure and running. On the iPhone app, if you allow notifications: the push notification token Apple gives the app on your device, the app version, whether it is a developer build, and when the token was first and last used. If you agree to news notifications, we also keep the date you agreed.
• Crash reports and usage events — when something goes wrong, the app records the error message, the stack trace, your app version and your device platform. It also records simple usage events: which screens and features are used, never the content of your workouts. Both are stored in our own database, are used only to fix bugs and improve the app, are never shared or sold, and are deleted when you delete your account. A copy of the usage events (the event names, counts and small labels only, tied to your account id) also goes to PostHog, the product-analytics service listed under "Who processes your data" below, so we can see which features are used. PostHog never receives your workouts, your bodyweight, your notes or your email.
• Android waitlist — if you join the Android waitlist on shojin.fit, we keep your email address, when you joined and confirmed, and whether you unsubscribed. You do not need a Shojin account to join.

Apart from PostHog, we do not use any third-party analytics SDK. We use no advertising SDK, no ad identifiers (such as IDFA), and no cross-app or cross-site trackers. PostHog runs with autocapture, session recording and page tracking switched off: it receives only the named usage events described above.

Some of what you log — bodyweight, body-fat percentage, workouts, and readiness (sleep, energy, soreness) — is health and fitness information, including body measurements. We treat this as sensitive information.

We only collect it because you choose to enter it, and we only use it to run the app for you: storing your entries, syncing them across your devices, and showing you your own history and progress charts. In a Training Circle you share everything unless you switch to Days only, so the members of that circle who also share everything see some of it, such as your personal records and their loads. The Training Circles section below lists exactly what they see. We do not use it for any other purpose.

Your bodyweight entries are never sent to other members. A member who shares everything with you can still work out your body weight from your personal record on a bodyweight lift, such as a pull-up or a dip, or from your result in the Pound for pound challenge.

Apple Health (iPhone, optional). If you connect Apple Health, Shojin writes each workout you finish in the iPhone app to Apple Health on that iPhone: the type of workout, its start and end time, and an estimate of the active energy you used. Shojin calculates the estimate on your iPhone from the effort (RPE) you logged and your last body weight entry. When you edit or delete that workout on the same iPhone, Shojin changes or removes its copy in Apple Health. Shojin reads nothing from Apple Health. The energy estimate is not sent to us, and we never use Apple Health data for advertising or marketing. To stop it, open iPhone Settings, then Privacy & Security, then Health, then Shojin. Workouts already in Apple Health stay there until you delete them in the Health app, also after you delete your Shojin account. Shojin does not connect to Health Connect on Android.

We use your data to:

• Provide the service — store your workouts, profile, and settings, and show you your history and progress.
• Sync across your devices — keep your data consistent whether you're on the web or a phone.
• Send account emails — password resets, email confirmation links, a reminder 2 days before a free trial ends, and notices about changes to Shojin, such as when early access ends.
• Send notifications — on the iPhone app, with your permission: notifications about your account, a notification when a member of your Training Circle high-fives you, a notification when a mate in your Training Circle sets the next weekly challenge (it shows the circle's name, the mate's display name and the challenge), and, only if you agree in the app, news about new features and offers. Switch news off in Profile → App → Feature updates and offers, high fives off in the circle's settings → High-five alerts, circle challenges off in the circle's settings → Circle challenges, or all notifications in iPhone Settings.
• Android test — we email you once to confirm your address and once when the Android test opens. We give your email address to Google so it can add you to the test on Google Play. We send no other email to the waitlist, and every email has an unsubscribe link. To decide who earns the tester offer, we check how many workouts you log on Android during the test.

A Training Circle is a small, opt-in group of friends who can see each other's weekly training. Nothing is shared until you create or join one, and you can leave at any time.

If you're in a circle, the other members can see your display name, your profile photo, your status line, and your weekly training-day counts and which days you trained.

You choose how much you share, separately for each circle. Sharing is on by default: every member starts at Everything, and members who joined a circle before this default were moved to Everything too.

• Days only — members also see your streaks and how often you reach your days-per-week target. They never see your exercises, weights, sets, notes, or any other workout detail.
• Everything — the default. Members see what Days only shows, and also how many personal records you set this week, and up to 5 of them in detail: the exercise name, the load in the unit you logged, the reps, and an estimated one-rep max. They also see your best estimated one-rep max of all time on the squat, bench press, deadlift and overhead press, your training time this week, a rough map of the muscles you trained, your best streak, and your longest session. The map is drawn on a female or a male figure, to match the sex in your profile (the male figure if you chose another answer or none). For each workout you finish this week, they see a summary: its name, the day you did it (never the time), how long it took, how many exercises and working sets it had, how many personal records it set, and up to three muscle groups it trained. They can also open the workout itself: each exercise, and for each set its type (working, warm-up or drop), the load in the unit you logged, the reps, the time for timed moves, and your RPE. You can open theirs in the same way. Your workouts open to other members only after you have seen the notice about this in the app. They never see your notes, your readiness check-in, or the time of day you trained. A member who can open one of your workouts can copy it into their own templates: the copy keeps the exercises, sets, reps and set types, and leaves out the loads.

You see what you share. You see a member's Everything detail only when you both share everything in that circle. You always see your own full stats. Members who share days only see how many members share everything, but not who.

A circle can run one weekly challenge. In a team challenge, the members see the team's total. In a race, they see each member's result, such as their number of sessions or their estimated one-rep max on a lift, and the winner. A challenge that uses Everything detail counts only the members who share everything, and only they see its results.

In the Stick to the plan weekly challenge, every member of the circle sees how many program sessions you had planned that week and how many of them you did, at either share level, Days only included. They never see your program's name, its workouts or its sets.

In the Pound for pound weekly challenge, members who also share everything see your result as a percent of your body weight and the load you lifted, so they can work out your body weight.

At Everything, exercise names show exactly as you typed them, including the names of custom exercises you made, in your personal records and in your workouts. If a member copies one of your workouts, a custom exercise in it is added to their account under the same name. Workout names show as you typed them too, except the app's own names that say the time of day (such as "Morning Workout"), which members see as "Workout".

Your status line is part of your profile. The members of every circle you're in can see it, at either level.

When you high-five a member, we send them a notification on their iPhone that shows your display name, unless they switched High-five alerts off. When a member high-fives you, you get the same notification with theirs. Apple delivers these notifications, so Apple receives their text.

You can switch to Days only at any time in the circle's settings (the cog next to the circle's name). Members then stop seeing your Everything detail. This cannot undo what they already saw.

Leaving a circle (the circle's settings → Leave circle) stops all sharing with that group immediately. Nothing from a Training Circle is ever shared with anyone outside it. Being in a circle never shares your templates. Handing a template to someone is a separate, deliberate action, described below.

If you report a member (the flag next to their name), your report is sent to us so we can review it. It includes who you reported, which circle, and their status line at the time of the report.

You can give one of your workout templates to a friend. Nothing is shared unless you deliberately create a share code for a specific template. There is no directory and no discovery — nobody can find, browse, or request your templates.

When someone redeems a code you created, they see that template's name, the names of the exercises in it (including any custom exercises you made), and its set, rep, and rest structure. They do not see your logged workouts, your weight history, your bodyweight, your notes, or anything else in your account. Your target weights are removed — the copy arrives with weights set to zero.

The person redeeming previews all of this and has to explicitly accept before anything is added to their account. What they receive is an independent copy that they then own; changes you make to your template afterwards don't reach them.

A share code expires after 30 days, and you can revoke it at any time from Profile → Templates & exercises. Revoking stops new redemptions, but it does not remove copies people have already added.

You can share a program you built by giving someone its link. Nothing is shared until you save a program to share, or share one you are running; that creates its link. There is no directory and no discovery: nobody can find, browse, or request your programs.

When someone opens a link you created, they see the program's name, your display name, the date you last updated it, its length and training days, the names of its workouts and exercises (including any custom exercises you made), and its set, rep, effort (RPE), and rest targets. They do not see your logged workouts, your weight history, your bodyweight, your notes, or anything else in your account. Your weights are removed.

The person opening the link previews all of this and has to explicitly start the program before anything is added to their account. What they receive is an independent copy that they then own; changes you make afterwards don't reach them. You can see how many times your link was used, but not who used it.

A program link does not expire. You can turn a link off, or delete the saved program, at any time from Program → Programs to share. Either one stops new people starting the program from that link, but it does not remove copies people already have. Turning a link back on makes a new link.

• We don't sell your data.
• We don't show ads.
• We don't do cross-app or cross-site tracking.
• We don't use advertising trackers. The one analytics service we use (PostHog) receives feature-usage counts only, never your training data.
• We don't share your data with third parties for advertising or marketing.

To run the app, we use a small number of trusted service providers (sub-processors) that process data on our behalf:

• Supabase — database, authentication, and storage of your data. Auth emails (such as password resets) are delivered through Supabase's email provider.
• Vercel — hosting for the web app.
• RevenueCat — subscription management for in-app purchases. It receives an app user identifier (your Shojin account id) and your purchase and subscription status. It never receives your workouts, your bodyweight, or anything else you log.
• PostHog — product analytics. It receives your Shojin account id, the usage events described above (which screens and features are used, as event names, counts and small labels), your app version and your platform. Our PostHog project is set to discard your IP address when an event arrives, so no location is derived from it. It never receives your workouts, your bodyweight, your notes, your display name or your email. When you delete your account, we also delete your PostHog record.
• Apple — delivers notifications through the Apple Push Notification service. It receives the device token and the text of the notification.
• Resend — sends our emails.
• Cloudflare Turnstile — checks that a person, not a bot, is using our Android waitlist form.
• Google — receives your email address if you join the Android test.

These providers may store and process data on servers outside Australia (for example, in the United States or other regions). By using Shojin, you understand your data may be stored overseas.

• Your data is encrypted in transit (HTTPS/TLS).
• Access is protected by Row-Level Security, so each account can only read and write its own data. No one else can read your data, except what you choose to share.
• Passwords are hashed by our authentication provider and never seen by the developer.

No system is perfectly secure, but we take reasonable steps to protect your information.

You're in control of your data, directly inside the app:

• Access and export — export your data anytime from Profile (a CSV of your sets and a full JSON backup).
• Correct — edit or update any of your entries at any time.
• Delete — delete your account and all of your data in-app from Profile → Delete account.

To make any other request about your personal information, email support@shojin.fit.

We keep your data until you delete it. When you delete your account, your account and all your data are removed.

If you sent us feedback, it is deleted with your account, together with any screenshots you attached and any workout you sent with a report.

We delete the Android waitlist within 90 days after Shojin launches on Google Play.

Shojin is not directed at children. It is not intended for anyone under 13 (or under 16 where that is the relevant minimum age), and we do not knowingly collect data from them.

We handle personal and sensitive information in line with the Australian Privacy Principles under the Australian Privacy Act.

We may update this policy from time to time. If we make a significant change, we'll update the effective date above and, where appropriate, let you know in the app.

Questions about this policy or your data: support@shojin.fit.