Updated September 26, 2026 · James Portis / JamesPortis.com
This policy describes information handled by the Shape Research fitness and strength-training app.
Information you provide
- Account information: your email address and Firebase account identifier. Firebase Authentication processes your password for email/password sign-in and password-reset requests.
- Profile and training information: the name you choose, goals, experience, equipment, schedule and preferences; assessments and calibration information; limitations, pain and readiness feedback you choose to enter; workout plans, exercises, sets, repetitions, loads, durations, other supported measurements, notes, history and derived progress or recommendations.
- Saved content: saved research articles, training-recipe choices and associated training records.
These records are associated with your account and stored using Google Firebase Authentication and Cloud Firestore so the app can save and synchronize your training information, provide its features and personalize supported training suggestions. The current app does not read Apple Health, motion sensors, contacts or device location. Exercise images and article content are bundled with the app.
Photos and information on your device
If you choose an avatar photo in the current app, image processing and the temporary image stay on your device; cloud avatar uploading is disabled. Any legacy cloud avatar associated with your account is included in account deletion. The app retains a sign-in session and an appearance preference on the device. Sign out on shared devices.
Service providers and technical information
Google Firebase provides authentication, database and account-deletion infrastructure. Requests necessarily include technical information such as IP addresses and user-agent information. Firebase uses such information to operate and secure its services, including preventing authentication abuse, and may retain service logs under its own retention policies. See Firebase privacy and security information.
The app includes no advertising, cross-app advertising tracking, analytics SDK or crash-reporting SDK. It has no feature that sells your training data or shares it with advertisers. Progress charts are calculated from your training records. Links to external research sources or the support website are governed by those sites’ own practices.
Retention and deletion
Your account and training records remain available until you delete them through supported app actions or delete your account. Removing or voiding an individual finalized workout preserves revision history. To request permanent account erasure, use Profile → Account → Delete account, read the warning and confirm. A deletion option is also available before setup and when account data cannot load.
Successful account deletion removes your Firebase sign-in identity, all account-owned Firestore records including history and subordinate records, and any supported legacy cloud avatar. It also signs out and clears the app’s session and local state. Deletion cannot be undone. If an attempt is interrupted, some records may already be gone; retry or contact us. A minimal security marker temporarily locks the account during deletion and remains for at least two hours after completion to prevent old sessions recreating records; automatic expiry then removes it. An incomplete marker stays until cleanup finishes.
Deletion of active account records does not promise immediate erasure of provider-managed security logs or any provider backup copies. Those remain subject to the provider’s retention and deletion processes. Do not send your password or sensitive workout details in a support request.
Contact and requests
For support, privacy questions or help with an interrupted deletion, email james@jamesportis.com or use JamesPortis.com/contact. Include “Shape Research” and a brief description. We may need to verify account ownership before acting on an account request.
Policy updates
Changes to these practices will be reflected in this policy and its update date.