Your information
Privacy, clearly.
What Shft processes, why it is needed, where it is kept, and the choices you have.
Shft is built around a local-first model. Core workout data can stay on your device. Cloud storage is used when you choose account features or sync.
1. Who this covers
This policy applies to the Shft website and Shft mobile application. Shft is developed and operated by Apostolos Peiniris in Greece (“Shft”, “we”, “us”). Third-party websites and sign-in services have their own policies.
2. Data we process
- Account data: email address, display name, account identifier, and authentication-provider information when you sign in.
- Training data: plans, exercises, sessions, sets, repetitions, weight, notes, streaks, progression and recovery-related records.
- Profile choices: experience level, preferred units, training mode or split, and optional profile details you provide.
- Technical data: app version, device or browser information, security logs, and diagnostic details you send with a support request.
- Website requests: basic server logs such as IP address, requested page, timestamp, and user agent may be processed by the hosting provider for delivery and security.
Shft does not currently use advertising trackers or sell personal information.
3. Why we use it
We process data to provide the app, save and sync your training records, authenticate your account, maintain security, answer support requests, and improve reliability. For users in the EEA, the legal bases may include performance of a contract, legitimate interests in operating and securing Shft, consent where required, and compliance with legal obligations.
Training information may qualify as health-related data in some jurisdictions. See the Health Data Privacy Notice.
4. Local and cloud storage
Core app state is stored on your device using browser or app storage. If you sign in or enable sync, supported data is transmitted over the internet and stored by Shft's cloud infrastructure. Removing the app clears device data according to your operating system, but does not necessarily remove an existing cloud account.
6. Retention & security
Device data remains until you delete it, clear app storage, or uninstall the app. Cloud account data is kept while your account is active and for a limited period where needed for security, backups, disputes, or legal obligations. Account deletion removes active cloud records associated with the account, subject to technically necessary backup cycles and legal retention.
No system is completely secure. Shft uses reasonable technical and organisational safeguards, but you should protect your device and sign-in credentials.
7. Your choices & rights
Depending on your location, you may request access, correction, deletion, restriction, objection, or a portable copy of your data, and may withdraw consent where processing relies on consent. You may also complain to your local supervisory authority; in Greece this is the Hellenic Data Protection Authority.
You can delete your Shft account from the app or contact us for help. You may also use Shft without optional cloud features where supported.
8. International processing
Service providers may process data outside your country. Where required, appropriate transfer safeguards are used. The provider's own documentation identifies its processing locations and transfer mechanisms.
9. Children
Shft is not directed to children under 13. Where local law requires a higher age for independent consent, a parent or guardian must provide any required permission. Contact us if you believe a child has provided personal data improperly.
10. Changes
We may update this policy as Shft changes. The effective date will be revised, and material changes will be highlighted in the app or on the website when appropriate.
11. Contact
For privacy questions or rights requests, contact the developer and identify the email used for your Shft account. Do not send passwords or unnecessary health details.
Privacy contact