Privacy Policy

Last Updated: May 29, 2026

Shabu Pty Ltd ("we," "our," or "us") operates the Starting Strength mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Information We Collect

We collect information that you provide directly to us:

• Account Information: When you create an account, we collect your email address and authentication credentials.
• Workout Data: We store your workout history, exercise weights, sets, reps, and training progress locally on your device and optionally in cloud backup.
• Form Check Videos: If you submit form check videos for review, we temporarily store these videos on our servers for coach review.
• Device Information: We collect device type, operating system version, and app version for technical support and improvement purposes.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Process form check video submissions and deliver coach feedback
• Send you notifications about your workouts and form check reviews
• Respond to your comments, questions, and support requests
• Monitor and analyze trends, usage, and activities

Data Storage and Security

Your workout data is primarily stored locally on your device. If you enable cloud backup:

• iOS: Data is backed up to your personal iCloud account using Apple's encrypted iCloud services.
• Android: Data is backed up via Android's Auto Backup system to your Google account.

We implement appropriate technical and organizational security measures to protect your personal information.

Third-Party Services

We use the following third-party services:

• RevenueCat: For subscription management and payment processing
• Supabase: For user authentication and form check video storage
• Apple/Google: For in-app purchases and cloud backup services
• Sentry: For crash reporting and app stability monitoring
• AI providers (currently Google and Anthropic): For optional AI Coach features (see "Third-Party AI Processing" below)

Third-Party AI Processing (AI Coach)

Starting Strength includes optional AI Coach features powered by third-party AI providers. We currently use Google (Gemini) and Anthropic (Claude), and we may change or add providers over time as models improve or costs change. We will keep this page updated with who we use, and we only use providers whose terms prohibit training on your data.

When you use AI Coach, we send the provider the text you enter and the training context needed to answer your request. This context may include profile information such as sex, age, bodyweight, training experience, and units, plus workout-log information such as recent sessions, exercises, weights, sets, reps, failed reps, workout notes, and planned upcoming workouts.

Workout Coach Notes use the same provider as AI Coach. When enabled, they may send recent completed workouts, your planned workout, days since your last workout, set outcomes, and workout notes so the app can generate a short pre- or post-workout note.

We do not intentionally send your name, email address, or device ID to any AI provider. We store AI Coach analytics and safety events in our systems so we can monitor reliability, rate limits, cost, abuse, and feature quality. These analytics are designed not to include full conversation text.

Google processes AI Coach requests under its Gemini API terms for paid services. Google states that paid-tier prompts and responses are not used to improve its products, and are not retained beyond a short period for abuse monitoring.

Anthropic processes AI Coach requests under its commercial/API data handling terms. Anthropic states that API inputs and outputs are not used to train its models by default, and that standard API inputs and outputs are deleted from Anthropic backend systems within 30 days unless an exception applies, such as policy enforcement, legal requirements, longer-retention services, or a separate agreement.

Requests may be routed to a provider through OpenRouter, an API gateway that forwards the request to the provider we have selected. We restrict routing to providers that meet the data-handling standards described above.

AI Coach is for training guidance only. It is not medical advice, injury diagnosis, or a substitute for a qualified professional.

Website Analytics

This policy also covers our website at shabu.co, which is separate from the App. The website uses Google Analytics and our own aggregate usage analytics to help us understand which pages and features are useful — for example, pages viewed, links and download buttons clicked, and how far you scroll. Google Analytics may use cookies or similar technologies for traffic and campaign measurement. We use this website data in aggregate and do not use it to identify individual visitors. Visiting the website does not require an account, and we do not link website analytics to any App account.

Your Rights

You have the right to:

• Access and export your workout data (available in Settings)
• Delete your account and all associated data
• Opt out of non-essential communications
• Request information about the data we hold about you

Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.