SHARK

Privacy Policy

Last updated 14 October 2026

Shark is a gym and nutrition app made by Sugam Bhargav, an independent developer in British Columbia, Canada (“we”, “us”). This policy explains what the app collects, why, where it’s kept, and how to delete it. It applies to the Shark iPhone app and this website.

What we collect

If you use Shark without an account

Everything you enter is stored only on your iPhone. We don’t receive it, and we can’t recover it if the app is deleted or the phone is lost.

If you sign in with Apple

To back up and restore your data, we store:

• Account: the anonymous identifier Apple gives us, and — only if you choose to share them the first time you sign in — your name and email address (which may be an Apple private relay address). Whether you’ve agreed to receive emails from us.
• Profile and programme: bodyweight, sex, training experience, units, training days, your split and exercises, your goal (losing, maintaining or gaining, pace, and target weight if you set one), reminder and app settings.
• Training: your workouts — exercises, sets, reps, weights, how hard sets felt, dates and durations.
• Food: what you log (foods, amounts, meals and times), foods you create or scan, and favourites.
• Body: your weigh-ins, and progress photos if you add them.
• Activity you enter yourself: step counts and activities such as runs that you type in.
• Subscription: if you subscribe to Shark Plus, the transaction identifier Apple provides and the status and renewal date we receive from Apple. Payment is handled entirely by Apple; we never see your card or billing details.
• Service data: the date you last used the app, and short-lived request logs (such as IP address, time, the request made and any error) that our hosting provider keeps so we can prevent abuse and fix problems.

What we don’t collect

• Apple Health data. If you allow it, Shark reads your steps, walking, running, cycling and swimming distance, active energy and workouts from Apple Health to count the calories you burn. That data stays on your phone: it is not uploaded, backed up, shared or used for advertising. Shark never writes to Apple Health.
• Your location, contacts, photos library (other than photos you pick), advertising identifier, or activity in other apps and websites.
• Analytics or crash-reporting from third-party SDKs — Shark contains none.

How we use it

• To run the app: build your programme, recommend weights, set calorie and protein targets, and show your progress.
• To back up your data and restore it when you sign in on another iPhone.
• To confirm your Shark Plus subscription with Apple.
• To keep the service secure and working — rate limiting, preventing abuse, and fixing errors.
• To email you about your plan and training, only if you opted in. You can turn this off at any time in Settings.

We don’t use your data for advertising, we don’t sell it, and we don’t use it to make automated decisions that have legal or similarly significant effects on you.

Health information

Bodyweight, food and training data say a lot about your health, so we treat everything you log as sensitive. We use it only to provide Shark’s features to you, and we never disclose it to advertisers, data brokers or anyone else for their own purposes.

Where it’s kept and how it’s protected

• Your backup is hosted by Cloudflare (Workers, D1 and R2), which may process it in the United States and other countries where Cloudflare operates.
• Everything is encrypted in transit (HTTPS) and encrypted at rest on Cloudflare’s servers. Most of what the app backs up — including your diary, weigh-ins and photos — is also encrypted with our own AES-256-GCM keys, held separately from the database, so a copy of the database alone doesn’t reveal it.
• Your sign-in session is stored in your iPhone’s Keychain and can’t be moved to another device through a backup.
• Only the developer has administrative access. Our internal dashboard shows aggregate counts only — no names, emails or individual records.

Who else is involved

• Apple — Sign in with Apple, App Store purchases, and Apple Health (on your device).
• Cloudflare — hosts and stores your backup on our behalf, under its data processing terms.
• Open Food Facts — when you scan a barcode, the barcode number (and nothing else about you) is sent to Open Food Facts’ public food database to look the product up.

We don’t share your data with anyone else, except where the law requires it.

How long we keep it

• For as long as your account exists.
• Earlier versions of records you change or delete are kept for 30 days so mistakes can be undone, then removed.
• When you delete your account, your data is erased from our live systems straight away, and from rolling database backups within 30 days.

Your choices and rights

• Delete everything: in the app, go to Progress → Settings → Delete account and data. Or email us.
• Correct: edit or delete any workout, food entry or weigh-in in the app.
• Access or export: email us and we’ll send you a copy of your data.
• Emails: switch them off in Settings at any time.
• Apple Health: stop Shark reading it in the iOS Settings app under Health → Data Access & Devices → Shark, or from the Food tab.

Depending on where you live — for example under the GDPR in the EU and UK, Canada’s PIPEDA, or California’s CCPA — you may have rights to access, correct, delete, port, restrict or object to the use of your data. We honour these requests for everyone, wherever they live. You can also complain to your data protection authority, such as the Office of the Privacy Commissioner of Canada.

Children

Shark is not directed at children under 13, or under 16 in the European Economic Area and the UK, and we don’t knowingly collect their data. If you believe a child has given us data, email us and we’ll delete it.

Changes

If we change this policy we’ll update this page and the date at the top. If a change materially affects how your data is used, we’ll tell you in the app first.

Contact

Questions or requests: our support address (being set up — check back shortly)