Effective: June 14, 2026 · Last updated: June 14, 2026
SHREDx pro (“we”, “our”, “us”) operates the SHREDx pro mobile application (“App”). This page informs you of our policies regarding the collection, use, retention, deletion and disclosure of personal data when you use the App.
READ_MEDIA_IMAGES or READ_MEDIA_VIDEO permissions.SHREDx pro is a personal fitness-coaching app. To track your daily activity against the goals set by your coach (or your self-set goals), we read the following data types from Health Connect — Android's user-controlled health-data hub. Access is requested only after you tap "Connect Steps" on the dashboard, and you can revoke any data type individually inside Health Connect at any time.
| Health data type | Why we read it | Stored on server? |
|---|---|---|
| Steps (READ_STEPS) | Display your daily step count and progress toward your step goal; compute the daily activity / compliance score your coach reviews. | Yes — under your account only |
| Active Calories Burned (READ_ACTIVE_CALORIES_BURNED) | Match your nutrition intake to your real expenditure for fat-loss / muscle-gain goals. | Yes — under your account only |
| Total Calories Burned (READ_TOTAL_CALORIES_BURNED) | Fallback when active calories are empty (some OEMs only report total). Same purpose as above. | Yes — under your account only |
| Distance (READ_DISTANCE) | Show daily walking / running distance alongside steps in the Progress tab's "Distance" insight card. | Yes — under your account only |
What we do NOT do with Health Connect data: we do not sell, share with advertisers, send to third parties, transfer outside our service, or use it for any purpose beyond showing it to you in the app and to your assigned coach. Health Connect data is read on-demand, written to your server profile under your account, and deleted along with the rest of your data when you delete your account (see §7).
You can revoke each Health Connect data type at any time: Open Settings → Apps → Health Connect → App permissions → SHREDx pro and toggle off any permission. The app will continue to work; the affected metric will simply stop populating.
Your data is visible only to you and to the coach explicitly assigned to you inside the app. We share data with third parties solely to operate the service (hosting, email delivery, crash reporting). We do not sell or rent your data to advertisers, data brokers, or anyone else. We will disclose data if legally compelled by a valid court order or regulatory request.
Account, fitness, diet and health data is stored on MongoDB Atlas servers located in the Asia–Pacific region. Push-notification tokens are stored in the same database. Photos you upload are stored as base64-encoded blobs in the same MongoDB documents under your user record. All traffic between the app and our servers is encrypted with TLS 1.2 or higher.
We retain different categories of data for different periods. The table below is comprehensive — every retention window is enforced programmatically:
| Data category | Retention while account active | After account deletion |
|---|---|---|
| Account record (email, name, password hash) | Until you delete your account | Erased within 24 hours; backup copies purged within 30 days |
| Workout / diet logs, body-weight history | Until you delete your account | Erased within 24 hours; backup copies purged within 30 days |
| Health Connect data (steps, calories, distance) | Until you delete your account or revoke Health Connect permission | Erased within 24 hours; backup copies purged within 30 days |
| Progress photos | Until you delete the photo, or your account | Erased within 24 hours; backup copies purged within 30 days |
| Chat messages with coach | Until you delete your account | Erased within 24 hours; backup copies purged within 30 days |
| Push-notification tokens | Until you log out or uninstall | Erased on logout / account delete |
| Server access logs | 14 days rolling | Automatically expire after 14 days |
You have two equivalent ways to delete your account and all associated data. Both result in complete erasure within 30 days.
users, onboarding, workout_logs, diet_logs, weight_logs, habit_checkins, chat_messages, progress_photos, notifications, push_tokens and every other per-user collection.Deletion is irreversible. We do not retain shadow profiles, suppression lists, or any other "ghost" record after deletion.
Passwords are stored hashed with bcrypt (cost factor 12). API traffic is encrypted over HTTPS (TLS 1.2+). Access to production data is limited to authorised engineering personnel under audit logging. We do not store payment card data ourselves — all subscriptions are handled by App Store / Play Store. No method is 100% secure, so we cannot guarantee absolute security.
SHREDx pro is not intended for users under 16. We do not knowingly collect data from children. If you believe a minor has signed up, contact us and we'll delete the account.
The App is operated from India. By using it, you consent to your data being transferred to and processed in India and on MongoDB Atlas Asia–Pacific servers.
We may update this policy periodically. Material changes will be notified in the app or by email. Continued use after an update constitutes acceptance. Previous versions are available on request.
Questions, deletion requests, or rights requests:
Email coach@uzairkhanfitness.com
Data controller: SHREDx pro, operated by Uzair Khan Fitness, India.