Privacy policy

What we collect

• Apple Sign In identifiers. Apple's stable user id and, if you provide it, an email address — used only to sign you in.
• Apple Health data. Workouts, sleep sessions, heart rate, HRV, resting heart rate, VO2 max, body mass — only the categories you authorize in the Health app. Read on-device by HealthKit and synced to our servers.
• Profile attributes. Age, weight, weekly mileage baseline, weekly schedule, race goals, and similar facts you share during onboarding or in chat.
• Chat history. Your conversations with the Shed coach, including any notes the coach saves about you.
• Device information. Push notification token (Apple's anonymous identifier) and the timezone the app reports.

How we use it

We use your data to coach you. Specifically: to generate and update training plans, to estimate your fitness and race predictions, to surface relevant context in chat, and to send you training notifications. We do not use your data to train AI models, and we do not sell it.

Third-party processors

We rely on a small number of vendors to operate Shed. Each receives only the data needed for its role:

• Anthropic. Powers the AI coach. Conversation turns and the context the coach needs to answer (recent workouts, profile attributes) are sent to Anthropic at request time. Anthropic does not train on Shed data per their API terms.
• OpenAI. Generates text embeddings used to power semantic search over your notes and past conversations.
• Supabase. Hosts the database and authentication infrastructure.
• Apple. Sign In with Apple and push notifications via APNs.
• Amazon Web Services. Hosts the backend application servers and background job infrastructure.

Where data is stored

Data is stored in databases located in the United States. Apple Health raw data lives on your device; Shed only receives the subset you authorize.

Your rights

You can request deletion of your account and all associated data at any time by emailing quentin@nassaulabs.com from the address linked to your account. We will confirm deletion within seven days. Revoking HealthKit permissions in the Health app stops further sync immediately — past synced data remains until you request deletion.

Children

Shed is not directed to children under 13 and we do not knowingly collect data from them.

Changes

If we make material changes to how we handle your data, we'll update this page and note the date above. Continued use of Shed after changes constitutes acceptance.

Contact

Questions about privacy at Shed? quentin@nassaulabs.com