Privacy Policy

Last updated · October 4, 2026

This Privacy Policy explains how SD Fitness ("the App", "we", "us"), the official training app of Shontelle DuBois Fitness, collects, uses, and protects your information when you use our mobile application on iOS or Android. We take your privacy seriously: we collect only what the App needs to work, we never sell your data, we never use it for advertising, and the App contains no advertising networks and no third-party analytics or tracking SDKs.

The App includes an optional AI coaching feature called DU Talk. Because that feature sends a limited amount of information to an external AI provider, it is described in full in Section 3, including exactly what is sent, what is never sent, and how to withdraw your agreement.

1. Information We Collect

1.1 Information you provide

• Account information — your name, email address, and password when you create an account. Passwords are stored in hashed form by our authentication provider; we never see or store your plain-text password.
• Contact details — an optional phone number, if you choose to add one to your profile.
• Profile and training details — gender, date of birth, height, body weight, your current and goal body-fat figures, your training goals, activity level, and your preferred units (metric or imperial). These are used to select the right programs for you, to estimate calories burned, and to wish you a happy birthday.
• Profile picture — optional. Unlike your progress photos, your profile picture is uploaded to and stored on our servers, so that it appears on your account on any device you sign in from. It is deleted when you delete your account.
• Progress photos — your before & after transformation photos. These are stored only on your device. They are never uploaded to our servers. Sharing a transformation image happens only when you choose to, through your phone's own share menu.
• Support requests — if you contact us from inside the App, the subject and messages you write, so we can reply to you in the same conversation.
• DU Talk messages — if you use the optional AI coaching feature, the messages you type to it. See Section 3.

1.2 Information created while you use the App

• Workout activity — the exercises you complete, how long you train, estimated calories burned, and the streaks, stats, and achievement badges built from them, so your progress stays in sync across sessions and devices.
• Hydration logs — water intake you record and your reminder preferences.
• DU Talk conversations — the messages you send to the AI coach and the replies it gives, stored against your account so you can read them again and so the coach remembers what you have discussed. See Section 3.
• Feedback on AI replies — if you mark a reply helpful or unhelpful, or report one, we record that so we can improve the coach.
• Purchase information — your subscription status, managed through Apple's App Store or Google Play together with our subscription provider (RevenueCat). We never receive or store your credit card details.
• Device information — a basic app-instance identifier and your device model, operating system version, and app version, used to operate your subscription and to diagnose technical problems.
• Diagnostic data — if the App runs into an error, an anonymised crash report and basic performance timing are sent to our error-monitoring provider (Sentry) so we can fix it. This is deliberately configured not to include your name, email address, or IP address, and it is not linked to your account.

1.3 Health data (Apple Health / Health Connect)

If you choose to tap "Connect Health Data", the App asks your operating system — Apple Health on iOS, or Health Connect on Android — for read-only access to the following data types:

• Daily step count
• Active calories burned
• Heart rate (most recent reading)
• Sleep duration (last night)

This data is used for one purpose only: to display your own daily activity on your personal dashboard inside the App. It is not uploaded to our servers, not stored outside your device, not shared with anyone, not sold, and never used for advertising, analytics, marketing, or any other purpose. It is never sent to our AI coaching feature or to any AI provider. The App only reads this data — it does not add to or change anything in Apple Health or Health Connect. Connecting health data is entirely optional — the App is fully functional without it — and you can revoke access at any time in Apple Health settings (iOS) or Health Connect settings (Android).

1.4 Camera and photo access

The App requests camera access only when you choose to take a profile picture or a before/after progress photo, and photo library access only when you choose to pick an existing photo. It requests permission to save to your photo library only when you choose to save a transformation image. We never access your camera or photos in the background.

1.5 What we do not collect

To be explicit, the App does not collect any of the following:

• Your precise or approximate location
• Your contacts, calendar, messages, or call history
• Your browsing or search history
• Advertising identifiers such as Apple's IDFA — the App shows no ads, does not track you across other companies' apps or websites, and therefore never asks for App Tracking Transparency permission
• Any biometric, genetic, racial, religious, political, or sexual-orientation information

2. How We Use Your Information

We do not use your data for advertising, we do not sell or rent your data to anyone, we do not share it for cross-context behavioural advertising, and the App contains no third-party advertising of any kind. We do not use your data to train artificial-intelligence models, and our AI provider does not train its models on anything we send it. We do not make automated decisions that produce legal or similarly significant effects about you.

3. AI Coaching (DU Talk)

3.1 What DU Talk is

DU Talk is an AI coaching assistant inside the App. It is powered by Claude, a large language model provided by Anthropic PBC, and it is briefed on Shontelle DuBois's training programmes. It is an AI assistant built on her training — it is not Shontelle DuBois, it does not speak for her, and its answers are not reviewed by her before you see them.

3.2 Your agreement, and how to withdraw it

The first time you try to use DU Talk, the App shows you a notice describing exactly what is sent and what is never sent, and asks you to agree. If you close that notice, swipe it away, or choose "Not now", nothing is saved and nothing is sent — the notice simply appears again the next time. Your agreement, if you give it, is recorded against your account together with the date and time you gave it, so that it survives reinstalling the App or signing in on a new device. If the notice materially changes, you will be asked again.

You can withdraw your agreement at any time in the App, which stops any further use of the feature. Withdrawing does not affect anything that happened before you withdrew it.

3.3 What we send to Anthropic

When you send a message to DU Talk, the following is transmitted to Anthropic so that a reply can be generated:

• The message you typed, and the recent messages in the same conversation
• Your first name, your gender, and your preferred units
• Which programme you are following, which phase and day you are on, your experience level, and where you train
• The name of your next scheduled session
• Your current streak, your total number of completed workouts, and the date you last trained
• Whether your membership is currently active

3.4 What we never send to Anthropic

• Any Apple Health or Health Connect data. Not steps, not heart rate, not sleep, not active energy. That data never leaves your device at all, for any purpose.
• Your progress photos or your profile picture.
• Your weight, your height, or your body-fat figures.
• Your email address, date of birth, phone number, or any payment details.
• Anything about any other member.
• Your support requests.

3.5 Training, and what Anthropic does with it

Anthropic does not use your conversations to train its models. It processes what we send only in order to return a reply to us, which we then show to you. We do not use your conversations to train any model of our own either.

3.6 Where your conversations are stored, and for how long

Your DU Talk conversations are stored on our own servers in Canada, alongside the rest of your account data and protected by the same row-level security, so that only your authenticated account can read them. Conversations are deleted automatically six months after they end, by a scheduled job that runs every night whether or not you open the App. You can delete a conversation yourself at any time from inside the App, and deleting your account deletes all of your conversations immediately.

3.7 Limits on use

DU Talk has usage limits, which exist to keep the feature working for everyone and to keep its cost predictable. There is a limit on the length of a single message, a daily limit on the number of messages, and a short-term limit to prevent automated use. Members without an active subscription receive a small number of messages in total so they can try the feature. These limits may change, and they are enforced on our servers.

3.8 Reporting a reply

If DU Talk gives you a response you believe is harmful, offensive or inappropriate, you can report it from the App using the menu on that reply. A report reaches our team directly and includes the reply you flagged and the message that prompted it, so we can understand what happened.

3.9 Not medical advice

DU Talk coaches training, habits and motivation. It cannot diagnose or treat any condition, and it does not give medical, nutritional or psychological advice. If you are unwell, in pain, or unsure whether exercise is safe for you, consult a qualified professional. In an emergency, contact your local emergency services.

4. Who We Share Data With

We share data only with the service providers required to run the App, and only the minimum they need:

• Supabase — our secure backend platform that hosts accounts, profile details, workout history, hydration logs, support conversations, DU Talk conversations, and profile pictures (data hosted in Canada).
• Anthropic PBC — generates the replies in DU Talk. Receives only what is listed in Section 3.3, and only when you have agreed to use the feature. Does not train its models on it.
• RevenueCat — processes subscription status on our behalf. Receives an app-instance identifier and purchase state; never your name, profile details, photos, health data, or DU Talk conversations.
• Sentry — receives crash reports and basic performance data so we can fix technical problems. Configured not to receive your name, email address, or IP address.
• Apple / Google — handle all payments through the App Store and Google Play under their own terms and privacy policies.

Each of these providers is bound to use the data only to provide their service to us. We may also disclose information if we are legally required to do so, or to protect our rights or the safety of others. We never share your data with advertisers or data brokers, and we would tell you before any change of control resulted in your data being transferred to a new owner.

5. Where Your Data Is Processed

Your account data, workout history, support conversations and DU Talk conversations are hosted in Canada. Some of our service providers process limited data on servers in other countries, including the United States — this includes subscription status (RevenueCat), crash reports (Sentry), and the information described in Section 3.3 when you use DU Talk (Anthropic). Where personal data is transferred outside your country, we rely on the safeguards required by applicable law, such as standard contractual clauses, and on providers that commit to protecting it to an equivalent standard.

6. Data Security

All data transmitted between the App and our servers is encrypted in transit using HTTPS/TLS, and data stored on our servers is encrypted at rest. Access to stored data is restricted through row-level security, meaning your data is accessible only to your authenticated account — this includes your DU Talk conversations. Requests to our AI coaching feature are made from our own servers, never directly from your device, so our AI provider's credentials are never present in the App. Your login session is held in your device's secure hardware-backed storage — the iOS Keychain or the Android Keystore. Passwords are stored only as salted hashes. No system is perfectly secure, but if a breach ever affected your personal data we would notify you and the relevant authorities as required by law.

7. Data Retention

We keep your account data for as long as your account exists. When you delete your account, your personal data — account details, profile, profile picture, workout history, hydration logs, stats, support conversations, and DU Talk conversations — is permanently deleted from our servers. DU Talk conversations are additionally deleted six months after they end, even while your account remains open, by a nightly scheduled job. Progress photos and health data never left your device in the first place; deleting the App removes them. Crash and performance reports are anonymised and are automatically deleted by our monitoring provider after a limited retention period (up to 90 days). We may retain a minimal record of a transaction where tax or accounting law requires it.

8. Deleting Your Account & Your Rights

If you can no longer access the App, you can request deletion by contacting us (see Section 12) from the email address linked to your account, and we will delete it for you.

Depending on where you live, you also have the right to:

• ask us what personal data we hold about you and receive a copy of it in a portable format;
• have inaccurate data corrected;
• have your data deleted;
• object to or ask us to restrict certain processing;
• withdraw your consent at any time — for example by disconnecting health data, withdrawing your agreement to DU Talk, or turning off notifications — without affecting anything done before you withdrew it;
• complain to your local data-protection authority.

If you are a California resident: we do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. You retain the right to know, delete, and correct your personal information, and we will never discriminate against you for exercising it.

Contact us at the address in Section 12 and we will respond promptly, and in any event within the time limit set by applicable law. We will never charge you for making a request.

9. Children

SD Fitness is intended for adults aged 18 and over. The App is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

10. Notifications

With your permission, the App sends notifications such as hydration reminders, workout reminders on days you have not yet trained, streak and milestone messages, a weekly summary of your training, and birthday greetings. These are generated and scheduled on your own device — they are not sent from our servers, and their content is worked out on your phone from information already stored there. They can be turned off individually or all at once in the App, or in your system settings. Turning off one category does not affect the others.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the App. Continued use of the App after changes take effect means you accept the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, how your data is handled, or you would like to exercise any of the rights described in Section 8, contact us at info@shontelledubois.com. This policy should be read together with our Terms & Conditions.