SHALL V — Privacy Policy

SHALL V Privacy Policy

Effective Date: 29 September 2026
Last Updated: 29 September 2026

SHALL V is operated by Muhammed Ashik P A.

For privacy and data-related questions, requests, or concerns:

This Privacy Policy explains how SHALL V (“SHALL V”, “we”, “us”, or “our”) handles personal information when you use the SHALL V mobile application and related account, recovery, and support services.

SHALL V is designed as a privacy-first, local-first health and wellness application. We aim to keep your everyday health and fitness information on your device whenever possible.

1. What Is SHALL V?

SHALL V is a personal wellness application covering:

health and wellness;
fitness and training;
nutrition;
movement and activity;
hydration;
sleep;
recovery;
progress tracking.

SHALL V allows users to record information, view progress, receive personalized calculations and targets, organize training and nutrition, and manage their everyday wellness routine.

SHALL V is a wellness and fitness product. It is not intended to replace professional medical care.

2. Who Can Use SHALL V?

SHALL V currently supports users 16 through 65 years of age.

Ages 16–19

Users aged 16–19 receive a youth-oriented experience designed around more conservative and non-restrictive wellness guidance.

Ages 20–65

Users aged 20–65 can use the full SHALL V experience.

SHALL V is not intended for users under 16.

Where applicable law requires additional protections, consent, authorization, or other safeguards for younger users, SHALL V will follow the requirements that apply to the relevant user and jurisdiction.

3. Information We Handle

Depending on the features you use, SHALL V may handle the following categories of information.

Account and authentication information

When you create or sign in to a SHALL V account, we may handle:

email address;
display name;
SHALL V account/user identifier;
authentication and session information;
information needed to sign in using email/password or Google Sign-In.

Profile information

You may provide information such as:

name;
age;
gender;
height;
weight;
goals;
activity information;
nutrition preferences;
dietary preferences;
meal preferences;
training preferences;
application settings.

Health, fitness, nutrition and wellness information

Depending on what you enter or use, SHALL V may handle:

Training and fitness

workouts;
exercises;
sets and repetitions;
workout history;
personal records;
workout plans;
training progress;
muscle-group training information.

Nutrition

food entries;
meals;
quantities;
calorie information;
macronutrients;
nutrient information;
nutrition targets;
dietary preferences;
nutrition history.

Body information

weight;
height;
age;
related body measurements;
calculated BMI;
estimated BMR;
estimated TDEE;
personalized nutrition targets.

Movement and activity

activity and movement information that you record or provide through SHALL V.

Hydration

water and hydration information that you record.

Sleep and recovery

sleep information you record;
sleep history;
recovery-related information;
applicable daily notes.

Custom information

You may create custom items such as:

foods;
exercises;
activities;
other user-created fitness or nutrition information supported by SHALL V.

4. How We Use Your Information

SHALL V uses information to provide and operate its features, including:

creating and managing your account;
authenticating you;
providing the application's core functionality;
personalizing your experience;
calculating personalized targets;
recording workouts and exercise sessions;
recording nutrition and food intake;
tracking movement and activity;
tracking hydration;
tracking sleep;
displaying progress and history;
managing training plans;
managing nutrition information;
providing optional device-to-device recovery;
maintaining application security;
handling support and privacy requests;
complying with applicable legal requirements.

We do not use your health information for unrelated advertising purposes.

5. Local-First Storage

SHALL V follows a local-first architecture.

Your ordinary health, fitness, nutrition, workout, weight, movement, hydration, sleep, and related tracking information is primarily stored on your device.

SHALL V does not continuously upload your health records to the cloud during ordinary use.

SHALL V is not designed as a continuous cloud-sync service for your health information.

This means that the normal use of the application's tracking features does not automatically create a permanent cloud copy of your health records.

6. What Information Leaves Your Device?

Most health and fitness information remains on your device.

Information may leave your device in the following situations:

Account and authentication

Account information and authentication data are transmitted to the services used to provide SHALL V account functionality.

Optional device recovery

If you explicitly start the device recovery process, selected information may be prepared into a recovery snapshot and encrypted on your device before it is uploaded to temporary cloud storage.

The recovery system is optional and user-initiated.

SHALL V does not continuously upload your ordinary health records simply because you use the application.

7. Supabase

SHALL V currently uses Supabase for:

authentication;
account-related services;
user identification;
database infrastructure;
temporary encrypted recovery storage.

Supabase may therefore handle information such as:

email address;
display name where applicable;
SHALL V user/account identifier;
account-related information needed to operate the service;
encrypted recovery information when you explicitly use device recovery.

Health, fitness, nutrition, workout, sleep, movement, hydration, weight, and related information included in an optional recovery snapshot is encrypted on your device before upload.

SHALL V does not provide Supabase with that recovery payload as ordinary readable health records.

Supabase's own handling of information is also subject to its applicable privacy policies and terms.

8. Google Sign-In

SHALL V allows you to use Google Sign-In as an optional authentication method.

When you choose Google Sign-In, Google provides authentication information necessary for SHALL V to establish and authenticate your account.

SHALL V does not send your health, fitness, nutrition, workout, sleep, movement, hydration, or weight records to Google through the Google Sign-In integration.

Google's processing of information is governed by Google's applicable privacy policies.

9. Encrypted Device-to-Device Recovery

SHALL V includes an optional mechanism for transferring relevant information from one device to another.

This feature is designed for explicit, user-initiated recovery rather than continuous synchronization.

When you initiate recovery:

relevant data is prepared on your device;
the recovery payload is encrypted on your device;
the encrypted payload is uploaded to temporary cloud storage;
the recovery information can be retrieved by your new device;
after successful restoration, SHALL V attempts to immediately delete the recovery snapshot.

Encryption

Recovery snapshots currently use:

AES-256-GCM encryption

with key derivation using:

PBKDF2

The recovery passphrase/key is not intended to be stored as a persistent server-side secret.

SHALL V does not intentionally store your recovery passphrase in its cloud database.

Because the recovery system is designed around user-controlled encryption, losing the recovery key/passphrase may prevent recovery of the encrypted backup.

10. Recovery Snapshot Expiration

Recovery snapshots are temporary.

They are designed to have a maximum 48-hour recovery window.

Server-side access controls prevent expired recovery snapshots from remaining available through the normal recovery access path.

A successfully restored recovery snapshot is deleted immediately through the recovery process where the restoration completes successfully.

Recovery snapshots are not intended to become permanent copies of your health records.

11. Security

SHALL V uses reasonable technical safeguards designed to protect the information it handles.

These include measures such as:

encrypted network communication;
authenticated access controls;
Supabase Row Level Security for applicable cloud records;
secure storage for authentication/session information on the device;
local-first storage for ordinary health information;
AES-256-GCM encryption for recovery snapshots;
PBKDF2-based key derivation for recovery encryption;
temporary recovery storage;
server-side controls restricting access to recovery records.

No electronic system can be guaranteed to be completely secure.

You are responsible for protecting your device, account credentials, and recovery key/passphrase.

12. What SHALL V Does Not Do

Based on the current implementation, SHALL V does not:

sell your personal information;
sell your health or fitness information;
use your health information for advertising;
use advertising networks or advertising SDKs;
maintain continuous cloud synchronization of your health records;
intentionally upload ordinary health records to the cloud during normal local-first use;
use your health information for employment decisions;
use your health information for insurance eligibility decisions;
use analytics services such as Google Analytics, Mixpanel, Amplitude, or Segment;
use third-party crash-reporting services such as Sentry, Crashlytics, or Bugsnag;
use RevenueCat or another third-party subscription-management service;
currently process subscription-payment information through a SHALL V payment system.

These statements describe the current implementation and may be updated if SHALL V introduces new functionality or services.

13. Data Sharing

SHALL V does not sell personal information.

SHALL V does not sell health, fitness, nutrition, weight, workout, sleep, movement, hydration, or recovery information.

SHALL V currently shares or transfers information only where necessary to provide the services described in this Privacy Policy, such as:

account authentication and account services through Supabase;
authentication through Google when Google Sign-In is used;
temporary encrypted recovery storage when you explicitly initiate recovery.

We may also disclose information where required by applicable law, legal process, or a valid governmental or regulatory requirement.

14. Data Retention

Different categories of information have different storage periods.

Account information

Account-related information may remain in our authentication and account systems until you delete your account, subject to any retention that may be required for a legitimate legal, security, fraud-prevention, or compliance purpose.

Health and fitness information

Your ordinary health, fitness, nutrition, workout, weight, movement, hydration, sleep, and related tracking information is primarily stored locally on your device.

SHALL V does not currently maintain a permanent cloud copy of this information during ordinary use.

Recovery information

Encrypted recovery snapshots are temporary and are designed for a maximum 48-hour recovery period.

15. Account and Data Deletion

You can request deletion of your SHALL V account and associated data.

SHALL V provides an in-app Delete Account & All Data function.

When an authenticated account deletion request is successfully processed, SHALL V's deletion system is designed to:

delete the user's Supabase account;
delete the associated profiles data;
delete associated custom_assets data;
delete associated recovery_snapshots;
delete locally stored SHALL V data on the device;
clear applicable authentication/session information;
return the application to a signed-out state.

The live account-deletion system has been tested against the production Supabase environment, including verification that the account and the relevant cloud records are removed and that the deleted account cannot subsequently sign in.

Some information may be retained where retention is required or permitted by applicable law, security obligations, fraud prevention, or other legitimate legal purposes.

16. External Account Deletion

Because you may uninstall the SHALL V application before requesting deletion, SHALL V provides an external web-based Account Deletion page.

That page allows users to initiate an account-deletion request without needing to keep the mobile application installed.

Google Play requires account-creating apps to provide an in-app deletion path and an accessible external deletion resource.

The external Account Deletion page is available here: Account Deletion .

17. Your Privacy Choices

Depending on the feature, you may be able to:

view your information within SHALL V;
edit your profile;
edit or delete logged information;
change application preferences;
choose whether to use Google Sign-In;
choose whether to use optional device recovery;
request account deletion;
request information about how your information is handled.

To make a privacy request:

shallvapp@gmail.com

We may need to verify your identity before completing certain requests.

18. Young Users

SHALL V supports users aged 16–19 through its youth-oriented experience.

The youth experience is intended to use more conservative and non-restrictive wellness guidance.

SHALL V does not intend to encourage:

extreme calorie restriction;
unsafe exercise practices;
excessive exercise;
extreme weight-loss behavior;
other harmful wellness practices.

Users under 18 may receive additional protections under applicable laws depending on where they live.

SHALL V is not intended for anyone under 16.

If you believe a person under the minimum supported age has provided personal information to SHALL V, contact:

shallvapp@gmail.com

19. Health and Medical Disclaimer

SHALL V is a wellness, fitness, nutrition, movement, hydration, sleep, and recovery application.

Unless explicitly stated otherwise, SHALL V is not a medical device, healthcare provider, emergency service, or substitute for professional medical advice .

Information, calculations, nutrition targets, exercise guidance, training information, progress information, and other content provided by SHALL V are intended for general wellness and fitness purposes.

Calculations such as BMI, BMR, TDEE, calorie targets, nutrition targets, and similar values are estimates based on information provided by the user and applicable calculation methods.

They should not be treated as medical diagnosis or individualized medical treatment.

If you have a medical condition, significant physical limitation, eating disorder, are taking medication, are pregnant, or have another health concern that could affect exercise or nutrition, consult an appropriately qualified healthcare professional before making significant changes to your diet, exercise, or health routine.

For a medical emergency, contact your local emergency services rather than relying on SHALL V.

20. International Processing

SHALL V is operated from India by Muhammed Ashik P A.

Some third-party service providers used by SHALL V may process information through infrastructure located outside your country or jurisdiction.

Where applicable, information transmitted to those providers is protected using appropriate technical and security measures for the service involved.

Third-party providers may have their own privacy policies governing their processing activities.

21. Privacy Requests and Contact

For questions about this Privacy Policy, personal information, account deletion, or privacy concerns, contact:

Muhammed Ashik P A
Operator of SHALL V

Email:
shallvapp@gmail.com

Please provide sufficient information for us to understand and process your request.

22. Changes to This Privacy Policy

We may update this Privacy Policy when:

SHALL V introduces new features;
our data practices change;
new third-party services are introduced;
applicable laws or regulations change;
Google Play requirements change;
security or privacy practices are improved.

When material changes are made, we will update the Last Updated date and, where appropriate, provide additional notice through the application, website, or another appropriate channel.

You should review this Privacy Policy periodically.

23. Applicable Privacy Requirements

SHALL V aims to comply with privacy and data-protection requirements applicable to the service and its users.

For Google Play distribution, SHALL V will maintain the disclosures, privacy-policy access, health-app declaration, and account-deletion mechanisms required by applicable Google Play policies. Google Play currently requires health apps to complete the Health apps declaration and to maintain a publicly accessible privacy policy covering personal and sensitive data handling.

For users in India, SHALL V will update its privacy practices as applicable provisions of India's Digital Personal Data Protection framework and its implementing rules become operative. The Digital Personal Data Protection Rules, 2025 provide for phased commencement rather than bringing all provisions into force at once.

24. Summary

SHALL V is designed around the following principles:

Local-first
Your ordinary health and fitness information is primarily stored on your device.

Privacy-first
SHALL V does not sell your personal or health information and does not use health information for advertising.

Optional recovery
Cloud recovery is initiated by you rather than continuously running in the background.

Encrypted recovery
Recovery information is encrypted on your device before upload.

Temporary recovery storage
Recovery snapshots are designed for a maximum 48-hour recovery window.

Account deletion
You can request deletion of your account and associated cloud data through SHALL V.

Limited third-party services
Current third-party integrations are limited primarily to Supabase for account/cloud infrastructure and Google for optional authentication.

25. Contact

SHALL V
Operated by Muhammed Ashik P A

Privacy Contact:
shallvapp@gmail.com

Effective Date: 29 September 2026
Last Updated: 29 September 2026

← Back to SHALL V

```