ShredMode Privacy Policy
Last updated: October 11, 2026 · Native release 1.2
Scope and local-first use
This policy describes the native ShredMode 1.1 release and later. Manual food, weight and training logs work without an online account. Earlier 1.0 versions used different menu names and offered Google or Sign in with Apple connections and iCloud uploads. Those older connections and copies may remain until you remove them; updating does not erase your history or cloud files.
Quietfield Technologies LLC provides ShredMode. The app stores profile measurements, age, goals, food and meal records, photos you save, weight history, training sessions, sets, steps, recorded workout routes and related health and fitness records locally. These records are not automatically uploaded to our servers simply because you use manual tracking.
Optional AI estimates and recipients
Before using AI, review the in-app sharing disclosure and choose Allow. For the default ShredMode service, the food description, photo, guidance, workout details and relevant profile facts you choose to submit go through Quietfield Technologies servers to OpenAI to produce an estimate. Our service is hosted on Netlify. AI output is an estimate and needs your review.
Native ShredMode can authenticate AI requests with an installation identifier and Apple App Attest; a Google account is not required. If you connect Google, that account may be used for service authentication. Authentication, request identifiers and usage limits support access control, fraud prevention and reliability. Network providers receive the IP address needed to handle requests.
Native 1.1 renews consent with an explicit OpenAI disclosure. Changing the configured AI service requires renewed consent. If you configure a private service, the displayed endpoint's operator receives your request and may send it to its own providers; review that operator's policies before allowing sharing.
In Profile → AI estimates, you can turn off AI and request deletion of server jobs. This stops new estimates. Local food logs remain. Requests already transmitted cannot be recalled from every downstream system instantly.
Voice food logging
Voice logging is optional and requires separate audio-sharing consent and iOS microphone permission. While you record, audio streams directly from your iPhone to OpenAI for live transcription using a short-lived credential issued by the configured AI service. ShredMode does not save an audio recording on your device or its own servers. OpenAI may retain audio and related service records under its API data controls, including abuse-monitoring retention.
The finalized transcript is submitted as a food description to the configured AI service and follows the food-estimate retention rules below. Leaving the recording screen, putting the app in the background, cancelling, or turning off AI stops capture. You can revoke microphone access in iOS Settings. A private service supplies its own temporary credential and may use its own providers; review its policies before allowing audio sharing.
Workout location and motion
When you choose GPS tracking for a workout and grant location access, ShredMode records precise location to measure distance and display your route. Location tracking runs only during the workout you start, including while it runs in the background, and stops when the session is finished. Pausing the session stops recording new route points. Saved routes remain with your local workout history. If you enable Apple Health workout saving, the route may also be saved to Apple Health. Optional Google Drive backups and exported backup files include saved routes.
With motion permission and compatible AirPods, ShredMode uses headphone motion to count jumping jacks during sessions you start. Raw motion samples are processed on the device; workout counts and results are saved with your training history. Location and motion are not used for advertising or cross-app tracking.
Apple Health
Health access is optional and controlled by iOS permissions. Native ShredMode reads step counts, can read your latest body mass when you explicitly request it, and reads heart rate while recording a workout. It may save workouts recorded in ShredMode and their associated heart-rate and active-energy samples, and GPS routes when recorded, to Apple Health. It does not import your general workout history or use a general active-energy history feed.
Health and fitness information is not used for advertising, marketing or cross-app tracking, and is not sold. Manage permissions and previously saved Health samples in the Health app or iOS Settings. Deleting ShredMode records does not automatically delete samples already saved to Apple Health.
Backups and exported files
New app-managed iCloud database uploads are disabled in native 1.1. Existing native iCloud copies remain available for recovery and deletion under Profile → Backups → Cloud backups. Local health storage is excluded from automatic device backups. Earlier-version cloud copies may require management through that version, the provider or support.
Google Drive backup is optional. Before uploading, the app explains that the complete database—including health and fitness records, saved photos and recorded workout routes—is sent to your Google Drive AppData storage. Connecting does not enable automatic uploads; you choose Back up now or enable Automatic backups. Automatic backups run while the app is active. Access is scoped to the app's Drive data rather than your general Drive files.
An exported backup contains private health information. You choose its destination and must protect it. Exported files and independent copies remain until you delete them there. Disconnecting a provider does not erase its saved backups. Restoring a backup replaces device records and resets AI-sharing permission.
Google connection and SDK data
The optional Google connection uses the Google Sign-In SDK. Account information can include name, email address and a Google user identifier. Google documents use of the user identifier for OAuth grants and the IP address to estimate general location for fraud prevention.
The bundled SDK also declares phone-number/contact information, other data, device identifiers and usage data for its sign-in functionality and analytics. These disclosures cover the provider's sign-in flow as well as information returned to the app; The Google connection does not request phone contacts or advertising identifiers. Optional workout GPS tracking is described above. Google processes its account and sign-in records under its own privacy policy. No Google connection is required for manual tracking or installation-authenticated AI.
Service records and retention
Our AI service keeps job inputs and results so interrupted requests can resume. Its configured cleanup windows make active jobs eligible after two days and completed, failed or cancelled jobs after seven days; deletion depends on cleanup running and is not a promise of immediate removal at that instant. Explicit in-app deletion requests are retried for known accounts when online.
OpenAI and other infrastructure providers may retain service, security and abuse-prevention records under their own policies. Deleting a ShredMode job is not a guarantee that all provider records disappear immediately. Private AI services have their own retention rules.
Service diagnostics, error reports and performance information help us operate and troubleshoot connected features. Do not include sensitive content in support messages unless needed for the issue. Support correspondence and limited deletion/compliance records may be retained for up to 90 days after a request is completed, unless law requires longer retention.
Delete or replace your data
Open Profile → Backups → Delete local data to remove this device's ShredMode food logs, workouts, plans, photos and measurements. If providers are connected, Delete connected cloud backups and local data also attempts to remove this native app's connected backups before resetting local records. If cloud deletion fails, the app preserves local data and explains the failure; local-only deletion remains available separately.
Deleting or restoring local data first preserves minimal server-cleanup obligations in secure device storage. These may contain the original service address, installation/account identifiers and credentials needed to delete known jobs, or a content-free reminder that an older account identity could not be recovered. They do not contain food, photos, workouts or measurements. Known-account cleanup retries when online. Unknown previous accounts need support assistance and are never silently deleted through a different account.
An unresolved older AI identity does not block local deletion or backup restore. It also does not mean the older server records have been deleted. Contact support for help identifying the previous account. Secure cleanup reminders remain until resolved; deleting the app or changing devices can prevent further retries. Exported files, disconnected cloud copies and Apple Health records must be managed separately.
Audience, choices and security
ShredMode's planning features are for adults 18 and older. The native release does not offer complete-fast or extreme-cut plans, or new plans with estimated intake below 1,200 kcal. These limits do not establish that a plan is medically suitable. Consult a qualified clinician, especially during pregnancy, breastfeeding or treatment for an eating disorder. Existing history is preserved; unsupported prescriptions require a new supported plan.
We use encrypted network connections and platform secure storage for credentials. No storage or service can promise absolute security. We do not sell your personal data or use health data for advertising. Optional providers process information necessary to deliver the feature you choose. We may disclose records where legally required or necessary to protect the service.
Contact and requests
For access, correction, privacy or deletion assistance, email support@quietfieldtechnologies.com with the subject ShredMode Privacy Request or ShredMode Account Deletion. Describe the app version and relevant connection; do not send passwords, access tokens or a full health database. We may need to verify control of an account before deleting its server records.