Privacy Policy

Who we are

Shepherd is operated by Shepherd Holistic LLC, a Tennessee limited liability company based in Nashville, Tennessee, USA (“Shepherd”, “we”, “us”). We decide how personal information in Shepherd is used, and we are responsible for it.

Coaches on Shepherd run their own coaching businesses. A coach sees information about you because you are her client and, for health and wellness information, only because you switched it on for her. A coach may also be responsible for how she uses it under the laws that apply to her.

What we collect

Your account

Your email address, your name if you give it, your time zone (taken from your phone, so that “today” is your day), your preferred weight unit, and whether you use Shepherd to train, to coach, or both. If you sign in with Apple, Apple gives us an identifier and, the first time, the name and email you choose to share.

What you buy

When you buy a challenge on a coach’s page, Stripe processes the payment. We receive the email you used, the challenge, the amount, the currency and Stripe’s payment reference. We never see or store your full card number. Your purchase is tied to that email, so it is waiting in the app when you sign in with the same address.

Your training

The sessions you start and finish, every set you log (weight, reps, and whether you skipped or swapped a lift), how long a session took, the bests you set, the challenges and Rallies you join, and the days you trained.

What you say

Voice notes you record and send to your coach (the audio, its length and its waveform), notes your coach sends you, and what you post, answer or react to in rooms. Rooms are shared with the other people in them.

Health and wellness information

Only if you connect a source, and only what that source makes available:

• Apple Health. With your permission in Health, the app reads heart-rate variability, resting heart rate, sleep, steps, blood oxygen and menstrual flow. It never writes to Health. On your phone, these become one number per kind per day (for example, last night’s hours asleep, or the day of your cycle with an estimated phase), and only those day numbers are sent to Shepherd. The underlying samples stay on your phone.
• Wearables such as WHOOP, Oura, Garmin, Polar, Suunto, Ultrahuman and Withings. When you connect one, you sign in with that company and authorize Shepherd to receive your data from it: scores such as recovery, readiness and strain, sleep, heart-rate variability, resting heart rate and, for devices that track it, the menstrual cycle. Connections run through Open Wearables, open-source software we operate on our own infrastructure, which holds the sign-in tokens for those companies so the app never has to.

Your coach may set rules for her challenge, such as a lighter day when recovery is low. Those rules are applied on your phone, to your own readings.

Your device

A push notification token so we can deliver notes and reminders, when the app was opened, your device model and app version, and error details when something fails, so we can fix it.

If you coach

Your coaching profile (name, photo, location and bio), the challenges, workouts, cues, voice recordings and films you upload, your prices and the share Shepherd keeps, and, once payouts are set up, the details our payment provider needs to pay you.

On this site

If you reserve a place, join a waitlist or send an inquiry, the name, email and details you enter, and a campaign tag if you arrived from a tagged link. This site sets no advertising cookies and uses no third-party analytics.

How we use it

• To run your account, deliver what you bought, and let you train: plan each session, remember the weights you used and keep your history.
• To connect you and your coach: deliver voice notes, show her your progress and, only where you switched it on, your wellness trends.
• To write your coach’s morning briefing: a short read of which of her clients may need her today.
• To send the messages you expect: sign-in codes, receipts, reminders and notes. We send marketing only if you ask for it.
• To keep Shepherd safe and working: prevent abuse, fix errors and understand which parts are used.
• To meet our legal, tax and accounting obligations.

We do not use health or wellness information for advertising or marketing, we do not sell it, and we do not use it to build profiles for anyone else. Information from Apple Health is used only to provide Shepherd’s health and fitness features to you and, where you allow it, to your coach.

What your coach sees

Your coach sees what she needs to coach you: your training, the challenges you are in and the notes between you. Health and wellness information reaches her only through switches you control on Your data, one per signal: heart rate while you train, sleep and recovery as a trend, daily steps, and your cycle. Each is off until you turn it on, and turning it off stops the sharing from that moment.

Artificial intelligence

To draft a coach’s morning briefing, we send summaries of her clients’ training and, where they share them with her, wellness trends to Anthropic, which provides the Claude AI model. Anthropic processes this on our behalf to write the briefing and, under its commercial terms, does not use it to train its models. The briefing is a suggestion to the coach. It makes no decision about you.

Who else handles it

We share personal information only with:

• Your coach, as described above, and the people in the rooms you post in.
• Service providers that run Shepherd for us, under contracts that limit their use of it: Supabase (database, sign-in and file storage, in the United States), Stripe (payments and coach payouts), Apple (Sign in with Apple, notifications and the App Store), Anthropic (the briefing), Resend (email) and our hosting providers.
• The wearable companies you choose to connect, under their own terms and privacy policies.
• Authorities, when the law requires it, or to protect someone’s safety or our rights.
• A buyer or successor, if Shepherd is sold or merged, who must keep the promises in this policy.

We do not sell personal information, and we do not share it for targeted advertising.

How long we keep it

We keep your information while your account is open. When you delete your account, your profile, training, voice notes, posts, health and wellness readings and connections are deleted. Records of payments are kept, without your account attached, for as long as tax and accounting law requires. Backups roll over within 30 days. Disconnecting a source on Your data deletes every reading it sent.

Your choices and rights

• Delete your account in the app, from Settings.
• Disconnect Apple Health or any wearable on Your data. You can also remove Shepherd’s access in the Health app or in the wearable’s own settings.
• Turn each thing your coach sees on or off, at any time.
• Ask us for a copy of your information, or to correct or delete it.

Depending on where you live, including California and other US states, the European Economic Area and the United Kingdom, you may have further rights: to know what we hold, to object to or restrict some uses, to take your data elsewhere, and to withdraw consent. Write to rosemancam@gmail.com. We answer within 30 days, we may ask you to confirm that the request is yours, and we never treat you differently for asking.

If you are in the EEA or the UK, we rely on our contract with you to run Shepherd, on your explicit consent for health information, and on our legitimate interest in keeping Shepherd secure and improving it. You may also complain to your local data protection authority.

Security

Information is encrypted in transit, access is limited by person and by role, and the database lets each person reach only their own records. Wearable sign-in tokens are held by our Open Wearables service, not by the app. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Where it is processed

Shepherd is run from the United States, and your information is stored and processed there. If you use Shepherd from elsewhere, your information is transferred to the United States, where we protect it as this policy describes.

Children

Shepherd is not for children. You must be at least 16 to use it. We do not knowingly collect information from anyone under 16; if you believe a child has given us information, write to us and we will delete it.

Changes

If we change this policy, we update the date at the top. For a significant change, we tell you in the app or by email before it takes effect.

Contact

Shepherd Holistic LLC, Nashville, Tennessee, USA. Email rosemancam@gmail.com.