ShredCast ("ShredCast," "we," "us") is an iOS app operated by Jonathan Carden, an individual developer. This Privacy Policy explains what information ShredCast collects, how it is used, and the choices you have. AI data sharing occurs only after the separate, affirmative permission request shown inside the app.

1. Who operates ShredCast

ShredCast is developed and operated by Jonathan Carden. There is no separate corporate entity. Contact for all privacy questions: jon.carden@gmail.com.

2. Information we collect

ShredCast does not require an account and does not collect your email address in-app. We collect:

• Body photos you choose to take or select for body-fat estimation, check-in comparison, and milestone image generation.
• Profile and goal inputs you provide, including sex, age, height, weight, fitted-shirt setting, estimated and target body-fat ranges, and selected physique goals.
• A random device identifier, generated by the app and sent with processing requests to enforce per-device rate limits. It is not tied to an account, name, or email address.
• Purchase and subscription status received directly from Apple and used on-device to unlock paid features.

ShredCast also writes basic feature-use events (such as screens viewed or features used) to a file stored locally on your device. These local events are not transmitted to us or to an analytics company.

3. AI processing and your permission

4. Who receives AI processing data

The data described above is shared only with these service providers:

• Cloudflare, Inc. hosts ShredCast's processing service. The service validates the request, applies rate limits, and forwards only the data needed for the requested feature.
• OpenAI, LLC (“OpenAI”) provides the third-party AI models used to estimate a body-fat range, compare check-ins, and generate milestone images.

ShredCast's processing service handles photo and profile content in memory for the duration of the request and does not save a copy after returning the result. It stores a short-lived rate-limit counter associated with the random device identifier; it does not store the photo in that counter.

OpenAI states that API inputs and outputs are not used to train or improve its models by default. Under OpenAI's default API controls, content may be retained in abuse-monitoring logs for up to 30 days, unless it must be kept longer by law. See OpenAI's API data controls.

We use Cloudflare and OpenAI only as processors to provide the features described in this policy. Under the data-protection and security terms applicable to those services, they are required to protect personal data to the same or an equivalent standard as the protections described here. We do not authorize either provider to sell your data, use it for advertising, or use it to train AI models.

5. Where your data is stored

Your original photos and any AI-generated milestone images are stored locally on your device, protected by iOS data protection (device encryption). We do not keep a persistent copy of these images on ShredCast's processing service. Deleting a photo or generated image within the app — or deleting the app itself — removes that copy from your device. Provider security logs, if any, expire under the provider retention period described above and may not be immediately deleted by an on-device deletion.

6. What we don't do

• We do not sell your data.
• We do not use third-party advertising SDKs.
• We do not give ad networks or other third parties access to your photos.

7. Age requirement and minors

ShredCast is intended for users 18 years of age or older. We do not knowingly collect or process photos of minors. The app includes checks designed to decline analysis when a minor is suspected in a submitted photo.

8. Your rights and choices

• AI permission: You can decline before the first upload or revoke future AI data-sharing permission in ShredCast Settings. Declining or revoking prevents new AI processing requests.
• Deletion: You control on-device deletion directly in the app. “Delete all my data” removes locally stored photos, generated images, profile inputs, progress, and AI permission.
• Access and questions: Contact jon.carden@gmail.com with any question about your data.
• California and EU users: If you are a California resident or located in the EU/EEA, you may contact us at the email above to ask questions about, or request action on, the limited data described in this policy. Because we do not maintain user accounts or persist photos on ShredCast's processing service, most app data is controlled through on-device deletion.

9. Data retention

Photos and generated images: retained only on your device, for as long as you keep them there, except for temporary third-party processing and possible OpenAI abuse-monitoring retention described in Section 4. The random device identifier remains in your device's Keychain; ShredCast's Cloudflare service stores expiring per-day request counters keyed by that identifier. Purchase status is managed by Apple. Local usage events remain on the device until app data is deleted.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page. Continued use of ShredCast after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy or your data can be sent to jon.carden@gmail.com.