Privacy Policy
Source Dominion LLC · shedpilot.com
Last Updated: June 30, 2026
Source Dominion LLC · shedpilot.com
Welcome to ShedPilot, developed and operated by Source Dominion LLC ("Company," "we," "us," or "our"). We are committed to protecting your privacy and handling your personal information — especially your health and fitness data — with care, transparency, and respect.
This Privacy Policy explains what information we collect when you use the ShedPilot mobile application (available on iOS as bundle ID: com.shedpilot.app), our website at shedpilot.com, and all related services (collectively, the "Service"). It also explains how we use, store, share, and protect that information, and what rights you have over your data.
By using ShedPilot, you agree to the practices described in this Privacy Policy. Please read it carefully. If you have questions, contact us at help@shedpilot.com.
We collect information in several ways: information you provide directly, information generated by your use of the App, information from your device's sensors and systems (with your permission), and information from third-party services you connect.
When you create a ShedPilot account, we collect:
To personalize your experience, we ask you to provide the following health and fitness metrics during onboarding and ongoing use:
This data is used to generate personalized meal plans, workout plans, calorie targets, and progress tracking. See Section 4 for special rules governing HealthKit-sourced health data.
With your explicit permission granted through iOS, ShedPilot may read the following data from Apple HealthKit:
ShedPilot only reads from HealthKit — we do not write data back to Apple HealthKit. You can revoke this permission at any time in iOS Settings. HealthKit data is subject to additional special protections described in Section 4.
ShedPilot requests access to your device camera for two features:
Camera access is required only when you actively use these features. You can revoke camera access at any time in iOS Settings → Privacy & Security → Camera.
ShedPilot requests access to your approximate GPS location when you use the "Nearby Restaurants" feature powered by the Yelp API. Location is:
You can revoke location access at any time in iOS Settings → Privacy & Security → Location Services → ShedPilot.
We automatically collect information about how you use the App, including:
This data is collected via Firebase Analytics and is used to improve app performance, identify bugs, and understand how users engage with the Service.
We collect technical information about your device, including:
We collect the content of communications you send to us or generate within the App, including:
ShedPilot does not collect, process, or store your payment card information. All subscription payments and in-app purchases are handled exclusively by Apple Inc. through the App Store. We receive only:
We use the information we collect for the following purposes:
When you generate meal plans, workout plans, or use the AI food photo scanner, we send anonymized health data inputs to OpenAI's GPT-4.1 API. This includes:
We do not send your name, email address, or account identifiers to OpenAI. OpenAI's data processing is governed by OpenAI's Privacy Policy.
We use your device push token to send notifications, including meal reminders, workout reminders, friend nudges, achievement alerts, and promotional communications. See Section 10 for how to manage notification preferences.
Analytics data is processed by Firebase Analytics (Google) and is subject to Google's data processing terms.
HealthKit data synced into ShedPilot is:
We make the following unconditional commitments regarding your HealthKit data:
| What We Will NEVER Do | Why This Matters |
|---|---|
| ❌ Use HealthKit data for advertising or marketing | Your health data will never influence ads you see — in ShedPilot or anywhere else |
| ❌ Sell your HealthKit data to any third party | Your health data has no commercial value to us outside of running the App |
| ❌ Share HealthKit data with third-party analytics or data brokers | Firebase Analytics and other analytics tools receive anonymized usage data only — never your HealthKit readings |
| ❌ Share HealthKit data for any purpose unrelated to providing core app features | HealthKit data stays within the ShedPilot ecosystem and is used only to power your fitness tracking |
HealthKit data is used only for the following purposes within the ShedPilot App:
You can revoke ShedPilot's access to your Apple HealthKit data at any time:
Revoking access stops future HealthKit data from being read. Data already stored in your Firestore account can be deleted by deleting your account (see Section 9).
We retain your personal information for as long as your account is active and as needed to provide the Service. Specifically:
| Data Type | Retention Period |
|---|---|
| Account information (name, email) | Until account deletion + 30 days for backup purge |
| Health & fitness data (logs, diary, workouts) | Until account deletion |
| HealthKit-synced data (stored in Firestore) | Until account deletion or manual deletion |
| Usage and analytics data | Up to 14 months (per Firebase Analytics default) |
| Support communications | Up to 3 years for legal compliance purposes |
| Subscription records | Up to 7 years (tax and financial compliance) |
| Food photos (AI scanning) | Not stored beyond the duration of processing |
When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain certain records longer (e.g., financial transaction records).
Source Dominion LLC takes the security of your personal and health information seriously. We implement the following technical and organizational safeguards:
You are responsible for keeping your account password or authentication credentials secure. If you believe your account has been compromised, contact us immediately at help@shedpilot.com.
ShedPilot is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly.
Users between the ages of 13 and 17 may use ShedPilot only with the knowledge and consent of a parent or legal guardian. Parents and guardians are responsible for supervising their minor's use of the App.
The following features are restricted to users 18 years of age or older:
If you are a parent or guardian and believe your child under 13 has created a ShedPilot account or provided personal information, please contact us at help@shedpilot.com and we will promptly investigate and delete the account and associated data.
ShedPilot does not direct the App toward children under 13 and takes reasonable measures to avoid collecting personal information from such individuals in accordance with the Children's Online Privacy Protection Act (COPPA).
You have meaningful rights over your personal information. Here's how to exercise them:
You may request a copy of the personal information we hold about you at any time by contacting us at help@shedpilot.com. We will respond to verified requests within 30 days.
You can update most of your account and health profile information directly within the App through your profile settings. For corrections that cannot be made in-app, contact us at help@shedpilot.com.
You can request deletion of your account and associated personal data at any time. To delete your account:
Upon deletion, your personal data will be permanently deleted within 30 days, except for data we are legally required to retain (e.g., financial transaction records). Note: Subscription cancellation is separate from account deletion and must be completed through Apple's App Store settings.
You may opt out of Firebase Analytics data collection. To do this:
You can revoke any device permission you've granted ShedPilot at any time in iOS Settings → Privacy & Security:
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
To exercise CCPA rights, contact us at help@shedpilot.com. We will respond to verifiable consumer requests within 45 days.
ShedPilot uses push notifications to keep you engaged and on track with your health goals. Notifications may include:
When you first install ShedPilot, iOS will ask for your permission to send push notifications. You may allow or deny this request. You can change your notification preferences at any time in iOS Settings → Notifications → ShedPilot.
Disabling push notifications will not affect your ability to use the core features of the App, but you will no longer receive reminders or social activity alerts.
The ShedPilot App may contain links to third-party websites, services, or applications — including but not limited to Yelp restaurant pages, Instacart, Uber Eats, and recipe sources. These third-party services have their own privacy policies, and we have no control over their data practices.
When you follow a link to a third-party service or use an integrated third-party feature, you are leaving ShedPilot's environment, and your use of those services is governed by their respective terms and privacy policies. We are not responsible for the privacy practices or content of any third-party services.
We encourage you to review the privacy policies of any third-party services you interact with through or alongside ShedPilot.
ShedPilot is designed and intended for users located in the United States. Our servers and data infrastructure are located in the United States (Google Cloud / Firebase).
If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. Data protection laws in the United States may differ from those in your country of residence.
By using ShedPilot from outside the United States, you consent to the transfer of your information to the United States and acknowledge that your information will be subject to U.S. law.
We do not currently offer versions of the App specifically tailored for compliance with the European Union's General Data Protection Regulation (GDPR) or other non-U.S. privacy frameworks. If you are located in the EU or EEA, you use the Service at your own discretion.
Clinical Pro subscribers who opt in to telehealth referral features or GLP-1 consultation services may have certain health information shared with our partner, Virtual Psychiatric Care, an independent licensed healthcare provider. This data sharing occurs only with your explicit, informed consent — you will be presented with a clear opt-in disclosure before any data is shared.
Data that may be shared with Virtual Psychiatric Care when you opt in includes:
Virtual Psychiatric Care is an independent healthcare provider operating under its own HIPAA-compliant privacy practices. When you engage with Virtual Psychiatric Care's services (following the referral facilitated by ShedPilot), any health information exchanged directly with Virtual Psychiatric Care is subject to HIPAA protections governed by Virtual Psychiatric Care's Notice of Privacy Practices.
Source Dominion LLC is a technology company and is not itself a HIPAA-covered entity or business associate in connection with general ShedPilot use. However, to the extent we transmit protected health information to Virtual Psychiatric Care on your behalf, we take appropriate contractual and technical safeguards.
You may withdraw consent for data sharing with Virtual Psychiatric Care at any time by contacting us at help@shedpilot.com. Withdrawal will not affect any clinical relationship you have already established with Virtual Psychiatric Care, which is governed by their own terms and policies.
We may update this Privacy Policy from time to time to reflect changes in our data practices, new features, legal requirements, or for other operational reasons. When we make material changes, we will:
Your continued use of ShedPilot after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you should stop using the Service and delete your account.
The most current version of this Privacy Policy will always be accessible at shedpilot.com/privacy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
For data deletion requests, CCPA inquiries, or to exercise any privacy rights described in this Policy, please email us with the subject line "Privacy Request". We will respond within 30 days (45 days for CCPA requests).
For billing or subscription-related issues, contact Apple Support via reportaproblem.apple.com, as Apple manages all payment processing for the App.