ActiveShape Privacy Policy
Effective Date: December 11, 2024 — Last updated: March 2026
At ActiveShape, operated by Tower Tech, we respect your privacy and are committed to protecting the personal information you share with us. This Policy describes how we collect, use, and protect your data.
1. Information We Collect
We collect information you provide and automatic usage data:
- Name and email address
- Profile picture (if you sign in with Google, Facebook, or Twitter)
- Health and fitness data you voluntarily enter (weight, height, age, gender, fitness goals, activity level, meal logs, fasting schedules, and workout history)
- Photos from your device — only when you explicitly grant permission to access your photo library to upload meal images or a profile picture
- Camera — only when you explicitly grant permission to take photos directly within the app (e.g., meal photos)
- Payment information processed by our payment provider, Stripe. We do not store card numbers or CVV codes
- Usage and device data (device type, operating system, app version, crash reports, session activity)
- Cookies and similar technologies (web platform only)
- Referral program data — if you participate in the ActiveShape Referral Program, we collect your referral code, the number of users you have referred, referral statuses, commission amounts, payout records, and IP address at the time of referred user signup (for fraud prevention)
2. How We Use Information
- To create and manage your account
- Personalize your health and fitness experience
- Generate meal plans, workout recommendations, and insights based on your goals
- Process payments and manage your subscription
- Improve the quality of our service
- Send updates and notifications
- Operate the Referral Program, calculate commissions, process payouts, and detect fraudulent activity
- Comply with legal requirements
3. Legal Basis
We process your data based on your explicit consent, the performance of a contract with you, or our legitimate interest in improving our services.
4. How We Share Data
We do not sell your personal information. We only share data with service providers strictly necessary to operate the application:
- Stripe — payment processing, subscription management, and referral program payouts via Stripe Connect Express (which handles identity verification and tax form generation for referrers)
- Amazon Web Services (AWS) — cloud infrastructure and file storage
- Google / Facebook / Twitter — social sign-in (only when you choose to use these providers)
- Spoonacular — recipe and nutrition data
- OpenAI — AI-powered meal and workout recommendations
5. Permissions
The ActiveShape mobile app may request the following device permissions:
- Camera — to take photos of meals or a profile picture. Requested only when you initiate a photo action. You can deny this permission without losing core app functionality.
- Photo Library — to select existing photos from your device for meal logging or your profile. Requested only when you initiate a photo selection. You can deny this permission without losing core app functionality.
6. Security
We implement technical and organizational measures to protect your data, including SSL/TLS encryption, restricted access controls, httpOnly cookies for authentication tokens, and security monitoring.
7. Retention
We retain your data while your account is active or as needed to comply with legal obligations. You can request deletion at any time. See our Data Deletion Policy for full details.
8. Your Rights
You have the right to request access, rectification, or deletion of your data. You may also:
- Export your data
- Withdraw consent at any time
- Delete your account from Settings → Account → Delete my account
To exercise these rights, contact us at: support@gotowertech.com
9. Cookies
On the web platform, we use cookies for authentication (httpOnly secure cookies), analytics, and application functionality. You can manage cookie preferences through your browser settings.
10. Referral Program Data
If you participate in our Referral Program, we collect and process additional data to operate the program and prevent fraud:
- Your unique referral code and optional custom slug
- The number and status of users you have referred (anonymized — referrers do not receive personally identifiable information about referred users beyond initials and subscription status)
- Commission amounts, payout records, and Stripe Connect account information
- IP addresses of referred users at the time of signup (used solely for fraud detection, not shared with referrers)
- Aggregated, anonymized referral analytics used for system-wide reporting
Referral program data is retained as long as your account is active. If you withdraw from the program, payout records may be retained for tax compliance purposes as required by applicable law. For full details, see our Referral Program Terms.
11. Children
ActiveShape is not directed at children under 13. We do not intentionally collect data from minors. If you believe a minor has provided us with personal information, please contact us immediately.
12. Changes
We may update this policy. The most recent version will always be available at https://www.active-shape.com/privacy-policy. We will notify you of significant changes by email or through an in-app notice.