Privacy Policy

1. Who We Are

ShiftwithAI (“we”, “us”, “our”) operates the website and service available at shiftwith.ai. We provide a platform that collects health-related intake information from users and passes it to third-party artificial intelligence services to generate personalised back rehabilitation program suggestions.

We are not a medical provider, clinic, or healthcare organisation. We do not employ physiotherapists, doctors, or any other regulated health professionals in the delivery of the service.

2. Data We Collect

• Account data: email address, authentication credentials.
• Intake data: self-reported health information including pain scores, symptom descriptions, medical history, activity levels, goals, and optional MRI/imaging files you choose to upload.
• Usage data: daily symptom logs, session completion records, timestamps.
• Technical data: IP address, browser type, device identifiers, and usage analytics collected via Vercel Analytics.

3. How We Use Your Data

• To generate your personalised rehabilitation program by transmitting your intake data to third-party AI providers (currently Anthropic, PBC).
• To store and display your program, daily logs, and progress.
• To monitor for symptom patterns that may require re-evaluation.
• To send transactional emails related to your account and program.
• To improve and operate our platform.

4. Third-Party AI Processors

ShiftwithAI is an aggregator platform. Program content is generated by third-party large language model (LLM) providers, currently Anthropic, PBC (Claude). Your intake data, including any uploaded imaging, is transmitted to these providers for processing. We do not control, review, or guarantee the outputs produced by these systems.

By using our service, you acknowledge that your data will be processed by third-party AI systems subject to their own terms of service and privacy policies. Anthropic’s privacy policy is available at anthropic.com/privacy.

5. Health Data and Sensitive Information

The intake information you provide may constitute health data under applicable law. You voluntarily submit this information to receive the service. By submitting health data, you explicitly consent to its processing for the purpose of generating exercise program suggestions as described in this policy.

We store your data on Supabase infrastructure hosted on AWS. We apply reasonable technical and organisational measures to protect your data but cannot guarantee absolute security of data transmitted over the internet.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by emailing shiftwithai@gmail.com. We will process deletion requests within 30 days.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data.
• Object to or restrict processing.
• Data portability (download your intake as JSON is available in the dashboard).

To exercise any right, contact us at shiftwithai@gmail.com.

8. Cookies and Analytics

We use Vercel Analytics for aggregated, privacy-preserving usage statistics. No cross-site tracking cookies are set. Authentication session cookies are strictly necessary for the service to function.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use of the service after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this policy: shiftwithai@gmail.com