Body Shred
An invite-only food and fitness log I built for my household.
Two people were logging meals and workouts in separate places, and I wanted one private place for both, with nobody else able to see it.
A small SaaS app on Cloudflare Workers and D1. Google sign-in, accounts I create from an admin page, households with roles, and each person decides whether their log is shared. I built it with an AI coding agent and wrote the security rules first.
Live at shred.nolangrush.com since Nov 3, 2026.
- 250unit tests
- 131 / 131private pages that refuse a signed-out visitor
Decisions
- 01Invite-only
There is no sign-up page. A Google account gets in only with an invite.
- 02Deny by default
A new page is private unless it's explicitly made public, and a test fails if one slips through.
- 03Short sessions
You're signed out after 7 days without use, and after 30 days no matter what.
- 04Sample data in public
The demo uses a made-up household. Real entries never leave the private app.