Privacy Policy

SHIFT (“we”, “us”) helps you break unwanted habits and support your mental wellbeing. Privacy is core to how the app is built: the essential Urge and Calm tools work without an account, and your personal data stays on your device unless you choose to create an account and sync. This policy explains what we collect, why, and the choices you have.

1. Data we collect

Used entirely on your device (default)

When you use SHIFT without an account, your habit selection, urge logs, streaks, check-ins and session history are stored locally on your device and are not sent to us.

Account data (only if you sign up)

If you create an account we process your email address and authentication data to sign you in, and we sync your app state (mode, chosen habit or focus area, program progress, streaks) so it’s available across your devices.

Community content

Posts and comments you share in the community are stored under an anonymous pseudonym you control. They are not linked to your real name and are moderated before or shortly after publication.

AI coach

If you use the AI coach, the messages you send are processed by our AI provider (xAI, “Grok”) to generate a response. Don’t share information you wouldn’t want processed by a third-party AI service.

Payment data

Subscriptions are handled by Stripe (and, for in-app purchases, by Apple). We receive your subscription status and plan, but we never see or store your full card details — those are handled directly by the payment processor.

Usage analytics

We use privacy-friendly, aggregate analytics (Vercel Analytics & Speed Insights) to understand which features are used and to improve performance. This data is not used to track you across other apps or websites.

2. How we use your data

• To provide the app’s features and sync your progress (if signed in).
• To process and manage your subscription.
• To moderate the community and keep it safe.
• To generate AI coach responses when you use that feature.
• To improve reliability and product decisions via aggregate analytics.
• To send account and service emails (e.g. verification, password reset).

We do not sell your personal data, and we do not use it for cross-app advertising or tracking.

3. Service providers

We share data only with providers that help us run the service:

• Supabase — authentication and database (account & synced data).
• Vercel — hosting and aggregate analytics.
• Stripe — subscription payments.
• Apple — App Store in-app purchases.
• xAI (Grok) — AI coach responses.

Each processes data only to provide their service to us, under their own security and privacy commitments.

4. Data retention

On-device data remains until you clear it in the app or uninstall. Account and synced data is kept while your account is active. If you delete your account, we remove your associated personal data within a reasonable period, except where we must retain limited records (e.g. billing) to meet legal obligations.

5. Your rights

We are a Canadian company and handle personal data in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to, correction of, or deletion of your personal data, and you may withdraw consent to certain processing. If you are in the EU or UK, you also have the rights granted by the GDPR (including data portability and objection). You can clear on-device data any time in the app’s settings. For account data, contact us at hello@join-shift.com and we’ll help.

6. Children

SHIFT is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we’ll delete it.

7. Security

We use industry-standard measures to protect your data, including encryption in transit. No method of transmission or storage is completely secure, but we work to protect your information and limit access to it.

8. Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated in the app.

9. Contact

Questions about your privacy? Email hello@join-shift.com.