Privacy Policy — Shiefter

1. Introduction

Shiefter is operated by Emanio ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your personal data when you use the Shiefter mobile application and website (collectively, the "Service"). By using the Service you agree to the practices described here.

2. Data We Collect

Account data

Name, email address, password (stored as a secure hash), timezone, and gender (optional).

Fitness data

Activity check-ins, rest days, quest schedules, and journey statistics you create within the app.

Device data

Timezone, platform (iOS/Android), and app version.

Usage data

Analytics and diagnostics collected via development tools to help us understand how the app is used and to improve the experience. This may include crash reports, performance metrics, and anonymised interaction patterns.

3. How We Use Your Data

Provide, maintain, and improve the Service
Display your journey timeline, stats, and progress
Send push notifications you have opted in to (e.g. reminders)
Diagnose technical issues and monitor app performance
Communicate important service updates

4. Legal Basis (GDPR)

Contract performance — processing necessary to provide the Service you signed up for
Legitimate interest — analytics and security monitoring to improve and protect the Service
Consent — optional data such as push notifications and gender; you can withdraw consent at any time

5. Data Sharing

We do not sell your personal data. We may share limited data with trusted third-party service providers solely to operate and improve the Service:

Cloud hosting and infrastructure
Authentication providers
Analytics and error-tracking services

These providers are contractually required to protect your data and use it only on our behalf.

6. Data Storage & Security

Your data is stored on EU-hosted infrastructure. We follow industry-standard practices to protect your data.

7. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, all associated data is permanently erased from our systems.

8. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate or incomplete data
Erasure — request deletion of your data
Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at [email protected].

9. Account Deletion

You can delete your account at any time from the Settings screen within the app. Deleting your account permanently erases all your personal data, fitness data, and journey history from our servers.

10. Children

The Service is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be announced by publishing the revised policy on shiefter.com with an updated effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or your data, reach out to us at [email protected]