Privacy Policy

1. Who We Are and How to Reach Us

Shifty is operated by Shifty Technologies LLC, a Florida limited liability company. You can reach us about privacy at hello@driveshifty.com.

This Policy covers the Shifty app and driveshifty.com. It does not cover third-party services that have their own privacy policies, such as the Apple App Store.

2. Information You Provide

When you create an account and use Shifty, you give us:

• Account details: your email address, a password or sign-in through Apple or Google, and optional profile information such as your name, username, short bio, profile photo, a location you type (a city or region, not your GPS position), and a name for your collection.
• Your collection: the cars you add and what you choose to record about them, including the VIN or chassis number, year, make, model, trim, colors, options and specification, mileage, condition, what you paid and when and from whom, your own value estimates, and notes.
• Sale details: if you mark a car as sold, the sale price, where and how it sold, and any buyer name or notes you enter.
• Documents and records: files you upload, such as insurance policies (including policy numbers, providers, and agreed values), titles, registrations, service and maintenance records, window stickers, and photos of your VIN. These are stored privately.
• Warranty and maintenance information: coverage details, providers, dates, limits, and costs.
• Photos: images of your cars and documents that you upload.
• Communications: messages you send us for support or other requests.

3. Information We Collect Automatically

When you use the Service, some information is collected automatically:

• Device and app information: app version, device type and operating system, language, and similar technical details.
• Usage information: how you interact with Shifty, including the cars and markets you follow, what you browse and search, and the features you use. We use this to operate, improve, and personalize the Service.
• Notifications: a push notification token for your device, so we can send the alerts you turn on.
• Diagnostics: crash reports and basic performance data through our error-monitoring provider, so we can find and fix problems.
• Website analytics: our website uses privacy-friendly, cookieless analytics from Vercel to count visits and page views in aggregate. It does not identify you or follow you across other sites.

We do not collect your precise GPS location, and we do not use advertising identifiers or third-party advertising trackers.

4. Information From Other Sources

To make Shifty useful, some information about your cars comes from outside sources:

• Vehicle decoding: when you enter a VIN, we look it up with the U.S. National Highway Traffic Safety Administration (NHTSA) to fill in factory specifications. NHTSA returns vehicle facts, not owner information.
• Vehicle history: if you request it, we may retrieve history information such as title status, accident records, and reported owner counts from vehicle history providers. These reports describe the car, not you.
• Sign-in providers: if you sign in with Apple or Google, we receive basic account information such as your name and email from them.
• Payments: when you subscribe, Apple and our subscription provider (RevenueCat) tell us your subscription status. We never receive your full payment card details.

5. How We Use Your Information

We use the information above to:

• Provide and operate the Service, including saving your collection and records.
• Calculate the Shifty Estimate and show market intelligence for your cars.
• Personalize your experience and recommend cars, markets, content, and relevant offers, as described in the next section.
• Send the notifications, alerts, and emails you have turned on, and let you manage those preferences.
• Power AI features such as the in-app assistant, market insights, and reading details from documents you upload. To do this, we send relevant information (such as the specifications of your cars and the messages you send the assistant) to our AI provider (Anthropic) to generate a response. We do not send your email, payment information, or home address for this purpose.
• Keep the Service secure, prevent fraud and abuse, and troubleshoot problems.
• Understand how Shifty is used so we can improve it.
• Comply with our legal obligations and enforce our Terms.

6. How We Personalize and Market to You

Shifty gets more useful the more it understands what you collect and follow. We use the cars in your collection and the markets you follow to tailor your experience: to surface cars and content you are likely to care about, to time alerts, and to show you relevant offers, partners, and features inside Shifty.

We want to be clear about the limits of this. We do not sell your personal information. We do not share your personal information with outside companies for their own advertising or marketing. Any offer or partner you see is presented by us, inside Shifty, based on information we already hold. We do not hand your collection, your contact details, or your activity to a dealer, advertiser, insurer, or data broker for them to use.

7. How and When We Share Information

We share information only in these situations:

• Service providers: companies that run parts of the Service for us, under contracts that limit them to our instructions. These include our hosting and database provider (Supabase), our payment and subscription providers (Apple and RevenueCat), our push notification delivery (Apple and Expo), our AI provider (Anthropic), our error-monitoring provider (Sentry), and our email provider (Resend, using Amazon SES). They process information only to provide their service to us.
• Other members, only when you choose: if you make your profile or a car public, other people can see that profile and those cars, including details such as year, make, model, mileage, photos, and the Shifty Estimate. You control this. You can keep your profile private, hide your total collection value, and set who can see your mileage. Activity such as adding or selling a car can appear on your public profile if your profile is public.
• Aggregated and de-identified data: we may use combined or de-identified information, including data from cars that have sold, to power market intelligence and improve the Service. This information does not identify you and is not personal information.
• Legal and safety: when required by law, to respond to lawful requests, to protect the rights, property, or safety of Shifty, our members, or others, and to enforce our Terms.
• Business transfers: if Shifty is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction. We will require the recipient to honor this Policy or we will notify you of any material change.

8. Your Choices and Controls

• Edit or delete your data: you can edit or remove cars, documents, and profile details in the app at any time.
• Privacy settings: you control whether your profile and cars are public, whether your collection value is hidden, and who can see your mileage.
• Notifications and email: you can turn notifications and update emails on or off in the app, and you can unsubscribe from emails.
• Delete your account: you can delete your account from the app. When you do, we delete your profile, cars, photos, documents, and related records. We may keep limited information where we are required to, or to resolve disputes and enforce our agreements.

9. Your Privacy Rights

Depending on where you live, you may have rights over your personal information, including the right to know what we collect, to access a copy, to correct it, to delete it, and to not be treated differently for exercising these rights.

California residents: under the California Consumer Privacy Act, as amended, you have the rights described above. Shifty does not sell your personal information and does not share it for cross-context behavioral advertising, so there is nothing to opt out of in that respect. We do not knowingly collect personal information from anyone under 18.

Residents of Florida, Virginia, Colorado, Connecticut, and other states with privacy laws: you have similar rights to access, correct, delete, and obtain a portable copy of your personal information, and to appeal a decision we make about your request.

To exercise any of these rights, email us at hello@driveshifty.com or use the in-app controls. We will verify your request and respond within the time the law requires. You may use an authorized agent where the law allows.

10. How Long We Keep Information

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your personal information, except where we must keep limited records for legal, tax, security, or dispute-resolution purposes. Crash and diagnostic data is kept for a short period by our monitoring provider, and backups are cycled out over time.

11. How We Protect Information

We use reasonable technical and organizational measures to protect your information, including encryption in transit, private storage for the documents you upload, and short-lived signed links that expire after use. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Protect your password, and let us know promptly if you believe your account has been compromised.

12. Children

Shifty is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

13. Where Your Information Is Processed

Shifty is operated in the United States, and your information is processed and stored there. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the effective date above, and for material changes we will provide a more prominent notice in the app or by email. Your continued use of the Service after an update means you accept the revised Policy.

15. Contact Us

Questions or requests about your privacy? Email us at hello@driveshifty.com, or write to Shifty Technologies LLC, Florida, United States.