Privacy policy
Effective October 26, 2026
This policy covers every app and website made by Shinyrock (“we”, “us”), including Bogo Bandit, Cheffi, Cue Studio, Nexus, Pocket Watch, Poofie, Reel, Slate, Tally, Yizkor and shinyrock.app (together, the “Apps”). Not every App uses every kind of information below; each one only uses what it needs to work.
The short version
- We collect only what an App needs to do its job for you.
- We never sell your information and never use it for advertising.
- Signing in is optional in most Apps. Without an account, your data stays on your device.
- You can ask us to delete your account and data at any time.
Information you give us
- Account details. If you create an account, we keep your email address and, if you sign in with Google, your name and profile picture.
- What you put into an App. The entries, notes, lists, recipes, files, messages and settings you create, so the App can show them back to you and sync them between your devices.
- Messages to us. If you email us, we keep the message and your address so we can reply.
Information collected automatically
- Basic technical data. Like almost every website, our hosting provider receives your IP address, browser type and the pages you request, and keeps short-lived logs to keep the service secure and working.
- Privacy-friendly visit counts. Some of our sites use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across other sites.
- Data stored on your device. Apps save your work and preferences in your browser’s local storage so they work offline. This stays on your device unless you sign in and sync.
We do not use advertising cookies, and we do not track you across other companies’ apps or websites.
Signing in with Google
If you choose “Continue with Google”, Google shares your name, email address and profile picture with us. We use them only to create your account, sign you in and show who is signed in. We do not ask for access to your Gmail, Drive, Contacts or Calendar unless an App clearly asks you for it for a feature you turn on.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising, or let people read it except with your permission, for security, or when the law requires it.
Connected accounts and AI features
- Bank connections. If you connect a bank account in an App that offers it, the connection runs through Plaid. Plaid shares the account and transaction details you approve; we never see or store your bank password. Plaid’s handling is covered by the Plaid End User Privacy Policy.
- AI features. When you use a feature that writes, summarizes or suggests something, the text or image you send to it is passed to an AI provider (such as xAI or Google Gemini) to produce the answer. We do not use your content to train AI models.
- Notifications. If you turn on notifications, your browser gives us a notification address for your device. You can turn them off at any time in your browser or phone settings.
How we use information
- To run the Apps, keep your data in sync and sign you in.
- To send emails you ask for, such as sign-in codes and replies to your messages.
- To keep the Apps secure, prevent abuse and fix problems.
- To meet legal obligations.
Who we share it with
We share information only with the service providers that run the Apps for us, and only so they can do that job:
- Cloudflare and Netlify (hosting, storage and visit counts)
- Supabase (accounts and databases)
- Google (sign-in and some AI features)
- Brevo (sending sign-in emails)
- xAI (some AI features)
- Plaid (bank connections, only if you use them)
- GitHub (storing our code)
We may also share information if the law requires it, to protect someone’s safety, or as part of a sale or transfer of an App, in which case this policy keeps applying to your information. We never sell your personal information.
How long we keep it
We keep your account and content while your account is open. When you delete your account, or ask us to, we delete your data within 30 days, except where we must keep something by law. Backups are overwritten on a rolling basis.
Your choices and rights
You can see, correct, export or delete your information, and you can withdraw your consent at any time. To do any of this, email hello@shinyrock.app from the address on your account. Depending on where you live (for example in California, the EU or the UK), you may have further rights under local law, including the right to complain to a data protection authority. We will answer within 30 days.
Security
We use encrypted connections (HTTPS), keep secret keys out of our code, and limit access to the data we store. No system is perfectly secure, so we cannot promise absolute security, but we will tell you without delay if a breach affects your information.
Children
The Apps are not meant for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.
Where your information is stored
Our providers store data in the United States and other countries. By using the Apps, you understand your information may be processed outside your home country, with the safeguards those providers offer.
Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the App or by email before it takes effect.
Contact
Questions about privacy: hello@shinyrock.app