Shift90 Privacy Policy
Effective: August 12, 2026
Shift90 ("the App") handles something deeply personal — how you are feeling. We therefore designed it around a single principle: do not collect what we do not need.
1. Information stored on your device and in your private iCloud
The following session history is stored on your device. When iCloud is available, it is also synced to your private Apple CloudKit database.
- The feelings you select and any words you type yourself
- The name given to your feeling by on-device AI (Apple Intelligence)
- The coordinates, place name, depth and distance of where a thrown feeling landed
- Session dates, the protocol you used, before/after turbulence values, and the number of attached photos
- Whether a one-time home-screen prompt has already been displayed
The sync destination is a private database belonging to your Apple Account. Under Apple’s default access controls, only you can access it; it is not sent to servers operated by us and is not visible in the CloudKit developer portal. The App continues to work with local records when you are signed out of iCloud or sync is unavailable.
The raw strokes you trace are not saved after the session. Flyover videos remain only on the device and are excluded from CloudKit and iCloud Backup.
The App requires no account and collects no personally identifying information such as your name, email address or phone number.
About photos you throw. When you attach photos to a feeling, they are used for the crumpling animation and discarded immediately afterwards. The App never stores them, never transmits them, and never shows them again. The only record kept is the number of photos thrown. Photo selection uses the iOS photo picker, so the App never gains access to your photo library — it receives only the photos you explicitly chose.
About content you hand over from the share sheet. Text, screenshots and photos sent to Shift90 through the iOS share sheet are held temporarily on your device only, inside the App’s protected container. They are used solely as material for a throw and deleted the moment they are used. Unused content older than 24 hours is deleted the next time the App launches or returns to the foreground (the App cannot run this cleanup while it is not running). Nothing is transmitted anywhere. Persisted text is trimmed and capped at the first 400 characters. When you share a URL, the URL itself, article excerpts and selected text are never stored — only a value explicitly provided by the source as the page title (or the site name when no title is available) is received.
2. Location
We may ask for location permission to decide which direction a thrown feeling travels and where it lands.
- We deliberately request low accuracy — roughly one kilometre. Your exact home location is never recorded by the App.
- Location data is never sent to servers operated by us. As described above, a landing location may be synced as part of session history to your private iCloud.
- However, to show the name of the landing place and to render satellite map imagery, coordinates are sent to Apple’s mapping services (Apple’s privacy policy applies).
- The App works fine if you decline location access. In that case a throw is treated as having left Tokyo Station heading due north, and the landing map is drawn from that assumption. Your actual position is never obtained. The landing screen says so explicitly every time. Those assumed coordinates are still sent to Apple’s mapping services to name the landing place and render the satellite imagery.
3. The flyover video
The landing is recorded on your device and stays there. Nothing is uploaded automatically. A video leaves your device only when you choose to share it.
The video never includes footage from below roughly two kilometres of altitude — a deliberate design choice so that a shared video cannot identify your home.
4. Anonymous usage analytics
To improve the App we collect anonymous, non-identifying usage analytics through Google’s Firebase Analytics (Google Analytics).
What is sent:
- Names of in-app events (e.g. "session started", "paywall shown", "purchase completed")
- A small set of aggregate attributes (which protocol was used, how many feelings were selected, the change rate rounded to the nearest 10%, which day of the trial)
- An app-instance identifier (specific to this installation, lost when the app is deleted)
- Device type, OS version, language and approximate (country-level) region
What is never sent:
- The words you chose or typed, or AI-generated names
- Landing coordinates, place names, depths, distances, or videos
- Raw stroke data, or exact change rates
We do not use the advertising identifier (IDFA). The App shows no ads and performs no cross-app or cross-site tracking, so iOS will never show you a tracking permission prompt.
Google acts as a data processor for these analytics (Google’s privacy policy applies).
5. Notifications
Reminders are composed and delivered entirely on your device. Nothing is sent to a server for notifications, including the times of day you tend to use the App. Notifications are optional and can be turned off at any time in Settings.
6. Purchases
Purchases are handled by Apple’s App Store. We never receive payment details such as card numbers — only whether a purchase exists.
7. On-device AI
Naming a feeling uses Apple Intelligence built into iOS. Naming is processed entirely on your device; your words are not sent to an external AI service. The selected words and generated name may be synced as session history to your private iCloud as described in Section 1. On devices where this is unavailable, a name is composed from the words you selected.
8. Deleting your information
Deleting the App removes session records, map pins and videos stored on that device. History already synced to your private iCloud is not removed merely by deleting the App, and may return after reinstalling or on another device. To remove the iCloud copy, open Settings > Apple Account > iCloud > Storage (or Manage Account Storage), select Shift90, and delete its data. Anonymous analytics are not tied to you as an individual and therefore cannot be deleted individually.
9. Children
The App is not directed at children under 13.
10. Medical notice
The App is not a medical device and is not intended to diagnose, treat, cure or prevent any condition. If difficult feelings persist, please consult a qualified professional.
11. Changes to this policy
If we change this policy we will update this page, and will notify you in the App if the change is significant.