Privacy Policy

Last modified: September 12 2026

Introduction

SHIFTS APP LLC (“Company” or “We”) respect your privacy and are committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you visit the website https://theshiftsapp.com (our “Website”) or use the SHIFTS: EATING DISORDER HELP mobile application (the “App”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

The Website and App provide educational, motivational, and wellness-related content and subscription services related to eating disorder recovery support. Because of the nature of the App, the fact that you use it, and much of the information you provide through it, reveals information about your health. We treat that information as sensitive and as health data, and we handle it as described in the Health and Sensitive Information section below.

This policy applies to information we may collect:

On the Website.
On the App.
In email, text, and other electronic messages between you and the Website or App.
Through other mobile and desktop applications you download from the Website, which provide dedicated non-browser-based interaction between you and the Website.

It does not apply to information collected by:

Use offline or through any other means, including on any other website or app operated by Company or any third party; or
Any third party, including through any application or content (including hosting and advertising) that may link to or be accessible from or through the Website or App.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website or App. By accessing or using the Website or App, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Website or App after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Health and Sensitive Information

We treat the following as health or sensitive information: the fact that you have downloaded, installed, registered for, or used the App; your name and email address in connection with that account; and the fact that you signed in using Apple or Google.

We do not ask for, and we do not collect, information about your diagnosis, symptoms, weight, body measurements, food intake, treatment, or care providers. The App has no journaling feature and no free-text entry. Some of our audio content invites you to journal or reflect on your own, but you do that outside the App, and we never see it.

We collect and use that information only to provide the App to you and to keep it working and secure. We do not use it, and we do not permit any third party to use it, for advertising, marketing to you based on your health status, profiling, or sale. We do not disclose it to any third party except to service providers who process it only on our written instructions and only to run the App, or where the law requires it.

Where the law requires your consent before we collect, use, or share health or sensitive information, we will ask for it separately from this policy and separately from our Terms of Use, and you can withdraw it at any time. Residents of Washington, Nevada, and Connecticut should also read our Consumer Health Data Privacy Notice, which is linked from the homepage of the Website and from within the App.

Children Under the Age of 13

The Website and App are not intended for children under 13 years of age. No one under age 13 may provide any information to the Website or App. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the Website or App, subscribe to the Website or App, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us.

Users Between 13 and 17

The App is available to users aged 13 and over. If you are under 18, you should review this policy with a parent or guardian before using the App, and our Terms of Use require their consent.

We do not sell the personal information of any user under 18, we do not share it for targeted advertising or any form of cross-context behavioral advertising, and we do not use it for profiling. We collect the same limited information from users under 18 as from everyone else: name, email address, and sign-in provider. A parent or guardian may contact us at privacy@theshiftsapp.com to review, correct, or delete their teen's information, or to close the account.

Residents of certain states under 13, 16, or 18 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights for more information.

Information We Collect About You and How We Collect It

We may collect several types of information from and about users of the Website and App, including information:

By which you may be personally identified, such as name, postal address, email address, telephone number, and any other identifier by which you may be contacted online or offline (“personal information”);
That is about you but individually does not identify you; and/or
About your internet connection, the equipment you use to access the Website or App, and usage details.

We may collect this information:

Directly from you when you provide it to us.
Automatically as you navigate through the Website or App. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.

We use third-party analytics, hosting, infrastructure, and subscription management providers to help us operate the Website and App, manage subscriptions, improve functionality, and monitor performance. They are: Mixpanel, Inc., which provides product analytics. Mixpanel identifies you only by an anonymous, randomly generated identifier created on your device. It does not receive your name, email address, advertising identifier, IP-based location, or any free text, and event names do not describe the specific content you view. Google LLC, through Firebase Crashlytics, which records technical errors and crashes. Crashlytics receives the type and model of your device, its operating system and app version, and the technical state of the App at the time of the error. It does not receive your name or email address. Supabase, Inc., which hosts our database and handles account sign-in; Cloudflare, Inc., which stores our audio and media files; Directus GmbH, hosted on Vultr, which runs our internal content management system; Google LLC, through Firebase Cloud Messaging, which delivers push notifications; AppsFlyer Ltd., which powers the shareable links that open specific content inside the App; and RevenueCat, Inc., which manages subscriptions. RevenueCat receives an anonymous app user identifier, your subscription status, and purchase events, and does not receive your name or email address. Each of these providers acts as our processor or service provider, is bound by a written data processing agreement, and may not use your information for its own purposes. We do not use advertising networks or advertising analytics providers, and we do not share your information with any advertising network, ad measurement service, or data broker. We use AppsFlyer only to route shareable links to the right content. We have disabled its advertising attribution features, switched off data sharing with all advertising partners, and configured it not to collect advertising identifiers.

Information You Provide to Us

The information we collect on or through the Website or App may include:

Users may provide limited personal information through the Website or App, such as name, email address, account information, subscription status, or customer support communications.
Information that you provide by filling in forms on the Website or App. This includes information provided at the time of subscribing to use the Website or App. We may also ask you for information while you use the Website or App or when you report a problem to us.
Records and copies of your correspondence (including email addresses), if you contact us.
Details of transactions you carry out through the Website or App.

Subscription purchases are processed through third-party app store providers such as Apple App Store and Google Play. We do not directly collect or store full payment card information.

How You Sign In

You create an account by signing in with Apple or with Google. We do not operate our own password-based sign-in, and we never see or store your Apple or Google password.

Signing in with Apple gives us your name and an email address. Apple lets you hide your real address, in which case we receive a private relay address instead, and we will not attempt to identify the address behind it. Signing in with Google gives us your email address and the first or full name on your Google profile. We use your name to address you in the App and your email address to operate your account and to contact you about it.

Apple and Google decide for themselves how they handle the information they hold about you, and their own privacy policies govern that. We receive only what you approve at sign-in.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with the Website and App, we may use automatic data collection technologies to collect certain information about your usage, equipment, browsing actions, and patterns, including:

Details of your visits to the Website or App, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website or App.
Information about your computer, mobile device and internet connection, including your IP address, operating system, and browser type.
Technical information about errors and crashes, including the type and model of your device, its operating system and app version, and the state of the App when the error occurred.

The information we collect may not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve the Website and App and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize the Website or App according to your individual interests.
Speed up your searches.
Recognize you when you return to the Website or App.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of the Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to the Website. For information about managing your privacy and security settings for cookies, see Choices About How We Use and Disclose Your Information.
Web Beacons. Pages of the Website and App may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages and for other related website and app statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Third-Party Use of Cookies and Other Tracking Technologies

We do not serve advertising in the App or on the Website, and we do not allow third parties to collect information through the App or the Website for advertising, ad measurement, or interest-based or cross-context behavioral targeting. We do not use advertising software development kits or advertising pixels.

The third parties that receive information in connection with the App are limited to our analytics provider, app store providers, hosting providers, subscription management providers, and customer support providers.

How We Use Your Information

We may use information that we collect about you or that you provide to us, including any personal information:

To present the Website, App and their contents to you.
To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it.
To provide you with notices about your account.
To provide notices about your subscription, including expiration and renewal notices.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about changes to the Website or App or any products or services we offer or provide through it.
To allow you to participate in interactive features on the Website and App.
In any other way we may describe when you provide the information.
For any other purpose with your consent.
To operate, maintain, and improve the Website and App.
To manage subscriptions and account access.
To provide customer support.
To monitor usage trends, analytics, and App performance.
To protect against fraud, misuse, unauthorized access, or security issues.

We do not sell your personal information, and we do not share it for targeted advertising or cross-context behavioral advertising, in each case as those terms are defined under applicable law. We do not use or disclose health or sensitive information for any advertising or marketing purpose.

We may send you marketing messages about our own services where you have opted in or where the law otherwise permits it. We never select or target those messages on the basis of health or sensitive information. You can opt out at any time in your account profile or by using the unsubscribe link in the message.

Disclosure of Your Information

We may disclose aggregated information about our users without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

To our subsidiaries and affiliates.
To contractors, analytics providers, hosting providers, subscription management providers, customer support providers, and other service providers that help us operate and support the Website and App.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Company about the Website or App users is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply the Terms of Use available at https://theshiftsapp.com/terms-of-use, incorporated herein by reference, and other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Company, our customers, or others.

International Users

SHIFTS APP LLC is the controller of your personal information. We are based in the United States, and our database is hosted in Sweden, in the European Union. Your information is therefore transferred to, processed, and stored in Sweden and in other countries where our service providers operate, which may not give the same level of protection as your home country. Our analytics and crash reporting providers process data in the United States.

Where we transfer personal information out of the United Kingdom, the European Economic Area, or Switzerland, we rely on the European Commission Standard Contractual Clauses together with the United Kingdom Addendum, and we carry out a transfer risk assessment. You can request a copy of the safeguards we use by contacting us.

Legal Bases For Processing (International Users)

We process personal information:

with your consent;
to provide the services you request;
to comply with legal obligations; and
to support our legitimate interests in operating, maintaining, improving, and securing the Website and App, where those interests are not overridden by your rights.

Information that reveals your health is special category or sensitive data. We process it only on the basis of your explicit consent, which we collect separately before you use the App and which you can withdraw at any time in your account settings. Withdrawing consent does not affect processing carried out before you withdrew it, and it means we can no longer provide the App to you.

Your Rights

Depending on where you live, you may have the right to access your personal information, to have it corrected or erased, to restrict or object to how we process it, to receive it in a portable format, to withdraw consent, and not to be subject to a decision based solely on automated processing. We do not make decisions about you based solely on automated processing, and we do not carry out profiling.

To exercise any of these rights, contact us at privacy@theshiftsapp.com. We will respond within the period the law allows, normally one month. We do not charge for this and we will not treat you differently for asking. If you are not satisfied with our response, you may lodge a complaint with the data protection authority in your country, and nothing in our Terms of Use affects your right to bring a claim in the courts of the country where you live.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, some parts of the Website may be inaccessible or may not function properly. Where the law requires it, including in the United Kingdom, the European Economic Area, and Switzerland, we will not place non-essential cookies or activate non-essential software development kits, including our analytics software development kit, until you have given consent through the banner presented to you, and you can change or withdraw that consent at any time through the same banner or in your account settings.
Promotional Offers from the Company. If you do not wish to have your contact information used by the Company to promote our own or third parties’ products or services, you can opt out by adjusting your user preferences in your account profile or by sending us an email stating your request. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. This opt out does not apply to information provided to the Company as a result of a product, service experience or other transactions.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Accessing and Correcting Your Information

You can review and change your personal information by logging into the App and visiting your account profile page.

You may also contact us to request access to, correct, or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Website users even if your account is modified or deleted.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Depending on your jurisdiction, you may have the right to request access to, correction of, deletion of, or restriction of processing of your personal information, or to withdraw consent to certain processing activities.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.

Many states, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

Confirm whether we process their personal information.
Access and delete certain personal information.
Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose (excluding Iowa and Utah).
Data portability.
Opt-out of personal data processing for:
targeted advertising (excluding Iowa);
sales; or
profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).

Some states give additional protection to users under 18. We do not sell the personal information of any user, we do not process it for targeted advertising, and we do not use it for profiling, so these protections do not change how we handle your information.

Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state.

Data Retention

We retain personal information only for as long as reasonably necessary to provide the Website and App, comply with legal obligations, resolve disputes, enforce agreements, and protect our legal rights. In practice, we delete account information within 30 days after you delete your account. We delete analytics event data within 12 months of collection, and crash and diagnostic records within 90 days of collection. We keep billing and tax records for as long as the law requires.

Data Security

In conjunction with our application providers, we have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Website or App, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Website or App. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website or App.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the email address specified in your account and/or through a notice on the Website or App. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting the Website and App and this privacy policy to check for any changes. Where a change materially expands how we use health or sensitive information, we will ask for your consent again before the change applies to you.

Contact Information

Questions, comments, privacy requests, and requests regarding privacy questions, data access requests, correction requests, or deletion requests should be directed to privacy@theshiftsapp.com, or by mail to SHIFTS APP LLC, 1 E Erie St, Suite 525-2136, Chicago, IL 60611. Individuals in the European Economic Area and the United Kingdom may instead contact our representatives named above.