Privacy Policy

1. Introduction

SHIMY ("we," "us," or "our") is operated by SHIMY, Inc., a Delaware corporation. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the SHIMY mobile application ("App").

SHIMY is designed around ephemeral interactions and minimal data retention. We collect only what we need to operate the App, and we delete it as soon as it is no longer needed.

By using SHIMY, you agree to the collection and use of information in accordance with this policy. If you do not agree, do not use the App.

2. Who Can Use SHIMY

SHIMY is intended for users who are 18 years of age or older. We use a third-party identity verification provider to verify the age and identity of users before granting access to the App. If we discover that a user is under 18, we will immediately terminate their account and delete their data.

3. Information We Collect

Information you provide includes identity verification data, display name, selfie posts, messages, and Shimy AI conversations.

Information collected automatically includes approximate location data, device information, and usage data.

• Identity verification data: Government-issued ID and a real-time selfie submitted for age and identity verification. This data is processed solely by Persona and is not retained by SHIMY.
• Display name: Your first name, entered by you after verification.
• Selfie posts: Photos you voluntarily post within the App.
• Messages: Chat messages exchanged with other users during active match windows.
• Shimy AI conversations: Messages you send to Shimy, our AI companion feature.
• Location data: Approximate location used to show your post to nearby users and to show you posts from people near you.
• Device information: Device type, operating system, and app version for performance and troubleshooting purposes.
• Usage data: In-app activity metrics such as features used, post frequency, match activity, session duration, and app performance data.

4. Biometric Data

In connection with identity verification, our third-party provider Persona may process facial recognition or biometric data to confirm that your selfie matches your government-issued ID. SHIMY does not collect, store, or retain biometric identifiers or biometric information. Any biometric processing is performed solely by Persona and is subject to their privacy practices.

5. How We Use Your Information

We use the information we collect to:

• Facilitate identity and age verification through Persona before granting access.
• Display your selfie posts to nearby users.
• Facilitate matches and time-limited chat sessions.
• Operate the Shimy AI companion feature.
• Improve and maintain the App.
• Enforce our Terms of Service.
• Comply with legal obligations.

6. Data Retention & Deletion

We are committed to minimizing the data we hold. Our retention practices are as follows:

• Selfie posts are permanently deleted from our servers when the 3-hour post window expires.
• Match chat messages are permanently deleted when the 24-hour chat window expires.
• Identity verification data is processed by Persona and is not retained by SHIMY.
• Shimy AI conversation data: We store a limited summary of past interactions, not full conversation logs, to allow continuity across sessions. You may request deletion at any time.
• Account data is retained for the life of your account and deleted within 30 days of account deletion. Anonymized or aggregated data and temporary backup logs may persist for a limited period before full deletion is complete.

7. How We Share Your Information

We do not sell your personal information. We share your information only in limited circumstances:

• Persona: Solely for identity and age verification. Persona does not receive access to your in-app activity, posts, or messages.
• Shimy AI provider: Conversations with Shimy are processed by a third-party AI provider to generate responses. We do not permit our AI provider to use your conversations to train their models.
• Service providers: We may share data with hosting and infrastructure providers who support operation of the App under strict confidentiality obligations.
• Legal compliance: We may disclose information if required by law, court order, or governmental authority.
• Safety: We may disclose information where necessary to protect the safety of our users or the public.
• We do not share your data with advertisers or any third parties for marketing purposes.

8. Location Data

SHIMY uses your device's location to show your post to nearby users and to show you posts from people near you. We do not retain a historical record of precise location data beyond what is necessary to provide the service. You may revoke location permissions at any time through your device settings, though doing so will prevent core app functionality from working.

9. AI Companion (Shimy)

SHIMY includes an AI-powered companion called Shimy, powered by a third-party large language model API. Conversations with Shimy are processed by that third-party API to generate responses and may be processed outside the United States. We store a limited summary of past interactions, not full conversation logs, to allow Shimy to maintain continuity across sessions. We do not use your Shimy conversations to train AI models, and we do not permit our AI provider to do so. You may request deletion of your Shimy conversation history at any time by contacting us at privacy@shimy.app.

10. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law.

12. International Users

SHIMY is operated in the United States. If you are accessing the App from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the App, you consent to this transfer.

13. Your Rights & Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority.
• To exercise any of these rights, contact us at privacy@shimy.app. We may need to verify your identity before processing your request.

14. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@shimy.app.

15. Children's Privacy

SHIMY is not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately at privacy@shimy.app and we will take prompt action.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by other appropriate means. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

17. Contact Us

SHIMY, Inc. privacy@shimy.app