PRIVACY POLICY

What we collect

Account: when you create a Shift Culture account, we collect your phone number to send a one-time sign-in code. You may add a display name, optional username, optional bio, and a profile photo — all visible to other Shift Culture users.

Profile details you volunteer: during onboarding (or later in your profile) you may optionally tell us your car make and model, your city and state, your interests (e.g. JDM, drift, track), and your build stage. These fields are optional, you can skip or change them anytime, and we use them to match you to relevant giveaways and local events.

Usage analytics: we record in-app activity — screens you view, giveaways and events you open, the giveaway 'enter' button, RSVPs, feed taps, posts you create, and similar interaction events, along with your app version, platform (iOS/Android), and an app-session identifier. This is first-party data stored in our own database. You can turn this off anytime in Profile → Privacy → Usage analytics.

Push token: if you opt into push notifications, we store an anonymous Expo Push token tied to your device. The token does not identify you personally.

Community: when you post in the community feed, your post body, optional photo, and timestamp are stored. Likes, comments, and reports you make are stored under your account.

Sweepstakes: if you enter a Shift Culture sweepstakes at shiftculturegiveaway.com using the same phone number you use here, your entry count is linked back to your in-app account so it appears under My Entries. Only the phone number, ticket count, and giveaway ID are sent — no payment information ever touches the app.

What we do not collect

We do not collect: government IDs, Social Security numbers, financial account numbers, precise GPS location, your contacts, your calendar contents, your browsing history in other apps, or any biometric data. We do not embed third-party advertising SDKs in the app, and we do not read data from other apps on your device.

How we use your information

Sign you in. Show your profile to other Shift Culture users. Match you to relevant giveaways and nearby events using the profile details you volunteer. Send the push notifications you opted into. Send marketing by SMS or email only if you opt in. Measure and improve the app and our marketing using usage analytics. Display your sweepstakes entries. Respond to support requests. Prevent abuse. Comply with legal obligations.

We do not sell your personal information for money. We do share limited data for advertising measurement and optimization as described in the next section; you can opt out at any time.

Analytics and advertising

Usage analytics is first-party: events are stored in our own Supabase database, not handed to an ad-network SDK inside the app.

To measure and improve the performance of our own ads (for example, to know that an ad led to a sign-up or a giveaway entry), we send a limited set of conversion events from our servers to advertising platforms — currently Meta (Facebook/Instagram) and may include TikTok — using their Conversions APIs. Where these events include identifiers (such as your phone or email), they are cryptographically hashed before sending. Under California law (CCPA/CPRA) this constitutes 'sharing' for cross-context behavioral advertising.

You can opt out of all analytics and advertising data sharing at any time in Profile → Privacy → Usage analytics. On iOS, if we ever use the device advertising identifier we will first ask through Apple's App Tracking Transparency prompt; you can decline.

Marketing communications

We only send SMS or email marketing (giveaway alerts, event reminders, drops) if you explicitly opt in. We use Klaviyo to manage and send these messages and to segment audiences using the profile details and analytics described above. Every marketing message includes an unsubscribe option, and you can withdraw consent anytime by contacting support@shiftcultureofficial.com. Transactional messages (your sign-in code) are not marketing and are always sent.

Service providers we use

Supabase (hosting + database), Twilio (SMS verification codes), Expo (push notification delivery), Apple (App Store + Sign in with Apple), Klaviyo (marketing email/SMS, only if you opt in), and Meta — and potentially TikTok — for ad measurement via their server-side Conversions APIs. Each is bound by its own privacy policy. We send each only what is necessary for its specific function.

YouTube content is loaded directly from YouTube when you tap a video; Instagram links open Instagram. Those platforms' privacy policies apply to that traffic.

Sweepstakes data

Shift Culture sweepstakes are operated on the separate website shiftculturegiveaway.com under that site's own Privacy Policy and Official Rules. The Shift Culture app is informational only — no entries, payments, or fulfillment happen inside this app. Apple, Google, and Shift Culture LLC are not sponsors of any individual sweepstakes; each sweepstakes is sponsored as identified in its Official Rules.

Children

Shift Culture is intended for users 17 or older in the United States (matching our App Store age rating, given the sweepstakes content). We do not knowingly collect information from children under 13. If we learn that we have, we will delete it promptly. Parents who believe we may have such data should email support@shiftcultureofficial.com.

Account deletion

You can delete your account from inside the app at any time: Profile → Account → Delete account. We soft-delete immediately (your data is hidden from all app features and from staff except as needed for the deletion process) and hard-delete after 30 days. Sweepstakes entry history may be retained longer where required by sweepstakes law; that retained data is no longer linked to your account.

Your rights

California (CCPA/CPRA): you can request the categories and specific pieces of personal information we have collected, deletion, or correction. We do not sell personal information for money. We do 'share' limited data for cross-context behavioral advertising as described in 'Analytics and advertising'; you can exercise your right to opt out of that sharing directly in the app at Profile → Privacy → Usage analytics, or by emailing us.

EU/UK (GDPR): you have rights to access, correct, delete, restrict, port, and object to processing of your personal information. Our legal bases are contract performance (creating your account), consent (push notifications, marketing, analytics and advertising sharing), and legitimate interest (security, fraud prevention).

Email support@shiftcultureofficial.com to exercise any of these rights.

Data retention

Account profile and volunteered details: until you delete the account, then a 30-day soft-delete window before hard-delete. Usage analytics events: retained up to 24 months for product and marketing analysis, then aggregated or deleted; deleting your account disassociates prior events from you. Push tokens: rotated automatically when stale; deleted with the account. Notification logs: 1 year for support and audit purposes. Sweepstakes entries: retained as required by sweepstakes law (typically up to 4 years from drawing date), de-identified after account deletion.

Security

All network traffic uses TLS. Passwords are hashed; we never store them in plaintext. Database access is gated by row-level security so users can only access their own data. No system is perfectly secure; if you believe your account has been compromised, contact support@shiftcultureofficial.com immediately.

Changes to this policy

If we make material changes, we'll show an in-app notice on next launch and update the Effective date above. Continued use after the effective date constitutes acceptance.

Contact

Shift Culture LLC
Ft. Pierce, FL
support@shiftcultureofficial.com