Privacy Policy

1. Information We Collect

When you use Shamefull, we collect the following information:

• Account information: Email address and encrypted password when you create an account
• Payment information: Processed entirely by Stripe. We never store your credit card details
• Device information: Device name, platform, and a unique device identifier for license enforcement
• Subscription data: Your plan tier, subscription status, and device count
• Removal codes: The code that protects each phone, held so it can be released to you after the cancellation delay

2. Information We Do NOT Collect

We are committed to your privacy. We explicitly do not collect:

• Your browsing history or DNS queries
• Screenshots or screen recordings of any device
• Your location data
• Contacts, photos, or files from your devices

Shamefull never sees what you browse. Your phone's DNS requests are resolved by Control D under its service and privacy terms. The computer used for setup runs the setup app only; nothing on it is monitored or filtered.

3. How We Use Your Information

• To provide and maintain your subscription
• To enforce device limits based on your plan tier
• To send you your license key and account credentials
• To process payments through Stripe
• To configure and maintain locked DNS protection on your iPhone or Android phone
• To manage the cancellation delay and release removal codes when eligible
• To respond to support requests

4. Third-Party Services

We use the following third-party services:

• Stripe for payment processing (Stripe Privacy Policy)
• Supabase for authentication and account management
• Control D for DNS filtering on registered devices
• AWS for infrastructure hosting
• Vercel for website hosting

5. Data Retention

We retain account, subscription, and device records while needed to operate the service, process cancellations, prevent fraud, satisfy legal obligations, and respond to support requests. Payment records are retained by Stripe under its policies. You may request deletion by contacting support, subject to legal and operational retention requirements.

6. Data Security

Your data is encrypted in transit (TLS) and at rest (AES-256). Passwords are hashed and never stored in plaintext. Access to production systems is restricted to authorized personnel. We use AWS infrastructure with industry-standard security controls.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, contact us at support@shamefull.io.

8. Children

Shamefull is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If a parent or guardian installs Shamefull on a minor's device, the parent or guardian is responsible for managing that device's data.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website. Continued use of Shamefull after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at support@shamefull.io.