Privacy Policy

1. Information We Collect

When you use Shamefull, we collect the following information:

• Account information: Email address and encrypted password when you create an account
• Payment information: Processed entirely by Stripe. We never store your credit card details
• Device information: Device name, platform (macOS or iPhone), and a unique device identifier for license enforcement
• Subscription data: Your plan tier, subscription status, and device count
• Accountability settings: The email addresses you select to receive Mac accountability alerts
• Alert content: When the Mac model detects explicit content, a screenshot and detection score are transmitted to the selected accountability recipients

2. Information We Do NOT Collect

We are committed to your privacy. We explicitly do not collect:

• A continuous recording of your Mac screen
• A server-side history of every Mac screen classification
• Your location data
• Contacts, photos, or files from your devices

Mac classification runs locally. Screenshots leave the Mac only when an explicit-content alert is triggered and are delivered through AWS email infrastructure to the recipients you selected. iPhone DNS requests are processed by Control D under its service and privacy terms.

3. How We Use Your Information

• To provide and maintain your subscription
• To enforce device limits based on your plan tier
• To send you your license key and account credentials
• To process payments through Stripe
• To deliver accountability alerts to recipients you select
• To configure and maintain supervised iPhone DNS protection
• To manage the cancellation delay and release removal codes when eligible
• To respond to support requests

4. Third-Party Services

We use the following third-party services:

• Stripe for payment processing (Stripe Privacy Policy)
• Supabase for authentication and account management
• Control D for DNS filtering on registered devices
• AWS for infrastructure hosting
• Vercel for website hosting

5. Data Retention

We retain account, subscription, and device records while needed to operate the service, process cancellations, prevent fraud, satisfy legal obligations, and respond to support requests. Accountability screenshots are transmitted for email delivery and may remain in recipients' mailboxes according to their email providers' retention settings. Payment records are retained by Stripe under its policies. You may request deletion by contacting support, subject to legal and operational retention requirements.

6. Data Security

Your data is encrypted in transit (TLS) and at rest (AES-256). Passwords are hashed and never stored in plaintext. Access to production systems is restricted to authorized personnel. We use AWS infrastructure with industry-standard security controls.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, contact us at support@shamefull.io.

8. Children

Shamefull is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If a parent or guardian installs Shamefull on a minor's device, the parent or guardian is responsible for managing that device's data.

9. Accountability Recipients

Setup does not notify the accountability recipients you configure. If a detection countdown expires, those recipients may receive an incident email containing a sensitive screenshot. You are responsible for entering the intended addresses accurately and using accountability alerts lawfully.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website. Continued use of Shamefull after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at support@shamefull.io.