Effective Date: January 15, 2025

Last Updated: January 15, 2025

This Privacy Policy describes how Shellist ("we," "us," or "our") collects, uses, maintains, and discloses information collected from users of the Shellist mobile application (the "App"). This privacy policy applies to the App and all products and services offered by Shellist.

1. Information We Collect

User-Provided Data

When you use the App, you may provide the following types of information:

• Habit Data: Habits you create, completion records, notes, and associated goals
• Vision Board Content: Images and photos you choose to add from your device's photo library
• App Preferences: Your notification settings, calendar preferences, and other customization options

Automatically Collected Information

We may automatically collect limited technical information to ensure optimal app performance:

• Device Information: iOS version and device type for compatibility and optimization purposes
• Anonymous Usage Analytics: Basic usage patterns through Apple's privacy-preserving analytics framework (no personally identifiable information)

Information We Do Not Collect

We do not collect, store, or process the following categories of information:

• Personal identifiers such as name, email address, or contact information (no account registration is required)
• Location data or geolocation information
• Browsing history or web activity
• Contact lists or address book information
• Data from other applications on your device

2. How We Use Your Information

We process your information for the following purposes:

Provision of Core Functionality

• Display and manage your habits, completion records, and progress tracking
• Generate data visualizations including pearl chains, heatmaps, and analytical charts
• Deliver local notifications based on your preferences (if enabled)
• Provide export capabilities for your data in various formats

App Improvement and Optimization

• Identify and resolve technical issues, bugs, and performance problems
• Analyze feature usage patterns to prioritize development efforts
• Enhance user experience and interface design
• Ensure compatibility with current and future iOS versions

Optional Data Synchronization

• Facilitate data synchronization across your personal devices using Apple's iCloud infrastructure
• Synchronization occurs only when explicitly enabled in your device settings
• All synced data remains within your personal iCloud account under your control

3. Data Storage & Security

Local Storage Architecture

All user-generated data is stored locally on your device using Apple's Core Data framework, which provides the following security characteristics:

• Data remains on your device and is not transmitted to external servers (unless iCloud synchronization is enabled)
• We do not have access to, collect, or maintain copies of your locally stored information
• All data benefits from your device's built-in encryption and security measures
• Data persistence is managed entirely within the iOS security sandbox

Optional iCloud Synchronization

If you choose to enable iCloud synchronization through your device settings:

• Data synchronization occurs across your Apple devices using Apple's CloudKit infrastructure
• All data is encrypted in transit and at rest according to Apple's security standards
• Data storage and management is performed by Apple, not by Shellist
• You may disable iCloud synchronization at any time through iOS Settings → iCloud → Shellist
• We do not have access to your iCloud account or the data stored within it
• iCloud data retention and deletion is governed by Apple's policies and your account settings

4. Data Sharing and Third-Party Disclosure

No Third-Party Data Sharing

We do not sell, rent, trade, or otherwise disclose your personal information to third parties for commercial purposes. Specifically, we do not share data with:

• Advertising networks or ad technology providers
• Data brokers or aggregators
• Marketing or promotional companies
• Third-party analytics services (we use only Apple's privacy-preserving built-in analytics)
• Social media platforms
• Any other external entities for commercial purposes

User-Controlled Data Transfer

The only instances where your data may be transferred are under your direct control:

• iCloud Synchronization: Data syncs to your personal iCloud account when you enable this feature in device settings
• Data Export: You may export your data to files (CSV, PDF formats) which are saved to locations you specify
• Device Backups: Data may be included in device backups managed through iCloud or iTunes according to your backup settings

We will only disclose user information if required by law, court order, or government regulation, and will notify users when legally permitted to do so.

5. User Rights and Data Control

You maintain complete control over your personal data stored within the App. The following rights and options are available to you:

Right to Access

• View and review all habits, entries, and associated data within the App interface
• Export your complete data set in CSV or PDF format through the Profile → Export Data function
• Access your data at any time without restriction or delay

Right to Deletion

• Delete individual habits, entries, or data points through the App interface
• Perform a complete data reset through Settings → Reset All Data
• Permanently delete all local data by uninstalling the App from your device
• Request deletion of iCloud data through your device's iCloud storage management settings

Right to Control Data Synchronization

• Enable or disable iCloud synchronization at any time through iOS Settings → iCloud → Shellist
• Manage or delete iCloud-stored data through Settings → iCloud → Manage Storage → Shellist
• Choose to keep data strictly local without any cloud synchronization

Right to Data Portability

• Export your data in machine-readable formats (CSV) for transfer to other services
• Generate PDF reports for record-keeping or sharing purposes

6. Children's Privacy

The App is rated 4+ on the Apple App Store and is designed to be suitable for users of all ages. We do not knowingly collect, store, or process personal information from children under the age of 13. Given the App's local-first architecture and lack of account registration, we generally do not collect personal information from any users, including children.

If you are a parent or guardian and believe that your child under 13 has provided personal information through the App, please contact us at jittikas@icloud.com. We will take appropriate steps to investigate and address the concern in accordance with applicable children's privacy laws, including COPPA (Children's Online Privacy Protection Act).

7. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes to this Privacy Policy:

• The "Last Updated" date at the top of this policy will be revised to reflect the date of the most recent changes
• For material changes that significantly affect your privacy rights or data handling practices, we will provide prominent notice through the App interface
• Your continued use of the App following the posting of changes constitutes your acceptance of such changes
• We encourage you to periodically review this Privacy Policy to stay informed about how we protect your information

If you do not agree to any modifications to this Privacy Policy, you should discontinue use of the App and delete it from your device.

8. International Users and Regional Privacy Rights

European Union and United Kingdom (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to Access: Request confirmation of whether we process your personal data and obtain a copy of such data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Data Portability: Receive your personal data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
• Right to Object: Object to processing of your personal data under certain circumstances
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Given the local-first nature of the App, most GDPR rights can be exercised directly through the App interface without contacting us.

California, USA (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of personal information we have collected from you
• Right to Opt-Out: We do not sell or share personal information, so there is no opt-out required
• Right to Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment
• Right to Correct: Request correction of inaccurate personal information

Other Jurisdictions

Users in other jurisdictions may have rights under applicable local privacy laws. Please contact us at jittikas@icloud.com for information about exercising your privacy rights under applicable law.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: jittikas@icloud.com
Website: shellist.netlify.app

We will make reasonable efforts to respond to all privacy-related inquiries within 48 hours of receipt.