Privacy Policy

1.1 Stored on Your Device

The following is stored locally on your device only and is never transmitted to our servers:

• Journal entries
• App preferences and settings
• Theme selections
• Notification preferences

1.2 Analytics — Firebase Analytics

Shelly uses Google Firebase Analytics to collect pseudonymous usage data to help us improve the app. Firebase may collect:

• Device type and model
• Operating system version
• App usage events and interaction data
• A persistent pseudonymous device identifier (Firebase Instance ID)

1.3 Subscription & Purchases — RevenueCat

Shelly uses RevenueCat to manage subscriptions. RevenueCat may process:

• Subscription status and entitlements
• Purchase transaction records
• App Store or Google Play Store identifiers
• IP address and device identifiers used for fraud prevention

Payment processing is handled entirely by Apple (App Store) or Google (Google Play). We do not receive, store, or have access to your payment card or banking information.

1.4 Push Notification Tokens

If you enable push notifications, Shelly uses Firebase Cloud Messaging (FCM), which transmits a device push token to Firebase servers to deliver notifications. This token is used solely for notification delivery and is not used for advertising.

• Provide core app functionality and save your preferences
• Deliver subscription and premium features
• Analyze usage trends and improve app performance
• Diagnose bugs and improve reliability
• Verify purchases and manage subscription entitlements

Shelly relies on the following providers. Each handles data under its own privacy policy — we encourage you to review them:

Information may be processed by the third-party providers described above solely to provide app functionality, analytics, and subscription management. These providers are contractually required to protect your data and use it only for specified purposes.

• Delete journal entries at any time within the app
• Uninstall the app to remove all locally stored data from your device
• Limit analytics data collection via Limit Ad Tracking (iOS) or Opt out of Ads Personalization (Android) in your device settings
• Disable push notifications at any time through your device notification settings

Journal entries and preferences remain on your device until you delete them or uninstall the app.

Analytics and subscription-related data may be retained by Firebase and RevenueCat per their respective policies. We do not independently retain personal information from these services.

Shelly is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided information through the app, we will take reasonable steps to delete that information promptly.

If you believe a child under 13 has used Shelly and provided personal information, please contact us at the address in Section 11.

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

To exercise any of these rights, contact us using the information in Section 11.

If you are located in the European Economic Area (EEA) or United Kingdom, the following applies under the GDPR or UK GDPR.

9.1 Legal Basis for Processing

• Legitimate Interests — Pseudonymous analytics data to improve app performance and stability
• Contract Performance — Subscription data to deliver features you have purchased
• Consent — Where required, we will request consent before processing your data

9.2 Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data ("right to be forgotten")
• Object to or restrict certain processing activities
• Request data portability
• Lodge a complaint with your local data protection supervisory authority

9.3 International Data Transfers

Firebase and RevenueCat are US-based services. By using Shelly, data processed by these providers may be transferred to and stored in the United States. Both providers have adopted appropriate safeguards for international transfers, including Standard Contractual Clauses where applicable.

We take reasonable measures to protect information processed in connection with Shelly. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security of data held by third-party providers.

In the event of a data breach involving your personal information, we will notify affected users as required by applicable law.

Questions, requests, or concerns about this Privacy Policy or your personal data?

We may update this Privacy Policy from time to time. Any material changes will be reflected on this page with an updated effective date. We encourage you to review this policy periodically.

For significant changes, we will provide notice through the app where applicable.