Privacy Policy

01Who is responsible

Shift is developed by Jackson Liu in New Zealand. In this policy, “Shift”, “we”, and “us” refer to the developer operating these apps and meetshift.app.

For privacy questions or requests, use our support form and select “Privacy or account deletion”. The form reaches the developer. Do not include passwords, API keys, or private conversations.

02Information Shift handles

• Account and profile: your email, account identifier, sign-in details, and any name, profile information, or preferences you provide. Google or GitHub sign-in supplies the account information authorised by that sign-in flow.
• Workspace content: prompts, replies, chat history, files and attachments, Studio documents, agent instructions, schedules, personalisation answers, and generated work.
• Task context: the contents of relevant windows, screenshots, accessibility text, page content, app and window names, file paths, tool results, action history, errors, and execution receipts. Screen context can include information about other people that appears in your apps.
• Devices and connections: device identifiers, names and platforms, connection state, task status, remote commands, and data exchanged between the devices you connect.
• Voice: microphone input, recognised speech, conversation transcripts, and call status when you enable voice features.
• Support and website use: the name, email, selected topic and message you submit, plus technical request data and website usage measurements described below.

03Why information is processed

Shift uses this information to sign you in, remember your preferences, answer requests, create and edit work, run the agents and schedules you enable, connect your devices, and show what happened during a task. Support submissions are used to respond, investigate issues, and improve the product. Website measurements help us understand visits and download interest; operational records help keep the services available and secure.

Providing account details is necessary for account-based features. Permissions and task context are needed for the features that depend on them. If you decline or revoke access, those features may be unavailable. Platform-update emails are sent when you request them; you can ask us to stop through the support form.

04AI providers and task context

When you connect an AI service, Shift sends your requests and relevant context to the provider you configure. Depending on the task, this can include conversation history, attachments, document text, screenshots, browser content, accessibility observations, agent instructions, and tool results. AI-powered personalisation also sends the answers you provide during setup.

Your provider’s own terms, retention settings, and data-use policies apply. We cannot promise that every provider uses the same retention or model-training rules. Review the service you choose before sending confidential information. An API endpoint you configure may be operated by a third party.

Choosing a local model can keep that model’s inference on your computer. It does not make all of Shift offline: cloud account features, remote sync, websites, connected tools, and model downloads can still communicate over the network.

05Screen, browser, and voice access

Accessibility and screen-recording permissions let Shift observe and interact with your Mac. Agents and schedules you enable may observe their configured targets in the background. Stop the task or disable its agent to stop that work; operating-system permissions can be revoked in System Settings.

Surf stores browsing information such as tabs, history, bookmarks, cookies, and site data on your Mac. Websites you visit receive ordinary browser requests and apply their own privacy policies. When you ask Shift to work with a page, its content may also become task context. Imported browser data is handled according to the import options you choose.

Microphone and speech permissions support dictation, wake-phrase detection, and calls. Enabling “Hey Shift” means microphone listening while that feature is active; this wake-phrase path requires on-device Apple speech recognition. Neo’s local voice path transcribes speech on your Mac, and recognised text is sent to your AI provider for a response. Calls send audio between connected devices; remote calls can relay that audio through Supabase Realtime. Conversation and call transcripts can remain in local history and selected excerpts can sync to connected devices.

06Local storage and cloud sync

Shift keeps app preferences, workspace files, conversations, browser data, and task records in local app storage. Exported files, backups, and operating-system backups can contain additional copies. API keys and session tokens use Keychain or the relevant provider’s authentication storage; some connection configuration is stored in app preferences. If you enable saved Mac unlocking, the password is stored in device-only Keychain storage and can be removed from that feature’s settings.

Shift uses Supabase for account authentication and remote-device coordination. Cloud records can include your account, device information, workspace snapshots, task and conversation updates, pending commands, and call signalling. Snapshots can include message text, screen-derived observations, image or file attachments, projects, schedules, and Neo call excerpts. These records allow your signed-in devices to follow and control work on your Mac. Local pairing and remote cloud sync are different connection paths.

Only connect devices you trust. Turning off remote sharing or signing out limits further access, but does not by itself delete previously stored cloud records. Cloud sync is not advertised as end-to-end encrypted.

07Services that receive information

• Your selected AI providers and connected tools: receive the requests, credentials, and task information needed for their role.
• Supabase: provides account, database, and remote-sync infrastructure. See Supabase’s privacy policy.
• Vercel: hosts the website and its form endpoint, handles technical requests, and provides Web Analytics. See Vercel’s privacy notice.
• FormSubmit and email delivery: deliver website support and platform-interest submissions to the developer’s email inbox. Your name, email, topic, and message pass through this delivery service. See FormSubmit’s privacy policy.
• Apple: provides platform services and TestFlight distribution. TestFlight supplies crash, usage, and tester-submitted feedback to Apple and the developer under its testing terms.
• GitHub: hosts Mac release downloads and reports aggregate asset-download counts. See GitHub’s privacy statement.

We may also disclose information where required by law, to respond to a valid legal request, or where necessary to protect people or investigate misuse. A provider’s independent handling of information is governed by its own policy.

08Website analytics and storage

The website uses Vercel Web Analytics to measure page views, referrals, broad location, and browser and device categories. Vercel describes this analytics service as cookie-free; it processes request information to produce these measurements. Hosting and security systems may also process IP addresses and technical request logs. See Vercel’s analytics privacy documentation.

The setup checklist keeps its current progress in the open page; that progress is not sent as a completed-installation report. This is separate from cookies set by websites you browse in Surf. GitHub’s download counts measure asset requests, not unique people or confirmed installations.

09Retention and deletion

Local records remain until you remove them using available app controls or delete the relevant local data. Removing the app alone may leave app-support files, Keychain entries, or backups. Cloud account and sync records can remain while your account is active; command history and operational logs have different lifecycles. The current beta does not have a single automatic deletion period for all records.

In updated Shift builds, open Settings → Account → Delete account on iPhone or Mac, or Preferences → Account & connection on Apple Watch. After you confirm and deletion succeeds, your signed-in cloud account and its associated device, snapshot, and command records are permanently deleted. The app signs you out and clears its cached account and remote-sync information. Signing out alone does not delete your account.

Account deletion does not remove documents, browser history, or AI-provider keys stored locally on your Mac. Remove those separately using the relevant app controls or local storage. It does not delete your accounts with Apple, Google, GitHub, or your AI providers, or cancel their subscriptions. Local device pairing is separate from cloud sign-in; disconnect local devices if you no longer want to use them.

If your build does not have Delete account, you cannot sign in, or you want to request deletion of other information we hold, use the support form, choose “Privacy or account deletion”, and provide the email associated with your account. We may verify ownership before acting.

We retain support correspondence and operational information only as needed to handle the request, operate the service, resolve disputes, or meet legal obligations. Deleted data may remain in restricted backups until those backups expire. We cannot erase copies you exported, content already sent to other people, or records that an independent provider retains under its own terms; you may need to contact that provider separately.

10Your choices and rights

You can stop a task, disable a background agent, disconnect an AI provider or device, change browser settings, and revoke system permissions. Before sharing an execution receipt, screenshot, or support attachment, check it for personal information and credentials.

You can delete your cloud account using the in-app control described above. You can also ask what personal information we hold about you, request access or correction, or request deletion through our support form. Include enough information for us to find the relevant account, but do not send your password. We respond in accordance with applicable law and explain any limits on a request. Depending on where you live, you may also have rights to object, restrict processing, or receive a portable copy.

If you have a concern, contact us first so we can investigate. You may also contact the New Zealand Privacy Commissioner or your local privacy regulator.

11International processing and security

Shift is operated from New Zealand, but service providers may process information in other countries, including the United States. Locations depend on the provider and connection you choose. Those countries may have different privacy laws. We use access controls and the security mechanisms supplied by the operating system and our service providers, but no storage or transmission method is completely secure.

Do not provide access to information you are not authorised to share. Take particular care with other people’s messages, financial information, and documents covered by workplace confidentiality rules.

12Age requirements and policy updates

Shift is not directed to children under 13. Follow the age rating shown for your app and the minimum-age requirements of the services you connect. If you believe a child has provided personal information inappropriately, contact us so we can investigate and handle deletion where required.

We update this policy when the product or its data handling changes. The effective date above identifies this version. Material changes will be explained on the website or in the app; where required, we will seek consent before applying them.