Privacy Policy

When you use Shard, we collect information you provide directly to us:

• Account data — name, email address, username, and password when you register.
• Profile data — avatar, bio, interests, and any other information you choose to add.
• Quest data — goals, tasks, progress, notes, and attached media you create within the app.
• Usage data — how you interact with the app, features you use, and actions you take.
• Communications — messages you send to other users within quest chats.

We also automatically collect certain technical data when you use Shard, including IP address, device type, operating system, browser type, and crash reports.

We use the information we collect to:

• Provide, maintain, and improve the Shard service
• Personalise your experience, including AI-generated quest suggestions
• Track your progress, award XP, and compute leaderboard rankings
• Send you service-related notifications and reminders you have enabled
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

We do not sell your personal data to third parties.

We share your information only in the following circumstances:

• With other users — your username, avatar, and public quest data are visible to other users according to your privacy settings. Private quests and anonymous mode quests are never shown to other users.
• Service providers — we use trusted third-party providers (e.g. cloud hosting, analytics) who process data on our behalf under strict data processing agreements.
• Legal requirements — we may disclose information if required by law, court order, or to protect the safety of our users.

We retain your personal data for as long as your account is active. You may delete your account at any time from Settings → Account → Delete Account. Upon deletion, your personal data is permanently removed within 30 days, except where we are required to retain it by law.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing of your data
• Data portability — receive a copy of your data in a machine-readable format

To exercise any of these rights, contact us at privacy@shard.app.

We use industry-standard security measures including encryption in transit (TLS), encrypted storage for sensitive data, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Shard is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately at privacy@shard.app.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the change takes effect. Continued use of Shard after the effective date constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, please contact us at privacy@shard.app or write to: Shard Inc., Privacy Team, [Address].