Privacy Policy

Last updated: September 2, 2026

This Privacy Policy explains how SL Media Labs LLC ("Shiftclub," "we," "us," or "our") collects, uses, shares, and protects information when you use the Shiftclub mobile application and related services (the "Service").

By creating an account or otherwise using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Who We Are

Shiftclub is operated by SL Media Labs LLC, a limited liability company registered in Florida, United States.

Contact for privacy questions or data requests: privacy@slmedialabs.com

2. Information We Collect

2.1 Information you provide directly

• Account information: name, username, email address, password (stored in hashed/encrypted form), profile photo
• Profile and Garage content: cars you add to your Garage (make, model, year, photos, nicknames), posts, logbook entries, comments, and other content you choose to share
• Marketplace content: listings you create (photos, title/description, category, condition, price and currency, mileage, title status, fitment, and the country/state you select for the listing)
• Business/Vendor information: if you enable a business profile, the country and state you provide for that profile
• Messages: direct messages you send to other users, including marketplace-related messages
• Reports: information you submit when reporting content, listings, or other users
• Support communications: anything you send us when contacting support

2.2 Information collected automatically

• Device and usage data: device type, operating system, app version, crash logs, and general usage patterns within the app, used to maintain and improve the Service
• Approximate location: the country/state you select is used to power Marketplace filtering and the Vendor country-priority feature. We do not collect precise GPS location.

2.3 Information from third parties

• Payment/subscription status: if you subscribe to a paid tier (e.g. ShiftClub Vendor), your subscription is processed by Google Play Billing or Apple's In-App Purchase system. We receive confirmation of your subscription status only — we do not receive or store your payment card details, which are handled entirely by Google or Apple.

3. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Service
• Enable core features: your feed, Garage, Marketplace, direct messages, communities, meets, and notifications
• Show your content to other users as intended by the feature you're using (e.g. a public post, a Marketplace listing, a direct message to its recipient)
• Provide customer support and respond to your requests
• Detect, investigate, and prevent fraud, abuse, policy violations, and safety issues, including through our content reporting and moderation systems
• Comply with legal obligations

4. How We Share Information

• With other users: information you choose to make visible through your profile, posts, Garage, Marketplace listings, and direct messages is shared with other users as intended by that feature.
• Service providers: we use third-party infrastructure providers to operate the Service, including:
  • Supabase (database hosting and authentication)
  • Cloudflare (object storage for photos and videos, via Cloudflare R2)
  • Google Play Billing / Apple In-App Purchase (subscription payment processing)
  • Firebase (planned, for push notifications)
  These providers process data on our behalf and are contractually restricted from using it for their own purposes.
• Legal requirements: we may disclose information if required by law, legal process, or to protect the rights, property, or safety of Shiftclub, our users, or others.
• Business transfers: if Shiftclub is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information. Shiftclub's advertising is fully self-run — we do not use third-party advertising networks or share your data with ad tech providers.

5. Marketplace-Specific Data Practices

Shiftclub's Marketplace is a peer-to-peer classifieds feature. Shiftclub does not process payments for Marketplace transactions and is not a party to any transaction between buyers and sellers. Any information you exchange with another user to complete a transaction off-platform (e.g. meeting location, payment details) is shared at your own discretion and risk, and is not collected or stored by Shiftclub beyond what's visible in your in-app messages.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information, except where retention is required for legal, safety, or fraud-prevention purposes (for example, records related to an active moderation report).

7. Your Rights and Choices

You can access, update, or delete much of your information directly within the app (profile, Garage, posts, listings). For anything else, contact us at privacy@slmedialabs.com.

If you are in the European Economic Area or United Kingdom (GDPR/UK GDPR)

You have the right to: access your data; correct inaccurate data; request deletion; restrict or object to certain processing; and receive a copy of your data in a portable format. Our legal basis for processing your information is generally the necessity of processing to provide the Service you've signed up for (contractual necessity), our legitimate interest in operating and securing the Service, or your consent where required.

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion of that information, and not be discriminated against for exercising these rights. As noted above, we do not sell personal information.

8. International Data Transfers

Because our service providers operate infrastructure in the United States and other countries, your information may be processed outside of the country where you live. Where required, we rely on appropriate safeguards for such transfers.

9. Data Security

We take reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Shiftclub is not directed at, and is not intended for use by, anyone under 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by other reasonable means. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

12. Contact Us

Questions about this Privacy Policy or your data can be sent to privacy@slmedialabs.com.

This document is a starting template based on Shiftclub's current features and data practices. It should be reviewed by a qualified attorney — particularly given SL Media Labs LLC's international ownership structure and Shiftclub's cross-border user base — before publication.