Privacy Policy

Last updated: July 1, 2026

Draft — pending legal review. This policy was drafted by our engineering team to unblock development and has not yet been reviewed by counsel. It should not be relied upon and is subject to change before Shiijak is publicly available.

This Privacy Policy explains what information Shiijak ("Shiijak," "we," "us") collects when you use our website and app (the "Service"), how we use it, and the choices and rights you have over it.

Information we collect

Account information — your email address, username, password (stored hashed, never in plain text), and any profile details you add, such as a display name, bio, or avatar.
Content you create — posts, replies, reactions, reposts, direct messages, saved/bookmarked items, and curated lists ("Share Your Ten") you choose to publish or send.
Usage information — the posts and profiles you view, how you interact with them (likes, replies, dwell time), and device/browser information (IP address, user agent) — used to secure the Service and to rank the feed you personally see.
Cookies — strictly-necessary cookies that keep you signed in and remember your cookie choice, and, only if you accept them, analytics cookies. See "Cookies & analytics" below.

How we use information

To operate, maintain, and secure the Service (authentication, abuse and moderation enforcement, fraud prevention).
To rank and personalize the feed you see, based only on your own activity on Shiijak.
To respond to support requests and communicate service-related notices.
To comply with legal obligations.
To improve the product — in aggregate or de-identified form unless you have opted into analytics cookies.

We do not sell your data

Shiijak does not sell or rent your personal information to third parties for their own marketing purposes, and never has.

Cookies & analytics

Strictly-necessary cookies (like the ones that keep you signed in and remember your cookie-banner choice) are always on — the Service can't work without them. Analytics cookies (Google Analytics 4 and PostHog) are off by default and load only after you click "Accept" on the cookie banner; if you decline, no analytics cookies are set and no analytics network requests are made. You can change your mind at any time by clearing your cookies and revisiting the banner.

Third parties & service providers

We share information with a small number of providers who help us run the Service:

Cloudflare — network delivery and object storage (photos you upload).
Google Analytics 4 and PostHog — usage analytics, loaded only with your consent (see above).
Apple and Google — if you choose "Sign in with Apple/Google," they verify your identity for us; we do not receive your password.
Azure Translator — only when you use the optional translation feature, to translate the specific content you request.
Resend — delivers transactional email (password resets, verification).

None of these providers is permitted to use your data for their own advertising.

Data retention & your account

We retain your account and content for as long as your account is active. Engagement data used to power feed ranking is retained only as long as needed for that purpose and is purged or anonymized on a schedule, consistent with our internal ranking-logging retention policy.

Deleting your account: you can request deletion at any time from Settings → Account → Delete Account in the Shiijak app. Deletion starts a 30-day grace period (you can cancel by simply signing back in); afterward, your account is anonymized and your content is de-identified. If you need help, email privacy@shiijak.com.

Your rights (GDPR / CCPA)

Access, correct, or request a copy (export) of your personal information.
Request deletion of your account and personal information (see above).
Object to, or request that we restrict, certain processing.
California residents: you have the right to know, delete, and correct your personal information, and to opt out of any "sale" or "sharing" of it — as noted above, we do not sell or share personal information as defined by the CCPA/CPRA.
EU/UK residents: our legal bases for processing are performance of a contract (running your account), legitimate interests (safety and ranking), and consent (analytics cookies).

To exercise any of these rights, email privacy@shiijak.com.

International data transfers

Shiijak's infrastructure may process and store information outside of your country of residence, including in the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above and, for material changes, notify you in-app or by email.

Contact

Questions about this policy? Email privacy@shiijak.com.