Privacy Policy

SuperShy is a slow social app for staying close with a small circle of friends. We collect as little as possible, never track you, and never sell your data.

What we collect

• Sign-in: the user identifier from Sign in with Apple.
• Profile city: a city you manually search for and choose. SuperShy never reads your device location.
• Your content: photos, words, and messages you share.
• Friends: the friend list you build (8 included, up to 16 with the optional Friend Pack).
• Purchase history: for the optional Friend Pack, Apple transaction identifiers, purchase time, and refund or revocation status linked to your SuperShy account. Apple processes payment; we never receive card or payment-account details.

How we use it

• Core features: showing cities that you and your friends manually choose.
• Optional: you can hide or change your chosen city anytime and appear as SOMEWHERE.
• Storage: keeping your daily frames and conversations with friends.
• Purchases: granting, restoring, and revoking Friend Pack access.
• Friends-only: your city and content are visible only to friends you add, never nearby strangers (maximum 16).

Camera & photos

• Camera: used only to scan a friend's QR code when adding friends. We don't record or store video.
• Photo library (read): when you pick a frame, avatar, or QR-code image, only that image is opened. QR codes are recognized on your device and the selected image is not uploaded.
• Photo library (write): only when you tap Save to store a frame or your friend QR code in your own library.
• EXIF/GPS: photos you share have their embedded location stripped before upload — we never receive a photo's precise coordinates.

On-device storage

• Your frames and conversations are cached on your device, so the app works offline and loads fast.
• Downloaded photos are cached on disk to avoid re-fetching.
• You can clear the on-device image cache anytime (Settings → Clear Cache). Deleting the app removes all local data.

Where data lives

All data is stored on Supabase (Singapore servers). Row-level security ensures your photos and messages are visible only to the friends you add, and other users can't access your data.

Map services

• Apple MapKit renders the map.
• CARTO provides map tiles based on OpenStreetMap data.
• City search uses a GeoNames city index bundled inside the app. Your search text is not sent to GeoNames or another search provider.
• CARTO may receive standard network information, such as your IP address and the map area requested, under its privacy policy.
• SuperShy does not send your account ID, messages, photos, friend list, or city-search text to map providers.

What we don't do

• No device-location access or GPS tracking.
• No notifications (no push, no read receipts, no online status).
• No behavioral tracking — we use no third-party analytics or advertising SDKs.
• No selling data to third parties.
• No ads.

Your rights

• Delete your account anytime (Settings → Delete Account). This permanently erases all your data — frames, photos, messages, and account — and can't be undone.
• Hide or change your chosen city anytime from the city control at the top of the map.

Age requirement

SuperShy is intended only for people aged 18 or older. We do not knowingly collect data from anyone under 18.

Contact

Questions: email privacy@supershy.me

Last updated: August 12, 2026