Privacy Policy

Shift is a mobile app and website (together, the “Service”) owned and operated by YAVANNA PTE. LTD. (“YAVANNA”, “we”, “us”, “our”), a company incorporated in Singapore (UEN: [Company Registration No.]). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the Service. We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”).

By creating an account or otherwise using the Service, you consent to the collection, use, and disclosure of your personal data as described in this Policy. You may withdraw consent at any time as set out in section 5.

1. Personal data we collect

• Account information — your name, email address, and password (stored in hashed form) when you create an account.
• Activity data — the sustainable actions you log, including action types, materials, timestamps, and the resulting impact metrics (CO₂, plastic, water).
• Photos — images you submit for AI-assisted action scanning. These are processed to identify the action and material.
• Rewards data — points balance, redemptions, and referral information.
• Contact submissions — the name, email, and message you provide through our website contact form.
• Technical data — basic device and usage information needed to operate and secure the service.

2. How we use your data

• To create and manage your account and authenticate you.
• To calculate and display your environmental impact, points, streaks, and rewards.
• To process AI photo scans and approve logged actions.
• To enable reward redemption with partner merchants.
• To respond to your enquiries and provide support.
• To maintain the security, integrity, and performance of the service.

3. Service providers and disclosure

We do not sell your personal data. We share it only with service providers who process it on our behalf, under appropriate safeguards:

• Supabase — database, authentication, and storage hosting.
• Google (Gemini API) — AI analysis of photos you submit for action scanning.
• Formspree — delivery of website contact-form submissions.
• Partner merchants — limited information necessary to fulfil a reward you choose to redeem.

We may also disclose personal data where required by law or to protect our legal rights.

4. Retention

We retain personal data only for as long as necessary to fulfil the purposes described above or as required by law. Photos submitted for scanning are retained only as long as needed to process and record the action.

5. Your rights under the PDPA

Subject to applicable law, you may request access to, or correction of, the personal data we hold about you, and you may withdraw consent to our collection, use, or disclosure of your personal data. You can delete your account at any time from within the app, which initiates removal of your associated data.

6. Security

We apply reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

Shift is not directed to children under 13, and we do not knowingly collect personal data from them.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

9. Contact us

Shift is owned and operated by YAVANNA PTE. LTD., Singapore, which is the data controller responsible for your personal data. For privacy questions, or to exercise your access, correction, or consent-withdrawal rights under the PDPA, contact our Data Protection Officer at hello@letsshift.co.