Privacy policy
Last Updated: 12.01.2026
Please note that Shape is not meant to be used by anyone under the age of 13.
This Privacy Policy explains how Shape ("we", "our", "us") collects, uses, and protects your personal data when you use our mobile application (the "Service").
By using Shape, you agree to the collection and processing of your data as described in this Privacy Policy. If you do not agree, please stop using the Service.
For any questions, contact us at hello@appshape.io.
What Data We Collect
We collect three types of data:
Data you provide directly (e.g., when creating an account or uploading Content).
Data collected automatically (e.g., device information, location, analytics).
Data from third-party services (e.g., if you log in with Google or Facebook).
1.1. Data You Provide to Us
When you create an account or use the Service, we collect:
Required Data (without it, you cannot use the Service):
Email address
Username
Display name
Date of birth
Location
Phone number (only if logging in via phone)
Optional Data:
Phone number (if not required for login)
Bio
Profile picture
Content: Photos you upload to the Service. These are automatically deleted after 24 hours, but you can delete them earlier from your profile.
You can create an account without granting us access to your device’s camera or photo library. However, without granting this access, you will only be able to view Content from other users and will not be able to upload or share your own.
1.2. Data We Collect Automatically
When you use Shape, we automatically collect:
Device & Connection Data: Device type, operating system (iOS/Android), app version, internet connection type (Wi-Fi/mobile data).
Location Data:
Shape requires access to your precise GPS coordinates (latitude and longitude) to function properly.
If you disable location services on your device, the app may not work properly. If location is initially enabled but later turned off, we will use your last known location.
Your location is used only for placing Content in Explore mode and is not shared outside the app.
Analytics Data:
We use Firebase Analytics to understand how users interact with Shape (e.g., time spent in the app, number of uploaded photos).
This data is used only to improve and analyze the Service. It is not used for personalized advertising and we do not sell user data.
Posting Time: We collect timestamps when you upload Content.
Content Interactions: We track who has viewed, voted on, or interacted with your Content. These interactions may be used to award badges or recognize your activity within the app.
1.3. Data from Third-Party Services
If you log in using Google or Facebook, we collect the following data from these services:
User ID
Email address
Display name
Profile picture
Phone number (if available)
Bio (if available)
We do not collect any additional information from Google or Facebook beyond what is necessary for authentication.
How We Use Your Data
We use your data to provide, improve, and personalize your experience on Shape. Below is an overview of how we use different types of data:
Type of Data
How We Use It
Legal Basis
Account Information (email, username, display name, date of birth, phone number)
To create and manage your account, verify your age, and provide essential app functions.
Performance of the contract – we need this information to provide you with our service.
Profile Information (bio, profile picture)
To personalize your account and display your profile to other users.
Your consent – you provide this information voluntarily.
Content (photos you upload)
To allow you to share Content with Friends, Followers, or in Explore mode. All Content is automatically deleted from the app interface after 24 hours. Where Content is shared publicly (in Explore or Followers mode), it may also be used to promote and develop the Shape Service, in accordance with the Terms of Service.
Performance of the contract – this is necessary for the core features of Shape.
Location Data
Your real-time location is used to determine what Content appears in Explore. Each post retains the location where it was uploaded, even if your location changes later. Your current location updates continuously for app functionality but is not stored permanently.
Performance of the contract – Shape requires location access to function properly.
Device & Connection Data (device type, OS, app version, connection type)
To ensure compatibility with your device and optimize app performance.
Legitimate interest – we use this data to maintain and improve the app.
Analytics Data (Firebase Analytics)
To analyze how users interact with the app and improve functionality. Data is not used for advertising or marketing.
Legitimate interest – we use this data to enhance the user experience.
Content Interactions (who voted, viewed, or engaged with Content)
To power app features like voting, engagement metrics, and awarding badges based on user activity.
Performance of the contract – this enables the main interactive features of Shape.
User Activity Data (e.g., number of posts, votes, badges earned)
To assign badges and recognize user achievements.
Legitimate interest – to encourage user engagement.
2.1. Public Content and Service Promotion
Publicly shared Content on Shape (in Explore or Followers mode) may be used by Shape for promotional, marketing, and informational purposes, both within the application and outside of it (e.g. on social media platforms or in application stores).
Such promotion may include the use of publicly visible profile elements, such as the username, profile photo, comments, or reactions, solely to the extent that they are visible to other users within the Service.
The use of Public Content is based on the Terms of Service and does not involve the processing of additional personal data of the user, such as contact details, date of birth, or real-time location.
How We Share Your Data
We do not sell your personal data. However, we may share certain information in the following cases:
Who We Share Data With
Why We Share It
Service Providers (e.g., Firebase Analytics, hosting providers)
To help us operate, analyze, and improve the Service. These providers only process data on our behalf and according to our instructions.
Legal Authorities
If required by law, we may disclose your data to comply with legal obligations, protect our rights, or respond to lawful requests from law enforcement agencies.
Other Users
When you post Content, it is visible to Friends, Followers, or in Explore mode based on your chosen settings. We do not control how others interact with your Content.
How Long We Keep Your Data
We keep your data only as long as necessary to provide the Service, improve Shape, and comply with legal obligations.
Photos you upload are automatically deleted after 24 hours, unless you remove them earlier. Public Content that has been used in Shape’s promotional or marketing materials prior to its expiration in the application may be stored for a longer period solely for the purpose of carrying out such promotional activities.
Your account data (email, username, display name, date of birth, phone number) is stored as long as your account is active. If you delete your account, we delete your data unless we are required to keep certain information for legal or security reasons.
Location data is linked to your posts and disappears when the post expires. Your real-time location updates continuously but is not stored permanently.
Analytics data and content interactions (e.g., votes, views, or engagement) are stored for a limited time to improve the Service.
Badges earned based on user activity may be displayed in your profile while your account is active. If you delete your account, any associated badges will also be removed.
In some cases, we may need to keep certain data for longer periods (for example, backups, fraud prevention, or compliance with legal requirements).
Your Rights & Choices
Depending on where you live, you may have certain rights over your personal data. We provide ways for you to access, modify, or delete your data within the app or by contacting us.
5.1. Managing Your Data
Right to Access & Copy Your Data – You can request a copy of the personal data we hold about you, including details about how we use it.
Right to Correct Your Data – You can update or correct inaccurate information in your account settings.
Right to Delete Your Data ("Right to be Forgotten") – You can request deletion of your personal data, including your account and Content. Some data may be retained for legal or security reasons. If you delete your account, we will remove your data unless we are required to keep certain information for legal reasons. This process may take up to 14 days.
Right to Restrict Processing – You can request that we temporarily or permanently stop processing some of your personal data in certain circumstances.
Right to Object to Processing – You can object to our processing of your data, particularly if it is based on legitimate interests.
Right to Withdraw Consent – If we process your data based on consent, you can withdraw it at any time. This will not affect processing that has already taken place.
Right to Data Portability – You can request a copy of the personal data you have provided to us (e.g., email, username, profile information) in a structured, machine-readable format. However, we do not offer direct data transfers to other services.
Suspended or Banned Accounts – If your account is permanently suspended due to violations of our Terms of Service, and you choose to delete it, we may retain certain Account Creation Data (e.g., email, phone number, user ID) to prevent permanently banned users from creating new accounts. If you believe your data should not be retained, you can contact us to request a review.
5.2. Controlling How Your Data Is Used
Location Settings – You can disable location access from your device settings, but this may limit how the app functions.
Analytics & Tracking – We do not use your data for advertising, but we collect limited analytics to improve the Service. If you want to opt out of analytics tracking, please contact us.
5.3. Contacting Us About Your Data
If you have questions about your data, want to request access, or need to delete information that is not available in the app settings, contact us at hello@appshape.io.
Security & Data Protection
We take appropriate measures to protect your data and ensure the security of our Service.
Encryption & Secure Storage – We use industry-standard encryption and security measures to protect your data while it is stored and transmitted.
Access Controls – Only authorized personnel and service providers can access your data, and only for purposes described in this Privacy Policy.
Third-Party Security – We work with trusted service providers (e.g., Firebase) that comply with security and data protection standards.
User Responsibility – You are responsible for keeping your account secure. We recommend using a strong password and not sharing your login details.
Data Breach Response – In the event of a security breach that affects your personal data, we will notify you and relevant authorities as required by law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the Service or via email.
By continuing to use Shape after the changes take effect, you agree to the updated Privacy Policy. If you do not agree with the new version, you should stop using the Service.
Data Controller
The controller of your personal data is OneHire sp. z o.o. (NIP: 7712914680), based in Poland.
If you have any questions regarding the processing of your personal data, you can contact us at hello@appshape.io.