1.Overview
This Privacy Policy explains how Shifta, operated by Spota Labs, Inc., collects, uses, stores, and protects your information. It is designed to be clear, transparent, and respectful of your privacy.
It covers the Shifta app only. The SpotaLabs website and each of our other apps have their own privacy policies.
2.Information We Collect
Account Info:
- Email address
- Username / display name
- Profile photo (optional)
Listing Data:
- Make, model, trim, year, mileage, condition and photos
- VIN, title status and history records
- Your general location and what you'd swap for
Verification (optional):
- If you choose to get verified: ID document, selfie, or ownership documents, processed with our verification partner
Messages & Swaps:
- Messages, offers, agreed terms and meetup details
- Ratings and reports
Usage Data:
- App actions (e.g. features used, screens viewed)
- Device info (e.g. device model, OS version, app version)
- Crash reports and performance data
- IP address and timestamps (for security)
Purchases:
- Subscription status from Apple or Google (we never receive your full card details)
3.How We Use Your Data
| Purpose | Examples |
|---|---|
| App functionality | To show your listing, find reciprocal matches and run messaging |
| Values & history | To estimate market values and show vehicle history from data providers |
| Trust | To verify owners and vehicles |
| Analytics | To improve product performance and user experience |
| Safety & moderation | To detect fraud, abuse, or inappropriate content |
| Support & communication | To answer your requests and send important service messages |
Automated analysis:
Shifta uses automated systems to match and rank swaps, estimate vehicle values from market data, and detect scams, spam and prohibited content in listings and messages.
4.Data Sharing
Shifta does not sell your personal data.
We only share limited data with:
- Cloud hosting, storage and authentication providers
- Analytics and crash reporting tools
- Apple and Google, for subscriptions purchased through their stores
- Identity verification providers (for verified owners)
- Vehicle history and valuation data providers
- Moderation services (if needed)
- Authorities, when required by law or to protect the safety of our users or the public
We never share your location with third parties for advertising or profiling.
What other users can see:
- Your listing: photos, vehicle details, general location and what you're looking for
- Your VIN and history information, to people you match with
- Your profile name, photo, verification status and ratings
- Messages you send, to the people you send them to
5.Location & Device Permissions
- Location is used to find matches near you and show distances
- Other users only see your general area (city or region), never your exact location
- Shifta does not track your location in the background
- Camera - to photograph your car and scan its VIN
- Photos - to add existing photos to your listing
- Notifications - to tell you about new matches, messages and swap updates
You can change permissions at any time in your device settings. Some features won't work without them.
6.Data Retention
- Basic account data is stored until your account is deleted
- Listings are stored until you remove them or delete your account
- Verification records are kept by our verification partner for as long as the law requires
- Request for data deletion can be made in the app or via email: privacy@spotalabs.app. See Delete Your Data for details
7.Your Rights
Depending on your location, you may have the right to:
- Access or export your data
- Request corrections or deletion
- Withdraw consent for certain types of data use
- Opt out of the sale or sharing of personal data (we don't sell or share it for advertising)
- File a complaint with a regulatory authority
To exercise any of these rights, email privacy@spotalabs.app.
8.Children
Shifta is not intended for anyone under 18, and we don't knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact privacy@spotalabs.app and we'll delete it.
10.Security Practices
- Data is encrypted in transit (HTTPS) and stored securely
- Access to personal data is restricted to the people who need it
- Moderation tools are in place to protect users from abuse
11.Contact
For privacy concerns or data requests: