SHRP Privacy Policy

Last updated: 1 October 2026. Developer: Luke J. Schenker, operating as Schenker Design, Gibsonia, Pennsylvania, USA. Contact: luke@anew.so.

Beta notice. SHRP is beta software, open to the public. This policy describes how SHRP handles your data today, and it will change as SHRP develops.

1. The short version

SHRP helps you understand and reduce the time you spend on social media, and lets people encourage each other along the way. Two things are worth knowing up front:

Some of your information is public by design. If you choose a username, a fixed public subset of your data (your username, your daily total social-media screentime, your medal, streak, percentile, your usage trends, your typical daily patterns, and your time zone, gender and country as described in section 4) becomes visible to anyone, including people who don't have an account (or, if you choose Friends Only, only to the people you follow and the people in your groups). We explain this in section 4.
Your detailed record is private. Your phone keeps a detailed log of when you used each tracked social media app. Once you claim a username, we sync summaries of your usage to our servers to run the social features and to understand and improve the product. If you join the Co-Researcher Program (new users are asked during setup; beta testers who joined before that question existed were briefed in person and are in by default; anyone can join or leave anytime in Settings → Co-Researcher Program), we also copy the detailed log, for the tracked social media apps only, into a private research area on our server that only we can read, so we can learn whether SHRP actually helps people use social media less. If you leave, we stop copying from then on. All of it is tied to a random ID, never your name, and we never share or sell it.

2. Who we are

SHRP is made by Luke J. Schenker, a solo developer operating as the sole proprietorship "Schenker Design," based in Gibsonia, Pennsylvania, USA. For any privacy question or request, email luke@anew.so.

3. What data we collect

Data	What it is	Where it comes from	Where it lives
Screentime	Your daily total social-media screentime, derived scores (medal tier, streak, global percentile, trends, daily patterns), and, on Android, a per-app breakdown (minutes per app).	Derived on your device: on Android from UsageStats, which you grant via the system Usage Access permission; on iPhone from Apple's Screen Time, which you grant when SHRP asks for Screen Time access. On iPhone, per-app detail never leaves your phone.	Your detailed log (the start and end time of each session on a tracked app) is kept on your device. If you are in the Co-Researcher Program, a copy is sent daily to a private research area on our server (Supabase) that only we can read, for research on how people use social media and whether SHRP helps them use it less. The research copy holds only the tracked social media apps: your sessions and daily and hourly totals for them, the daily baseline you entered during setup (iPhone), and basic context (your time zone, app version, platform, and when you started using SHRP). It holds no name, username, email, messages, or contacts. On Android, it includes the usage history your phone already held from before you installed SHRP, and someone who joins later has their earlier history sent when they join. If you are not in the program, none of this is sent. After you claim a username, summaries sync to our server (Supabase): daily totals, trends, and patterns (public), and, on Android, a per-app breakdown (kept privately on our side, used to understand and improve the product).
Profile	Your username, an optional display name (your real name, if you enter it), an optional avatar image, optional gender, optional country.	You enter all of these yourself, except your country. If you turn on "Show country publicly," the app asks for your permission, reads your phone's approximate location, and uses it to work out your country. While the setting stays on, it re-checks at most once a day while the app is open (and only if you still allow location access), so your flag stays current when you travel. Only the country is saved; your location is not stored or sent to our servers. If you turn the setting off, your country is removed from your public profile; your phone keeps the last country it found.	Server (Supabase). Username, avatar, and medal are public; display name is relationship-gated (see section 4).
Messages	Preset messages of encouragement you send or receive. Messages are preset-only: there is no free-text messaging between users.	You pick from a preset list.	Server (Supabase). Private between you and the person you send to or receive from — no other user can see them.
Feedback	Feedback you choose to submit (a Fix / Idea / Anything note), an optional rating, and any screenshot you attach.	You submit it.	Server (Supabase), in a private store only we can read.
Safety records	Who you have blocked, the reports you file (who you reported and when), reports other users file about you, and when you agreed to the Terms of Service (and which version).	Created when you block someone, report someone, or agree to the Terms.	Server (Supabase). Never shown to other users; a reported person is not told who reported them. When you delete your account, your blocks and your Terms agreement are deleted; reports are kept as safety records, with the link to your account removed.
Analytics events	Pseudonymous records of in-app actions (screens viewed, buttons pressed, messages offered or sent, follows), used to understand how the app is used. For messages, this records which preset was offered or sent. PostHog also estimates an approximate location (city and country) from your IP address, and holds your platform, app version and time zone, plus your gender and country if you set them. A few events carry a daily screentime figure, used to check the app's accuracy. Never your name, email, phone, or your detailed usage log.	Generated as you use the app.	PostHog (Cloud EU).
Crash / error reports	Diagnostic data when the app crashes or errors, including device and app-version info and a stack trace.	Generated automatically on a crash.	Sentry (EU/Frankfurt). Scrubbed of personal data.
Push token	A device notification token, so we can send you notifications.	Issued by your device / Expo, with Google (FCM) on Android and Apple (APNs) on iPhone.	Expo, Google and Apple push infrastructure; associated with your account on our server.

We do not collect an email address or phone number during the beta. Account recovery fields exist in the design but are turned off for the beta.

4. How your data is shared: the three visibility tiers

SHRP sorts your data into three tiers. Which tier a piece of data is in determines who can see it.

Public: anyone can see it, including people without an account. Your username, daily total social-media screentime, medals, streak, global percentile, your usage trend charts, and your typical daily-usage patterns. The app also makes your time zone readable, along with your gender and the country you show if you set them, and on Android your most-used tracked app of the day: it uses these to word the messages others can send you and to show your flag. This public subset is the same for every user, and it's visible on the web to logged-out visitors too (unless you choose Friends Only, below). This is a deliberate design choice: SHRP is meant to be browsable and comparable without an account. You only enter the public tier when you claim a username; before that, nothing about you is visible to other users. You can narrow this in Settings → Account & Discovery by choosing Friends Only. Then only the people you follow and the people in your groups can see this data; everyone else sees only your username and profile image. After you switch, other people's phones may show data they had already loaded for up to about a day.
Relationship-gated: only people you follow can see it. Right now this is your display name (real name), if you enter one. Here, following works the opposite way from most social apps: following someone lets them see your relationship-gated data. Following is an act of sharing more of yourself with that person, not a request to see their content. To let someone see your real name, you follow them. If you choose Friends Only, the people you follow and the people in your groups can also see your public-tier data.
Private from other users. Your per-app breakdown (apart from your most-used tracked app of the day, on Android) and your inbox of received messages are never visible to other users. On Android, your per-app breakdown does sync to our servers, where we use it pseudonymously to understand and improve the product (see section 6), and it is never shown to anyone else. On iPhone, per-app detail never leaves your phone. Your detailed usage log is never shown to other users either. If you are in the Co-Researcher Program, its pseudonymized research copy is readable only by us (see section 3).

5. The tools we use to run SHRP

SHRP runs on a few external services. They only ever handle your data to make the app work, under their own privacy and security commitments, and they don't pass it on to anyone else. We do not sell your data, and we do not give it to advertisers or data brokers.

Service	What it does for SHRP	What it handles for us	Location
Supabase	Our database, file storage, and server functions: the app's operational backend.	Your profile, sent/received messages, feedback, and synced screentime summaries (daily totals, patterns, and, on Android, per-app detail); for co-researchers, the research copy of the usage log.	United States (us-east-1).
PostHog	Product analytics: how the app is used, in aggregate.	Pseudonymous behavioral events (no name, email, phone, message text, or detailed usage log).	European Union (Cloud EU).
Sentry	Crash and error monitoring.	Diagnostic crash/error data, scrubbed of personal data.	European Union (EU/Frankfurt).
Expo, Google (FCM) and Apple (APNs)	Delivers push notifications, and silent background wake-ups that let the app update your totals.	Your device push token and the notification content.	Google infrastructure (Android) and Apple infrastructure (iPhone).

Note on data location: our main database is in the US; our analytics and crash-reporting are in the EU.

6. How we use your data

To provide the app: show your screentime, medals, feeds, and messages, and let people encourage each other.
To understand and improve the product: we collect data about how you use SHRP, plus crash diagnostics and any feedback you send, all tied to a random ID and never to your name. It is pseudonymized, and we never share or sell it.
To learn from your feedback: read what you submit so we can improve SHRP.
For research, only if you are in the Co-Researcher Program: to study how people use social media and whether SHRP helps them use it less. We may share what we learn in aggregate (for example, in the quarterly research summaries we send co-researchers), never your individual data.
We do not use your data for advertising, and we do not sell it.

7. Analytics

Our analytics (PostHog) records pseudonymous events tied to a random identifier, never to your name, email, phone, message text, or your detailed usage log. We use it to understand how the app is used so we can improve it.

8. How long we keep data, and deletion

On your device: detailed screentime stays until you delete the app or clear its data.
On our servers: we keep your account data while your account exists.
Leaving the Co-Researcher Program. You can leave anytime in Settings → Co-Researcher Program. From then on, nothing more is copied to the research area (an upload already in progress finishes). What was already copied stays in the research area, pseudonymized, as described below. You can rejoin anytime.
Deleting your account. The app has a Delete my account and info control (Settings → Account & Discovery). When you use it, we permanently delete your account and the data tied to it in our operational database, and the app wipes its local data (your on-device screentime history and app preferences) from your phone. Specifically:
- Your profile (username, display name, avatar, and any optional fields) and your synced screentime totals and scores are deleted.
- Your follow relationships are removed, along with the messages you received, your group memberships and invitations, your block list, your Terms agreement record, and your push token and notification settings.
- Messages you have sent are deleted, including the copies that appear in other people's inboxes. A preset message you sent is treated as no longer yours once your account is gone, so it is removed rather than reassigned.
- If you are the host of a group, deleting your account deletes that group, including its membership and invitations, for all of its members. (If you want to keep the group, transfer or wind it down before deleting your account. We expect to make group ownership transferable in a future version.)
Feedback you submitted is kept, but de-identified. If you sent us feedback (a Fix / Idea / Anything note, an optional rating, or a screenshot), we unlink it from your account and retain it in our private store so we can keep learning from it to improve SHRP. Once unlinked, it is no longer tied to your account record, though any screenshots stay in our private store under an internal ID.
Reports are kept as safety records. Reports you filed, and reports other users filed about you, stay on record with the link to your account removed.
The research copy of your usage log is kept, pseudonymized. If you were in the Co-Researcher Program, the copy of your detailed log in our private research area (see section 3) is not deleted with your account. It stays tied only to a random ID, never your name, is readable only by us, and is used only for the research described in section 6. We never share or sell it.
Analytics and crash-reporting records are retained in de-identified form. Our analytics (PostHog) and crash reports (Sentry) were never linked to your name, email, or phone, only to a random identifier. On deletion we stop associating new data with you and clear that identifier on your device; the historical, de-identified records are retained to understand the product in aggregate. Aggregated or anonymized statistics that can no longer identify you may be kept indefinitely.
Backups. Deleted data may persist in routine encrypted backups of our database for up to 30 days, after which those backups rotate out.

9. Security

We protect your data with row-level access controls on our database (so each user can only read what they're allowed to), encryption of sensitive data on your device, and secrets kept off the app.

10. Children

SHRP is not directed to children. You must be 18 or older to use SHRP. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.

11. Changes to this policy

SHRP is in active development, and this policy will change. We'll update the "last updated" date and post changes here.

12. Contact

Questions or requests (including access or deletion): luke@anew.so.