This Privacy Policy describes how Shakeout Labs Inc. (“Shakeout,” “we,” “us,” or “our”), an Ontario corporation, collects, uses, discloses, and protects your personal information when you use the Shakeout mobile application, website (shakeoutco.com), and all related services (the “Service”).
By creating an account or using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Certain information is required to provide the Service; if you choose not to provide it or withdraw your consent for its processing, the Service may not function properly or may become unavailable to you. If you do not agree to this Privacy Policy, please do not use the Service.
| Data Type | Examples | Required / Optional |
|---|---|---|
| Account information | Name, email address, profile photo | Required |
| Running preferences | Preferred distance, pace range, activity types | Optional |
| Club content | Event descriptions, routes, announcements, photos | Optional |
| Messages | Group chat messages, direct messages | Optional |
| Waiver signatures | Acceptance timestamp, IP address, user agent, waiver version | Required (if club requires a waiver) |
For clarity, we do not collect:
We use your personal information for the following purposes:
We do not sell your personal information to third parties. We share your information only in the following circumstances:
We share information with third-party service providers who assist us in operating the Service. These providers process your data only on our behalf and in accordance with our instructions:
| Provider | Purpose | Data Processed |
|---|---|---|
| Supabase | Backend infrastructure, database, and in-app messaging | Account data, messages, club data, event data, waiver records |
| Mapbox | Route mapping and location visualization | Map interaction data (route coordinates, map views) |
| Google Analytics | Usage analytics and product improvement | Anonymized usage data, device info, interaction patterns (IP anonymization enabled) |
| Sentry | Error monitoring and crash reporting | Crash logs, device info, error traces (not linked to user identity) |
| RevenueCat | Subscription and payment management | Anonymous user identifier, subscription status |
| Expo | Push notification delivery | Device push token, notification content |
We may add, modify, or remove service providers as the Service evolves. This table reflects our current providers as of the “Last Updated” date above.
We may disclose your information if required to do so by law or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the safety of our users or the public.
If Shakeout is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.
Your data is stored on servers operated by our infrastructure provider (Supabase) and may be located in Canada, the United States, or other jurisdictions. By using the Service, you consent to the transfer and storage of your data in these locations.
We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL) and at rest, secure authentication protocols, and access controls. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within thirty (30) days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).
Messages in group chats may persist after your account deletion to preserve conversation integrity for other users, but your name will be replaced with “Deleted User.”
Waiver signature records (including acceptance timestamp, waiver version, and the fact of your acceptance) may be retained beyond account deletion to the extent required by the club organizer's legal or regulatory obligations. These records serve as evidence of your informed consent to participate in club activities and may be necessary for the defense of legal claims.
In the event of a data breach that creates a real risk of significant harm to affected individuals, we will notify affected users and applicable regulatory authorities (including the Office of the Privacy Commissioner of Canada) as required by applicable law, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We will provide notification as promptly as is reasonable in the circumstances.
Regardless of your location, you have the right to:
To exercise any of these rights, contact us at privacy@shakeoutco.com. We will respond within thirty (30) days.
If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access and correct your personal information. We collect, use, and disclose your personal information only with your knowledge and consent, and only for purposes that a reasonable person would consider appropriate in the circumstances.
You may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe your privacy rights have been violated.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale of your personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights. To submit a verifiable consumer request, contact privacy@shakeoutco.com.
Other US State Privacy Laws
If you reside in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with comprehensive consumer privacy legislation, you may have additional rights including the right to access, correct, delete, and opt out of targeted advertising. Contact privacy@shakeoutco.com to exercise these rights.
If you are located in the EEA, UK, or Switzerland, we process your personal data on the following legal bases: consent (which you may withdraw at any time), performance of a contract (our Terms of Service), and legitimate interests (service improvement and security).
You have the right to access, rectify, erase, restrict processing, data portability, and to object to processing. You also have the right to lodge a complaint with your local data protection authority.
Data transfers to Canada are supported by the European Commission's adequacy decision for Canada. Where applicable, we use Standard Contractual Clauses for transfers to other jurisdictions.
If you are located in a jurisdiction with data protection laws that provide you with rights beyond those listed above, we will honor those rights to the extent required by applicable law. Contact privacy@shakeoutco.com for assistance.
The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@shakeoutco.com.
Our mobile application does not use browser cookies. Our website (shakeoutco.com) may use essential cookies for functionality purposes (such as session management) and analytics cookies to understand how visitors interact with our site. We do not use advertising cookies or cross-site tracking.
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our website.
The Service may contain links to third-party websites, apps, or services that are not operated by us (including Mapbox and app stores). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service and updating the “Last Updated” date. For significant changes, we may provide additional notice via email or in-app notification. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy.
If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal information, please contact us at:
Shakeout Labs Inc.
Toronto, Ontario, Canada
Privacy Inquiries: privacy@shakeoutco.com
General Support: support@shakeoutco.com
Website: shakeoutco.com
For Canadian privacy complaints, you may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.