Privacy Policy

Last Updated: February 17, 2026 · Effective: February 17, 2026

Introduction

LeaderShift provides confidential AI-powered peer support and professional development for senior public safety leaders. We take your privacy seriously and are committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, who we share it with, your rights and choices, and how to contact us.

By using LeaderShift, you agree to this Privacy Policy.

1. Information We Collect

A. Information You Provide

B. Information Automatically Collected

• Usage Data (Stored Locally): Conversation timestamps and number of messages per session. This data is stored on your device only and is not transmitted to our servers.
• Error Reports (Debug Builds Only): App version may be included in error reports to help us fix issues. Error logs are collected in debug/simulator builds only and are not automatically collected in production.

2. How We Use Your Information

Provide Services: Authenticate via SMS, send messages to Anthropic's Claude API for AI-powered peer support, adapt guidance to your rank, store conversations encrypted on your device.

Improve Services: Analyze usage patterns (aggregated, anonymous), fix bugs, develop new features.

Security & Compliance: Detect and prevent abuse, respond to legal requests, ensure reliability.

2b. In-App Feedback Collection

LeaderShift may prompt you to provide feedback about your experience.

What We Collect: Star ratings, thumbs up/down on responses, optional text feedback (200 characters max), usage milestones, professional impact assessments.

How It Works: All feedback is stored encrypted on your device until you choose to send it. You control when feedback is shared. Each prompt includes explicit opt-in. You can permanently dismiss individual feedback types (milestone surveys, impact surveys) by tapping "Not Now" or "Skip."

How We Use It: Improve support quality, identify bugs, prioritize features, measure impact.

Feedback is not shared with third parties, not linked to your conversations, and only aggregated anonymous statistics are used publicly.

3. How We Share Your Information

A. Service Providers

B. Legal Requirements

We may disclose your information if required by law: court orders, subpoenas, law enforcement requests with valid legal process, or to prevent imminent harm.

If we receive a legal request, we will notify you (unless legally prohibited), challenge overly broad requests, and provide only the minimum information required.

C. Business Transfers

If LeaderShift is acquired or merged, your information may be transferred. You will be notified via email or app notification.

4. Data Storage & Security

On Your Device

• All conversations encrypted with AES-256-GCM
• Encryption key stored in iOS Secure Enclave (Keychain)
• Database excluded from iCloud backup
• Delete individual conversations anytime or delete the entire app to erase all local data

In Transit

• TLS encryption for all network requests

On Our Servers

• We do not store conversation content on our servers
• IP address in Cloudflare logs: real-time only, not persisted
• Error logs: auto-deleted after 7 days (metadata only)

5. Data Retention

Data Type	Retention	Location
Conversations	Until you delete	Your device
Phone number	Until account deletion	Supabase
Error logs	7 days	Our servers
Subscription data	Until account deletion	RevenueCat
Anthropic data	Per their policy	Anthropic servers

We cannot retroactively delete data from third-party logs. Deleted conversations on your device are irrecoverable. Account deletion does not delete past messages sent to Anthropic.

6. Your Rights & Choices

• Access: Request what data we have about you (minimal)
• Delete Conversations: Tap and hold any conversation, then Delete
• Delete Account: Settings, then Delete Account (removes phone number from Supabase and local data)
• Account deletion does not remove data from Anthropic (contact them directly)

7. Children's Privacy

LeaderShift is not for users under 18. We do not knowingly collect information from children. If we discover we have, we will delete it immediately. Contact support@leadershift.app if you believe a child provided information to us.

8. State-Specific Privacy Rights

California Residents (CCPA / CPRA)

• Right to Know: What personal information we collect
• Right to Delete: Request deletion (with limitations above)
• Right to Opt-Out of Sale: We don't sell your data
• Right to Non-Discrimination: We won't treat you differently for exercising rights

Exercise rights via email: support@leadershift.app.

European Union Residents (GDPR)

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: "Right to be forgotten"
• Portability: Receive data in machine-readable format
• Object: Object to certain processing
• Restrict: Limit how we use your data

Data transfers to the United States are protected by Standard Contractual Clauses (SCCs). Exercise rights at support@leadershift.app (response time: 30 days).

Other States

Nevada, Virginia, Colorado, Connecticut, Utah residents have similar rights. Contact support@leadershift.app.

9. International Users

LeaderShift is based in the United States. If you use LeaderShift from outside the US, your data will be transferred to and processed in the US. US privacy laws may differ from your country. By using LeaderShift, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in practices, legal requirements, or new features. Material changes will receive 30 days advance notice via email or in-app notification.

11. Security Safeguards

• AES-256-GCM encryption
• TLS encryption for network requests
• iOS Keychain for key storage
• Database excluded from iCloud backup
• Limited employee access, regular security audits, incident response plan

No system is 100% secure. While we use industry-standard protections, we cannot guarantee absolute security.

12. What This App Is NOT

13. Crisis Resources

LeaderShift is not monitored 24/7 and is not for crisis intervention.

14. Contact Us

Privacy Questions or Requests: support@leadershift.app

Mail: LeaderShift, Inc.
30 North Gould Street, #49085
Sheridan, WY 82801

We aim to respond within 7 business days.

15. Plain Language Summary