# Privacy Policy — Shucked
**Last updated: July 27, 2026**
Shucked ("we", "our", or "us") is an oyster discovery and tracking app. This Privacy Policy explains what information we collect when you use Shucked, how we use it, and your rights regarding that information.
---
## 1. Information We Collect
### Account information
When you create an account, we collect:
- **Email address** — used to sign in and for account recovery.
- **Password** — stored in hashed form only; we never see your plaintext password.
- **Username and display name** — shown on your public profile and activity.
### Profile information
You may optionally add a short bio to your profile. This is visible to other users.
### Check-in activity
When you log an oyster, we store:
- The oyster variety you selected
- Your star rating (1–5)
- How many you ate
- An optional venue name (text you type)
- Optional tasting notes
- An optional photo you choose to attach
### Location (optional)
If you use the Nearby Oyster Houses feature, we request your device's precise location to find venues near you. Location is used only in the moment you request nearby results and is not stored on our servers.
### Social activity
We record which accounts you follow and any check-ins you like, so we can show you and your followers a personalised activity feed.
### Menu scan photos
If you use the "Scan a Board" feature to photograph an oyster menu, that image is sent to OpenAI's GPT-4o API for analysis. The image is processed in transit and is not stored by us or retained by OpenAI beyond their standard API data retention policy. Only the resulting text (oyster names and descriptions) is saved in Shucked. See OpenAI's Privacy Policy for details of how they handle API data.
---
## 2. Information We Do Not Collect
- Contacts or address book
- Payment information — Shucked is free and processes no payments
- Advertising identifiers
---
## 3. How We Use Your Information
| Purpose | Data used |
|---|---|
| Providing and operating the app | Account, profile, check-in, social data |
| Showing your activity feed and friends' activity | Check-ins, follows, likes |
| Finding nearby oyster venues | Device location (not stored) |
| Recognising oysters from a photo | Menu scan image (transient, not stored) |
| Account security and authentication | Email, hashed password, session tokens |
| Improving the app | Aggregated, anonymised usage patterns |
We do not sell your personal data. We do not use your data to serve advertising.
---
## 4. Third-Party Services
Shucked relies on the following third-party providers to operate:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase (United States) | Database and authentication infrastructure | https://supabase.com/privacy |
| OpenAI (United States) | Menu scan image processing via GPT-4o API — images not retained after the API call completes | https://openai.com/privacy |
| Google Places API | Venue search and nearby results | https://policies.google.com/privacy |
| Expo / EAS | App build and distribution — may collect crash and performance data | https://expo.dev/privacy |
---
## 5. Data Retention
We retain your account and activity data for as long as your account is active. If you delete your account, your profile and check-in history will be permanently removed from our systems within 30 days. Menu scan images are never stored and are discarded immediately after the AI analysis completes.
---
## 6. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to or restrict certain processing
- Data portability (receive your data in a structured format)
- Withdraw consent for optional features (such as location access or push notifications) at any time through your device settings
To exercise any of these rights, email us at the address in Section 8.
---
## 7. Children's Privacy
Shucked is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it.
---
## 8. Contact Us
If you have questions or requests regarding this Privacy Policy, please contact us at:
**Email**: privacy@shuckedapp.net
**Website**: https://shuckedapp.net
---
## 9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the revised policy.
---
© 2026 Shucked. All rights reserved.