Last updated 9 August 2026

Privacy Policy

SHPEEL is operated by SoulToSoul (“we”). This policy explains what we collect, why, and what you can make us delete. It applies to the SHPEEL iOS app and shpeel.me.

What we collect

  • Your phone number. Used only to sign you in and to stop one person flooding the feed. Never shown to anyone else, never sold.
  • Your display name and the country you sell in, both public on your Shpeel.
  • Your video and its thumbnail. Recorded in the app, stored on Cloudflare R2 and served over a CDN. Public once your listing is live.
  • Your destination link and its domain, public on your Shpeel card.
  • Swipe events: which listing, which direction, how long it was watched. Attached to your account if you are signed in, or to an anonymous device-scoped id if you are not.
  • Basic device and app data: app version, platform, crash information.

We do not collect contacts, precise location, health data, or advertising identifiers. There is no ad network in SHPEEL.

Why we’re allowed to

Under the GDPR our lawful bases are: contract (we cannot run an account or publish your Shpeel without your number, name, video and link); legitimate interests (measuring the feed, preventing abuse and keeping the platform safe); and consent (camera and microphone access, which iOS asks you for and you can withdraw in Settings at any time).

Who processes it

  • Twilio: sends your one-time login code.
  • Cloudflare (R2 + CDN): stores and serves videos and thumbnails.
  • OpenAI: receives sampled video frames for automated safety checks only.
  • Our hosting and database provider: runs the API and stores account records.

Some of these process data outside the EEA under Standard Contractual Clauses. We do not sell personal data to anyone, and we never will.

Outbound links

Swiping right opens a seller’s own site with utm_source=shpeel&utm_medium=swipe appended, so the seller can see the traffic came from us. Everything that happens on their site is governed by their privacy policy, not ours. SHPEEL is not a party to any transaction.

How long we keep it

  • Account records and listings: until you delete them.
  • Video files: deleted from storage on re-record, listing deletion, or account deletion.
  • Swipe events: retained for product analytics and stripped of any link to you when you delete your account.
  • Login codes: minutes.

Deleting everything

Settings → Delete account. Your listings are removed, your video files are deleted from storage, your phone number is purged and your swipe history is anonymised. Gone is gone. You can also email us and we’ll do it.

Your rights

Access, correction, deletion, portability, objection, and the right to complain to your data protection authority (in Portugal, the CNPD). Ask us at hey@shpeel.me.

Age

SHPEEL is rated 17+ and is not for children.

Changes

If this policy changes materially we’ll say so in the app before the change takes effect.