Privacy Policy

Last updated: June 3rd, 2026 · Version: DRAFT v0.1

This Privacy Policy applies to the SHIFT mobile app, our website at www.shiftapp.nyc, and the related tasks, recordings, and features we provide (together, the "Services"), operated by SHIFT APP US LLC ("Shift," "we," "us").

1. Introduction

This Privacy Policy explains how SHIFT APP US LLC collects, uses, shares, and protects information when you use the SHIFT app, visit our website, create an account, book a task, work as an operator, or otherwise interact with our Services. By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

Who is responsible for your information: SHIFT APP US LLC is the company responsible for personal information collected through the Services and determines the purposes and means of processing it. We provide de-identified datasets to our group company, MicroAGI, and license them to customers. MicroAGI and those customers act as separate, independent recipients and controllers of the data they receive and decide their own purposes for it; they are not joint controllers with Shift.

2. Who this policy covers

• App and website users — anyone who uses the SHIFT app or browses our website.
• Clients and households — people who book a task and anyone present where a task is recorded.
• Operators — individuals who perform recorded tasks whether directly for Shift or as personnel of a Provider on the platform.

3. Information we collect

3.1 Information you provide

• Account data: name, email, phone, password, and (for operators) information needed for payment, identity, residency, and tax compliance.
• Booking data: service address, task details, and scheduling information.
• Communications: messages you send through contact forms, support requests, or email.
• SMS opt-in: your mobile number if you choose to receive text messages (see Section 9).

3.2 Recordings (service data)

When a task is performed, our operator records a session consisting of first-person (egocentric) video, motion and sensor data (IMU), and a metadata file that includes GPS location, the operator's approximate height, phone model, and camera parameters. These recordings necessarily capture the space where the task takes place — its interior, contents, and layout — and may capture other people who are present. See Section 7 for how recordings are processed, stored, and how you can ask us to remove a session.

3.3 Information collected automatically

When you use the app or website, we and our service providers automatically collect:

• Log and device data: IP address, browser type and version, operating system, mobile device type and identifiers, app version, referring/exit pages, and dates/times of access.
• Usage and app interaction data: pages and screens viewed, features used, links and buttons tapped, time spent, and similar activity, collected through cookies and mobile SDKs (see Section 5).
• Approximate location: derived from your IP address or, with your permission, more precise location from your device (see Section 3.4).

3.4 Permissions you grant in the app

To perform recorded tasks, the SHIFT app asks your permission to access certain features of your device. You can grant or withdraw these at any time in your device settings; withdrawing a permission may stop parts of the Services from working.

• Camera and microphone — to record task sessions.
• Motion and other sensors — to capture device motion and movement data during a task.
• Precise location (GPS) — to associate a session with where it was performed.
• Photos/files and notifications — to upload session files and to send you service and (with opt-in) marketing messages.

4. How we use information

• Operate, maintain, secure, and improve the Website and our services.
• Create, schedule, and perform tasks, and pay operators.
• Create training datasets for AI and robotics and license them to customers (see Section 6).
• Respond to your inquiries and provide support.
• Send service messages and, with your opt-in, marketing messages.
• Detect, prevent, and address fraud, security, and safety issues, and comply with law.

We do not sell your personal information for third-party advertising, and we do not share it for cross-context behavioral advertising.

5. Cookies, SDKs, and analytics

On our website we use cookies and similar technologies, and in our app we use software development kits (SDKs) and mobile identifiers, to operate the Services, remember your preferences, and understand how the Services are used. You can control non-essential cookies through our cookie banner and your browser settings, and you can manage mobile identifiers and tracking through your device settings; blocking some of these may affect how the Services work.

We honor recognized opt-out preference signals (such as Global Privacy Control) where required by law. We use analytics tools, such as Google Analytics configured to anonymize IP addresses, to understand website traffic and app usage.

6. How we share information

• MicroAGI group and customers: recordings are processed into datasets that are transferred to MicroAGI group entities and licensed to customers for AI/robotics development.
• Service providers: payment processors, cloud hosting, analytics, and communications vendors acting on our instructions.
• Legal and safety: where required by law or to protect rights, safety, and property.
• Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets.

International transfer.Recordings and related data are stored and processed on our cloud provider's servers in the European Union (Belgium) from the time of upload, and reduced-identifiability datasets are made available to MicroAGI group entities and customers. This means information collected in the United States is transferred to and processed in the EU.

7. How we handle recordings and your choices

Where recordings are processed and stored

Recordings, together with the related motion and metadata, are transmitted from the operator's device to our cloud service provider using encryption and are stored and processed on servers located in the European Union (Belgium). When a recording is first created and uploaded, it still contains personal information, including images of people and surroundings.

How we reduce identifiability

We use automated tools to reduce the likelihood that an individual can be identified from a recording. These tools blur or mask faces and heads, license plates, screens, identity documents, and payment cards, and we reduce the precision of the location data associated with a session. We apply these measures before a dataset is finalized, and customers receive only this reduced-identifiability version.

We do not represent that recordings are fully or permanently anonymous. The interior of a home and its contents remain part of a recording by design, and such details can sometimes be associated with a person or household. We therefore continue to treat recordings, and the datasets created from them, as personal information that carries a risk of re-identification, and we protect them accordingly.

Who can access recordings

Access to recordings is limited to personnel and service providers who need it to operate, secure, and improve our services. In limited cases — such as reviewing a recording flagged for possible fraud or a policy violation — trained reviewers may access a recording before identifying details have been reduced.

Your choice to remove a session

You may ask us to delete a specific recorded session. We can delete a session at any time before it has been incorporated, in reduced-identifiability form, into a dataset that has been made available to others. After that point, our ability to remove it from datasets already provided to others is limited; we will explain what we can and cannot do and will delete it to the extent technically possible. To make a request, see Section 12.

8. Consent to recording

Where a Service is booked through the platform, recording proceeds only where the Client has consented to it at booking, as a condition of the preferential (free or discounted) price. The Client is responsible for informing, and where required obtaining the agreement of, other adults present, and for ensuring the area does not include spaces or activities that should not be recorded. Where an individual performs and records tasks directly for Shift (an Operator), that individual is informed of the recording and consents to it. In all cases, recordings are limited to the work and its immediate surroundings; minors, intimate or medical situations, and sensitive identifiers must not be recorded; and recording may be paused or stopped at any time. See the Shift Platform Terms, the Service Terms, and the Operator Terms for details.

9. SMS messages

If you opt in, you may receive SMS such as appointment reminders and confirmations, onboarding and account updates, support responses, and (with separate opt-in) promotional messages. Message frequency varies and message/data rates may apply. Reply STOP to cancel or HELP for help. Consent is not a condition of any service. We do not share mobile information with third parties or affiliates for their marketing or promotional purposes.

10. Your privacy rights

Depending on your state of residence, you may have the right to access, correct, or delete your personal information; to know how it is used and shared; to opt out of any "sale" or "share"; to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights. You may use an authorized agent where the law allows.

To exercise a right, contact us using Section 12. We will verify and respond within the timeframes required by applicable law. To remove a recorded session, see Section 7.

11. Data retention, security, and children

Retention: we keep personal information only as long as needed for the purposes in this Policy or as required by law. Unless a longer period is required by law, we apply the following schedule:

Security:recordings and related data are stored and processed on our cloud provider's servers in the European Union (Belgium), with encryption in transit and at rest and access controls aligned to the provider's security standards. We also use monitoring and staff training. No method of transmission or storage is completely secure.

Children: the Services are not directed to children; operators are instructed not to record minors; we do not knowingly collect personal information from children under 13.

12. Changes and how to contact us

We will post material changes here and update the "Last updated" date. For privacy questions or to exercise your rights, contact:

SHIFT APP US LLC — Privacy
3500 South DuPont Highway, Dover, Delaware 19901
us-support@joinshift.ai

© 2026 SHIFT APP US LLC. All rights reserved.