Privacy Policy
Last updated: October 31, 2026
Draft: this page is still being finalised before Shioh opens to the public.
Shioh ("we", "us") runs shioh.com, a place to log and share what you read, write, play and practise. This policy explains what we collect, why, and the choices you have. Questions: hello@shioh.com.
What we collect
- Account information: your email address, your password (stored only as a hash by our authentication provider) or the one-time sign-in links we email you, your handle, display name and tagline.
- What you add: reading sessions and books, habits and check-ins, writing, puzzles and game results, DIY projects and their photos, your profile text, avatar and nametag. You choose what is public; everything else is visible only to you.
- Connected services: if you connect Chess.com, Lichess, GitHub, Goodreads, Letterboxd, Duolingo or an RSS feed, we fetch the public activity for the username or feed you give us. If you connect Readwise, we store your Readwise API token encrypted and use it only to import your highlights. You can disconnect at any time in Settings → Connections.
- API tokens you create (for example for an e-reader) are stored hashed.
- Technical information: our web server keeps access logs (IP address, browser, page requested, time) to run the site securely. The logs are rotated by size and old entries are overwritten (we keep about 100 MB in total).
- Cookies and local storage: only the cookies needed to keep you signed in. Some games keep your progress in your browser's local storage until you sign in to save it. We don't use analytics or advertising cookies.
We don't sell your personal information, and we don't show ads.
How we use it
To provide and secure the service: showing your profile and the content you've made public, computing your stats and habit progress, importing activity from services you connected, sending emails you asked for (such as sign-in links), and fixing problems.
AI features. When you use a feature that drafts or suggests something (for example drafting a habit or a puzzle, filling in book details, or recommending papers), we send the text needed for that request to Anthropic, our AI provider, and show you the result. We don't send your content to Anthropic otherwise.
Who we share it with
Only with services that help us run Shioh:
| Service | Purpose |
|---|---|
| Supabase | Database, sign-in, sign-in emails and file storage (photos) |
| Our server host | Running the website and storing nightly backups |
| Anthropic | AI features, only when you use them |
| Google Fonts | Serving the site's fonts (your browser requests them from Google) |
Public profiles can embed content from other sites (for example Manifold prediction markets); viewing it loads that content from the other site. We also disclose information if the law requires it, or to protect people's safety or our rights.
How long we keep it
Until you delete it or your account. Deleted data can remain in our nightly database backups for up to 14 days before it is overwritten.
Your choices and rights
- See, change and delete your content, and choose what's public, at any time in the app.
- To export your data or delete your account, email hello@shioh.com from your account's address. We'll do it within 30 days (deletion removes your data from the live service right away and from backups within 14 days).
- Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have rights to access, correct, delete, restrict or port your data, and to object to some uses. Email us and we'll respond within 30 days. You can also complain to your local data protection authority.
Children
Shioh isn't for children under 13 (16 in the EU and UK). If you believe a child has given us information, contact us and we'll delete it.
Security
We use HTTPS, database rules that let only you read your private data, hashed passwords and tokens, and encrypted connection credentials. No system is perfectly secure; if you find a problem, please tell us at hello@shioh.com.
Changes
We'll update this page when our practices change and note the date above. For significant changes we'll tell you in the app or by email.