Shepherd Digital
Legal

Privacy Policy

Effective date: July 24, 2026  ·  Applies to: shepherddigital.net and Shepherd Digital mobile apps

This policy is written to be genuinely informative, but it's a starting template, not a substitute for review by a licensed attorney familiar with your specific apps, data flows, and the jurisdictions you operate in. Have it reviewed before relying on it for a live product, and update it whenever what you actually collect or share changes.

1. Who we are

This Privacy Policy is issued by Shepherd Digital LLC ("Shepherd Digital," "we," "us," or "our"), a limited liability company registered in Delaware, USA, operating from New Jersey, USA. You can reach us at info@shepherddigital.net.

2. Scope of this policy

This policy covers:

  • Our website at shepherddigital.net; and
  • Our mobile apps (currently: Don Habano), unless a specific app displays its own separate privacy notice in-app or on its store listing, in which case that notice controls for that app.

It does not cover third-party websites, apps, or services we link to or integrate with, which have their own privacy practices.

3. Information we collect

Information you provide

  • Account information — email address and any profile details you provide when creating an account.
  • Authentication data — one-time passcodes sent to your email for sign-in, and device-trust status (whether a device is remembered so it doesn't need to re-verify each time).
  • Communications — anything you send us via the contact form, email, or app support channels.

Information collected automatically

  • Device & usage data — device type, operating system, app version, crash logs, and general usage patterns (e.g. which screens are used), collected via analytics tools.
  • Advertising identifiers — where an app displays ads, mobile ad identifiers (such as Apple's IDFA or Android's Advertising ID) may be collected by our ad-network partners, subject to your platform-level tracking permission (see Advertising & analytics).
  • Website data — standard technical data (IP address, browser type, pages visited) and, only if you accept them, non-essential cookies (see Cookies).

We do not knowingly collect government ID numbers, financial account numbers, precise health data, or biometric identifiers through our apps or website.

4. How we use information

  • To create and secure your account, including sending one-time sign-in codes and recognizing trusted devices.
  • To operate, maintain, and improve our apps and website.
  • To respond to support requests and contact form submissions.
  • To monitor stability and diagnose crashes or bugs.
  • To measure app usage and, where applicable, to serve and measure advertising.
  • To meet legal obligations and enforce our Terms of Service.

If you're in the EEA, UK, or Switzerland, we process your information under one or more of these legal bases:

  • Contract — to provide the account features and functionality you've signed up for.
  • Consent — for non-essential cookies and, where required, advertising identifiers.
  • Legitimate interests — to keep our apps secure, understand usage, and improve our products, balanced against your rights.
  • Legal obligation — where processing is required to comply with the law.

6. Sharing & disclosure

We don't sell your personal information for money. We do share limited information with:

  • Service providers who process data on our behalf, including our authentication/hosting infrastructure (Firebase/Google Cloud), transactional email delivery (Resend), and website hosting (Cloudflare) — each bound by their own data-processing terms.
  • Analytics providers (e.g. Firebase Analytics) to understand app usage and stability.
  • Advertising partners where an app displays ads, so ads can be served and measured. See Advertising & analytics for your opt-out options.
  • Legal & safety — if required to comply with law, respond to legal process, or protect the rights, property, or safety of Shepherd Digital, our users, or others.
  • Business transfers — if we're involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy or a successor policy.

7. Advertising & analytics

Some of our apps use analytics and advertising SDKs (e.g. Firebase Analytics, and ad-network partners such as Google Ads or Meta Audience Network). These providers may collect device identifiers and usage data to personalize and measure ads.

You can limit this:

  • iOS — control App Tracking Transparency permission in Settings → Privacy & Security → Tracking.
  • Android — reset or opt out of your Advertising ID in Settings → Privacy → Ads.
  • Ad-industry opt-outs — visit the Digital Advertising Alliance (optout.aboutads.info) or Network Advertising Initiative (optout.networkadvertising.org) for cross-app/cross-site preferences.
  • California, Colorado, Connecticut, Virginia, and other state residents also have a statutory opt-out — see Your rights & choices.

8. Cookies (website)

Our website uses one strictly-necessary cookie (sd_consent) to remember your cookie preference. We don't load analytics or advertising cookies on this website unless you accept them in the cookie banner. If that changes — for example, if we add website analytics — this section and the banner will be updated to reflect exactly what's set and why.

This is separate from analytics/advertising SDKs inside our mobile apps, which are covered above and don't rely on browser cookies.

9. Children's privacy

Our apps and website are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction, e.g. 16 in parts of the EEA absent parental consent). If we learn we've collected information from a child under 13, we'll delete it. If you believe a child has provided us information, contact us at info@shepherddigital.net.

10. Data retention

We retain personal information for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Account data is generally retained while your account is active and for a limited period afterward; device-trust records expire automatically after 90 days of inactivity.

11. Security

We use technical and organizational measures — including passwordless authentication, encrypted transport, and device-trust expiry — to protect information. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

12. International data transfers

We're based in the United States, and information we collect may be processed or stored in the U.S. or other countries where our service providers operate. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as Standard Contractual Clauses, or on our providers' own certified transfer mechanisms.

13. Your rights & choices

If you're in the EEA, UK, or Switzerland (GDPR / UK GDPR)

You have the right to access, correct, delete, or port your personal information, to restrict or object to certain processing, and to withdraw consent at any time. To exercise these rights, contact info@shepherddigital.net. You also have the right to lodge a complaint with your local data protection authority.

If you're a California resident (CCPA/CPRA)

You have the right to know what personal information we collect, to request deletion or correction, to opt out of the "sale" or "sharing" of personal information (including for cross-context behavioral advertising), to limit use of sensitive personal information, and not to be discriminated against for exercising these rights. To submit a request, email info@shepherddigital.net with "California Privacy Request" in the subject line. To opt out of sharing for advertising purposes specifically, use the device-level controls in Advertising & analytics or contact us directly.

Other U.S. states

If you're a resident of Colorado, Connecticut, Virginia, Utah, or another state with a comprehensive privacy law, you may have similar rights to access, correct, delete, and opt out of targeted advertising or profiling. Contact us to exercise these rights, and we'll respond consistent with the law that applies to you.

Canada

If you're in Canada, you have rights under PIPEDA (or applicable provincial law) to access and request correction of your personal information. Contact us as above.

For any of the above, we may need to verify your identity before acting on a request, and we'll respond within the timeframe required by the applicable law.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where required, provide additional notice (such as an in-app notification).

15. Contact us

Shepherd Digital LLC
Registered in Delaware · Operating from New Jersey, USA
Email: info@shepherddigital.net