Shed Happens LLC — Privacy Policy

Effective Date: July 8, 2026 · Last Updated: July 8, 2026

This Privacy Policy explains how Shed Happens LLC ("Shed Happens," "we," "us," or "our") collects, uses, stores, and protects information when you use the Shed Happens mobile application, our websites, and related services (collectively, the "Service").

We built Shed Happens for hunters. We respect that the locations of your hunting spots, sheds, and trail cameras are sensitive personal information, and this policy is written to be honest and direct about what we collect and what we do with it. By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Where We Offer the Service

The Service is offered to users in the United States and Canada. It is not directed to, and we do not knowingly offer it to, residents of the European Economic Area, the United Kingdom, or Switzerland. If you are in Canada, Section 10 explains how Canadian privacy law (including PIPEDA and, for Quebec residents, Law 25) applies.

2. Information We Collect

Information You Provide Directly

• Account information: name, email address, password, optional phone number, and state or province of residence.
• Profile information you choose to add.
• Photos you upload to score antlers or document sheds, sightings, rubs, beds, tracks, and other field observations.
• Pin and waypoint data you import (for example, GPX files from third-party mapping apps).
• Measurements, notes, species selections, scorecard entries, and other content you create.
• Voice input. When you use talk-to-text to enter measurements, we access your microphone (with your permission) to capture your speech for that feature. See Section 4.
• Communications you send us, including support requests.
• Payment information you provide to our payment processors. We do not store full payment card numbers.

Information Collected Automatically

• Photo metadata (EXIF), including GPS coordinates, time, altitude, and camera bearing, when you upload or capture photos.
• Device information: model, operating system, app version, device identifiers, and crash logs.
• Usage data: features used, screens viewed, errors, and approximate session duration.
• Approximate location derived from your IP address.

Sensitive Personal Information

We treat the precise GPS coordinates of your hunting locations, shed finds, glassing spots, trail cameras, and similar field data as sensitive personal information. We collect and process it to provide the Service to you, and we apply the heightened protections described in Section 7. By creating an account and choosing to submit this information, and by granting the in-app location permission, you consent to our collection and processing of it for the purposes described in this policy. You can withdraw consent at any time by deleting the data or your account, which may limit the Service.

Information We Do Not Collect

• We do not collect biometric identifiers such as fingerprints or facial-recognition data.
• We do not access your camera roll, microphone, or location services unless you grant permission for a specific feature (the microphone is used only for talk-to-text).
• We do not knowingly collect personal information from children under 13.

3. How We Use Your Information

• Provide, operate, and maintain the Service.
• Score antlers using our patent-protected AI measurement system, and power Shed Hunter Steve, our AI intelligence engine, which generates insights about your pins, photos, and surrounding terrain.
• Process purchases, subscriptions, and refunds.
• Train, improve, and validate our AI and machine learning models (see Section 4).
• Communicate with you about your account, products, security alerts, and changes.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our End User License Agreement and this policy. Automated processing. Antler scores, Steve insights, and similar outputs are generated by automated systems and are estimates — they are not definitive measurements and are not decisions that produce legal or similarly significant effects on you. If you have questions about an automated output, contact us at chuck@shedhappensllc.com.

4. AI, Machine Learning, and Voice Processing

Shed Happens is an AI-powered platform. To improve our models, we may use for training, validation, and benchmarking: photos you upload; measurements, scorecard data, and species classifications you submit; and reference-card detections and segmentation outputs derived from your photos. When we use your data for training, we:

• Strip GPS coordinates and other identifying EXIF metadata from training datasets.
• Do not associate training images with your name or account in datasets used to train production models.
• Do not share aggregate training datasets with third parties except as described in Section 5.

By creating an account and submitting content, you consent to our use of your content to train and improve our models, as further described in our EULA. If you do not want your content used this way, do not submit it.

Voice / talk-to-text. When you dictate measurements, your speech is converted to text using Apple's Speech Recognition, which may process the audio on your device or on Apple's servers under Apple's own privacy terms. We receive only the resulting text; we do not store an audio recording of your voice.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in the limited circumstances below.

Service Providers

• Cloud hosting and storage (Amazon Web Services).
• Payment processing (Apple App Store, Stripe, RevenueCat).
• Email communications and notifications (email service providers).
• Voice-to-text processing (Apple Speech Recognition).
• Analytics and crash reporting.
• AI processing partners, including Anthropic (Claude API), used to power Shed Hunter Steve. When we send context to AI processors, we send abstracted descriptions (for example, "a pin at approximately 8,200 ft on a south-facing slope") rather than your raw GPS coordinates.

Wildlife Agencies, Researchers, and Conservation Partners (De-Identified, Aggregated Data)

A core part of our mission is contributing to wildlife science and conservation. We may license or provide de-identified, aggregated data — such as regional shed-find density, species-observation trends, and habitat-use statistics — to state, provincial, and federal wildlife and conservation agencies, academic and scientific researchers, and conservation organizations. This data is aggregated so that it cannot reasonably be used to identify you or the precise location of your individual finds. We share only hunt-unit-level or broader aggregates — never individual pins, coordinates, precise dates, tags, or identities. A count published for a hunt unit is exactly that: a count for the whole unit, however small — we do not report anything finer than a hunt unit, so there is nothing more precise to withhold. You can see the exact same aggregate view the public and our agency partners see in our Public Transparency Scoreboard.

Our De-Identification Commitment

Where we maintain, use, or share information in de-identified or aggregated form, we commit to: (a) maintaining and using it only in de-identified form; (b) not attempting to re-identify it; and (c) contractually requiring recipients not to re-identify it.

Legal Compliance and Safety

We may disclose information if we reasonably believe it is necessary to comply with legal process or a verified law-enforcement request, or to enforce our agreements, prevent fraud, or protect the rights, property, or safety of Shed Happens, our users, or others.

Business Transfers

In a merger, acquisition, sale of assets, financing, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

6. Categories of Personal Information (California residents)

In the past 12 months we have collected the categories below. We have not sold personal information and have not shared it for cross-context behavioral advertising.

We retain each category for the periods described in Section 11.

7. How We Protect Your Information

• GPS coordinates of your pins are encrypted at rest using per-user encryption keys derived from a server-side master key.
• Hashed coordinate references use SHA-256 with a server-side salt and are not reversible.
• Decrypted coordinates are processed in memory only and are not written to disk, logs, or analytics events.
• All traffic between the app and our servers is encrypted in transit using HTTPS/TLS.
• Access to production systems is limited to authorized personnel.

No system is perfectly secure. We cannot guarantee that your information will never be accessed without authorization, and you use the Service at your own risk. If we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.

8. Privacy-First Photo Handling

When you capture photos with the in-app camera, we save the location metadata to your private account so that Shed Happens and Steve can use it for you. Before that photo is uploaded or otherwise leaves your device, we strip the GPS coordinates and other identifying EXIF metadata from the image file itself, so your precise locations are not embedded in a photo you might later save or share. If you import photos from your camera roll or other apps, those may already have metadata modified by other software.

9. Your Rights and Choices

Everyone

• Review and edit your account information in the app.
• Delete individual pins, photos, or scorecards.
• Delete your account and associated personal data through the in-app account-deletion flow (residual encrypted backups are purged within 90 days — see Section 11).
• Unsubscribe from marketing emails at any time; we will still send transactional account, purchase, and security messages.

U.S. State Privacy Rights (California, Colorado, Connecticut, Utah, Virginia, and other states with comprehensive privacy laws)

Depending on your state, you may have the right to: confirm whether we process your personal information and access it; correct inaccuracies; delete it; obtain a portable copy; and opt out of targeted advertising, sale, or certain profiling. You will not be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising. We honor recognized opt-out preference signals, including Global Privacy Control (GPC), where required by law. You may use an authorized agent to submit a request on your behalf. How to exercise your rights: email chuck@shedhappensllc.com, or use the in-app account controls to edit or delete your information. We will verify your identity before acting on access, correction, or deletion requests, and will respond within the time your law requires (generally 45 days, with one permitted extension). If we deny your request, you may appeal by replying to our decision; if we deny the appeal, you may contact your state Attorney General.

10. Canada (PIPEDA and Quebec Law 25)

If you are in Canada, we handle your personal information in accordance with PIPEDA and applicable provincial law. You may access and correct your personal information and withdraw consent (which may limit the Service). Your information is stored and processed in the United States; by using the Service, you consent to this cross-border transfer, and you understand that U.S. courts, law enforcement, and regulatory authorities may be able to access it under U.S. law. To exercise your rights or raise a concern, contact our privacy officer (Section 14). You may also complain to the Office of the Privacy Commissioner of Canada.

Quebec (Law 25). In addition to the above, Quebec residents may request data portability and de-indexing, and have protections regarding automated processing and cross-border transfers. Our automated outputs (antler scores, Steve insights) are estimates, not decisions with legal effect; you may contact our privacy officer to ask how an output was produced or to request human review. Our designated Person Responsible for the Protection of Personal Information is Chuck McFarland, chuck@shedhappensllc.com.

11. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account:

• Personal data is removed from active production systems within 30 days.
• Encrypted backups are purged within 90 days.
• Content that has already been incorporated into AI training datasets or trained models is retained in de-identified form and is not deleted, consistent with the content license in our EULA. De-identified, aggregated data may be retained indefinitely for research, conservation, and model improvement.

12. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided us information, contact chuck@shedhappensllc.com and we will delete it. If you are 13–17 (or under the age of majority where you live), you may use the Service only with a parent or guardian who accepts this policy and our EULA on your behalf. We do not sell or share personal information, including that of minors.

13. Changes to This Policy

We may update this policy from time to time. For material changes we will notify you in the app, by email, or by posting a notice on shedhappensllc.com. The Effective Date reflects the latest change; your continued use after it constitutes acceptance.

14. Contact Us

Shed Happens LLC — Privacy Attn: Chuck McFarland, Person Responsible for the Protection of Personal Information Email: chuck@shedhappensllc.com · Web: shedhappensllc.com