Privacy Policy

1. Our Privacy Mission

Most login systems today want to know everything about you—your email, your phone number, and even who your friends are. ShyFormation was built to stop this. Our goal is to provide a "Shy" identity. This means you can prove who you are to a website without giving them your personal contact details. Your data belongs to you, and we are just the vault where you keep it safe.

2. What Data We Collect

We only ask for the information that is absolutely necessary to create a professional identity. We don't track your location, we don't read your messages, and we don't follow you around the internet.

• Profile Details: Your name, profession, and business size are used to build your professional ID.
• Security PIN: Your 4-digit PIN is hidden even from us. We use a math process called hashing to store a code that represents your PIN, but not the PIN itself.
• Contact Info: If you provide a phone number, it stays in our private database and is never shared with anyone.

3. How the "Handshake" Works

When you use ShyFormation to log into another app (like Spotify or Zomato), we use a secure process called a "Handshake." Here is what happens:

The app asks, "Is this a real human?" We check our database and reply, "Yes, this is a verified human with SSUID: A12-3456." That’s it. We do not give them your age, your business size, or your phone number. The app only gets your SSUID and your Name so they can welcome you.

4. Storage in our Private Database

All your details are stored in our private, encrypted database hosted on secure servers (Neon and Render). We use high-level digital locks (AES-256 and TLS encryption) to make sure no one can break in. Only a few top engineers have access to the system, and every single access is recorded and monitored.

5. You Are the Owner

Unlike other big tech companies, we don't think of your data as our property. You have full control:

• You can see all your data in the Control Center.
• You can change your name whenever you need (following the 30-day security rule).
• You can see exactly which apps are currently using your ID and kick them out (Logout) with one click.
• You can ask us to delete your entire identity at any time.

6. No Ads and No Selling

Our business is not based on showing you ads or selling your habits to researchers. We do not share your info with marketing companies, data brokers, or advertisers. Your data stays in our private DB, and that is a promise. We make money by providing secure infrastructure to developers, not by selling our users.

7. Cookies and Tracking

We use very simple technical cookies (LocalStorage) just to keep you logged in. These are not used to track what you buy or what you search for. Once you logout, these tokens are cleared. We don't use third-party tracking scripts that could leak your IP address to other companies.

8. Security Breach Response

Even though we use the best security, we have a plan ready for emergencies. If we ever detect an unauthorized attempt to access our servers, we will notify all users within 24 hours. Because we don't store your actual PINs, your main identity remains safe even in the worst-case scenario.

9. Developer Responsibilities

Every developer who uses our SDK agrees to respect your privacy. They are only allowed to ask for your SSUID. If any app tries to trick you into giving more data, we block that app from our network immediately.

10. Human Support

If you feel your privacy has been violated or you have a question about your data, please talk to us. We don't use robots for support. Send an email to shykageofficial@gmail.com, and a real person from our Delhi office will help you out.