Privacy Policy

Effective 2 November 2026 · Applies to the Shape app for Windows and this website

1. Who we are

Shape is made by X Shape dev, an independent developer ("we", "us"). If you have any question about this policy or your data, email shapexdev@proton.me.

2. Data that stays on your PC

Shape works without an account and without an internet connection for its core features. Everything below is stored only on your computer, in Shape's app data folder, and is never sent to us:

• Tasks and reminders you create.
• Memory: the name you give, facts you ask Shape to remember, birthdays and special dates, chat history, streaks and stats. You can stop memory or erase it in Settings → Memory.
• Pocket: the list of files you drop on Shape. Shape keeps only their location on disk; it doesn't copy, read or upload them. When you let Shape "eat" a file, it goes to the Windows Recycle Bin, where you can restore it.
• Settings, including your look, accessories and any AI API key you enter.
• Calendar links (iCal/Outlook) you add, and the upcoming events fetched from them.
• An app log used to diagnose problems. It records what Shape did, not what you typed.

Sign-in tokens for your account and for Google Calendar are kept in Windows Credential Manager, protected by your Windows login.

What Shape looks at on your PC

To behave like a companion, Shape checks a few things locally, in real time. None of it is stored or sent anywhere:

• Your mouse position and whether a button is pressed, so you can drag, throw and pet Shape.
• The position of the active window, so Shape can walk on its title bar. Shape doesn't read window titles or contents.
• Whether you're presenting, in fullscreen, in Windows Focus mode, or whether an app is using your microphone or camera. Shape uses this only to go quiet during meetings. For that last check it reads the list of running program names, which never leaves your PC.
• How long since you last used the mouse or keyboard, so Shape can nap and install updates while you're away.

Shape hides itself from screenshots and screen sharing by default, so it never shows up in your meetings.

3. Optional account

You can sign in with Google or with an email and password. An account unlocks customising Shape's look, memory and AI settings. Accounts run on Google Firebase (Firebase Authentication and Cloud Firestore, stored in Google Cloud's Mumbai region, India). When you're signed in we store:

• your name and email address, and whether you signed in with Google or email;
• your Shape version and Windows version;
• when you first and last used Shape (updated at most twice a day).

We use this to run your account, to know which app versions are still in use, and to contact you about your account or important changes. Firebase also processes sign-in data such as your IP address to keep accounts secure; see Firebase's privacy information.

When you sign in with Google, Shape asks only for your basic profile (name and email). Google sign-in happens in your own browser, so Shape never sees your Google password.

4. Calendar

Calendar links. If you add an iCal or Outlook calendar link, Shape downloads it directly from your PC. The link and your events stay on your PC.

Google Calendar (invite-only beta). If you request a spot, we store your request (your account ID, email and its status) so an admin can approve it. If you connect Google Calendar, Shape asks Google for read-only access to your calendar events and fetches them directly from Google to your PC, to remind you before meetings. Your events are never sent to us or anyone else. You can disconnect at any time in Settings, or remove Shape's access at myaccount.google.com/permissions.

Shape's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google data for advertising, don't sell it, don't let humans read it, and don't use it to train AI models.

5. AI chat

AI chat is off by default. To use it you enter your own API key from Anthropic (Claude) or Google (Gemini). When you send a message, Shape sends it directly from your PC to the provider you chose, together with the context it needs to answer: recent chat history, the name and facts in Shape's memory (if memory is on), and your tasks and upcoming events (if you allowed that). Nothing passes through our servers.

That provider handles your messages under its own terms and privacy policy: Anthropic or Google. Your API key is stored only on your PC. Turning AI off or removing the key is always allowed, even when you're signed out.

AI-generated replies can be wrong. Don't rely on them for medical, legal, financial or safety decisions.

6. Voice input

Push-to-talk uses Windows' built-in speech recognition. Your voice is handled by Windows (and by Microsoft's online speech service, if you've turned that on in Windows settings) under Microsoft's privacy statement. Shape receives only the recognised text and doesn't record or keep audio. The microphone listens only after you press the push-to-talk shortcut or the mic button, and only for one phrase.

7. Updates, problem reports and this website

• Updates. The version from our website checks GitHub for new releases, so GitHub sees your IP address, as with any download. The Microsoft Store version is updated by the Store instead.
• Problem reports. "Report a problem" saves a text report to your Downloads folder and opens a pre-filled issue on GitHub. Your Windows username, file paths and email addresses are removed first, and nothing is sent unless you choose to submit it on GitHub, where issues are public.
• This website has no analytics, cookies or trackers. It's hosted on Cloudflare, loads fonts from Google Fonts, and asks GitHub for the latest version number. Those services see your IP address as part of serving the page.

8. Who we share data with

We don't sell, rent or trade your personal data, and we don't use it for advertising. Your account data is processed only by Google Firebase, our hosting provider, on our behalf. We would disclose data only if the law required it.

9. How long we keep data

Data on your PC stays until you delete it or uninstall Shape. Account data is kept while you have an account and deleted within 30 days of your request to delete it. Calendar beta requests are deleted with your account.

10. Your choices and rights

• Erase memory: Settings → Memory → Forget everything. This works even when you're signed out.
• Sign out at any time. Shape keeps working without an account.
• Delete your account, or get a copy of or correct the data we hold: email shapexdev@proton.me from the address on your account. We reply within 30 days.
• Remove everything: uninstall Shape from Windows Settings → Apps. To also remove local data, delete the com.shape.desktoppet folders in %APPDATA% and %LOCALAPPDATA%.

Depending on where you live (for example in the EU, UK, India or California), you may have further rights, such as to object to processing or to complain to your data protection authority. We'll help with any such request.

11. Security

All network connections use HTTPS. Sign-in tokens are kept in Windows Credential Manager, account data is protected by access rules that let each user read only their own record, and updates are cryptographically signed so only genuine Shape releases install. No system is perfectly secure, but we keep what we collect to a minimum.

12. Children

Shape isn't directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has created an account, email us and we'll delete it.

13. Changes to this policy

If we change this policy we'll update the date at the top. For significant changes we'll also tell you in the app.

14. Contact

X Shape dev · shapexdev@proton.me · xshape.pages.dev