Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Shortcuts AI ("Shortcuts AI," "we," "us," or "our") handles personal information when you use our websites, Apple Shortcut, account and settings pages, documentation, support channels, and related services (collectively, the "Service").

By using the Service, you acknowledge the practices described here. This policy does not replace any additional notice we may provide when we collect information for a specific feature.

1. Scope

This policy applies to information Shortcuts AI handles as the operator of the Service. It does not govern information processed independently by Apple, an AI model provider, Stripe, Clerk, or another third party under that party's own terms and privacy policy.

When an Apple device performs an action locally through the Shortcuts app, Apple and the relevant app may process information under their own policies. Shortcuts AI receives the request, context, tool instructions, and results needed to coordinate the task, but it does not receive every piece of information stored in the apps on your device.

2. Information we collect

Account information

When you create or manage an account, we may receive your name, email address, profile image, authentication identifiers, connected sign-in methods, and account-security information from our authentication provider. We do not receive your password from third-party sign-in providers.

Requests, content, and settings

We process the information you choose to give Agent or save in the Service, which may include:

• prompts, follow-up answers, and generated responses;
• custom instructions, model choices, tool settings, and other preferences;
• text, links, images, audio, documents, and other files you select;
• transcriptions and derived file context needed to answer a request;
• action parameters and results, such as the title of a note or details for a calendar event; and
• support messages, feedback, and other communications you send us.

Please do not provide information you are not authorized to share. Your requests may contain sensitive information depending on what you choose to submit.

Device and Shortcut context

To run a request, the Shortcut may send information such as device type, operating-system version, Shortcut version, locale, current app, whether the device is locked, timestamps, selected input types, and session identifiers. If you use a location-related tool, the Service may process the location or place information needed for that request.

Usage and transaction information

We maintain information about Agent sessions, requested tools, actions and action results, token or tool usage, credit balance, credit transactions, top-up status, and related timestamps. This information helps us operate the Service, show account activity, calculate usage, prevent abuse, and resolve errors.

Payment information

Stripe processes checkout and payment-card details. Shortcuts AI receives limited billing information such as a Stripe customer identifier, checkout or payment status, amount, currency, tax or fee information, and transaction identifiers. We do not store full payment-card numbers.

Technical and analytics information

We and our service providers may collect IP address, browser and device type, operating system, language, referring page, pages viewed, timestamps, cookie or session identifiers, diagnostic events, and error or security logs. Vercel Analytics measures website use in production, and Google Analytics may also measure visits and interactions when configured.

3. How we use information

We use personal information to:

• authenticate users and secure accounts;
• pair the Shortcut with the correct account and device;
• interpret requests, call the selected AI model, and coordinate tools;
• send requested actions to Apple Shortcuts and receive their results;
• process selected files or audio and return useful output;
• save settings and provide session, usage, and billing features;
• process top-ups, maintain credit balances, and keep transaction records;
• provide support and communicate about the Service;
• detect fraud, abuse, security incidents, and technical failures;
• debug, maintain, and improve reliability and usability;
• enforce our Terms of Service; and
• comply with law and protect users, Shortcuts AI, and others.

We do not sell personal information for money. We do not use personal information to provide third-party targeted advertising, and we do not knowingly share personal information for cross-context behavioral advertising.

4. How Agent and device actions work

Shortcuts AI uses server-side AI reasoning to understand your request and decide which enabled tools may help. The prompt, relevant conversation context, selected files or file-derived context, settings, and tool results may be sent to the AI provider selected for the request.

When a tool must act on your device, the Service sends structured action instructions back to the Shortcut. The Shortcuts app and the relevant Apple app then perform the action using the permissions and confirmations available on your device. You control which content you submit, which tools are enabled, and whether to continue when the device asks for confirmation.

5. When we disclose information

We disclose personal information only as needed for the purposes described in this policy:

We may also disclose information:

• when you direct us to or consent to the disclosure;
• to comply with law, legal process, or a valid government request;
• to investigate abuse, enforce agreements, or protect rights and safety; or
• as part of a merger, financing, acquisition, reorganization, bankruptcy, or transfer of all or part of the Service, subject to appropriate confidentiality protections.

Service providers may process information in other countries. Their handling of information is governed by our arrangements with them and their applicable terms and privacy notices.

6. Cookies and online tracking

The Service uses cookies and similar technologies that are necessary for sign-in, security, language and theme preferences, and other requested functionality. When analytics is enabled, analytics technologies may also measure how visitors use the website.

You can control cookies through your browser. Blocking necessary cookies may prevent sign-in or other parts of the Service from working.

California Do Not Track disclosure

Some browsers send a "Do Not Track" signal. Because there is no consistent industry standard for this signal, the Service does not currently respond to it. Where applicable law requires us to recognize an opt-out preference signal for selling or sharing personal information, our current practice of not selling or sharing personal information for cross-context behavioral advertising means there is no sale or targeted-advertising sharing to opt out of.

7. Data retention

We retain information for only as long as reasonably necessary for the purposes described in this policy, including to provide the Service, maintain transaction and security records, resolve disputes, and comply with legal obligations.

Retention depends on the type of information:

• account information and settings are generally kept while your account remains active;
• session content, action records, uploaded files, and technical logs are kept for the period needed to operate, secure, troubleshoot, and improve the Service;
• billing and transaction records may be kept longer when required for accounting, tax, fraud prevention, disputes, or other legal obligations; and
• backup copies may remain for a limited period until they are overwritten or deleted through normal backup rotation.

When information is no longer needed, we delete or de-identify it. A deletion request may not cover information we must retain by law, need to protect the Service, or have already de-identified so it can no longer reasonably be linked to you.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted network transport, scoped device credentials, and database authorization rules. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

Keep your account and setup key confidential. Contact us promptly if you believe your account or key has been compromised.

9. International data transfers

Shortcuts AI and its service providers may process information in the United States and other countries that may have different data-protection laws from where you live. Where required, we rely on an approved transfer mechanism or another lawful basis for the transfer.

10. Your choices and privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information. You may also have rights to restrict or object to certain processing, withdraw consent, or appeal a decision about a privacy request.

You can update some account information in Settings → Account and change Agent preferences in Settings. To make another privacy request, email support@getshortcuts.ai. We may need to verify your identity and authority before completing a request. We will respond within the period required by applicable law.

If you are in the European Economic Area, United Kingdom, or Switzerland, you may also complain to your local data-protection authority. Withdrawing consent does not affect processing that occurred before withdrawal.

Legal bases for European users

Where European data-protection law applies, our legal bases include:

• Contract: processing needed to create your account, run Agent, perform requested tools, and provide billing features;
• Legitimate interests: securing, maintaining, troubleshooting, and improving the Service, provided those interests are not overridden by your rights;
• Consent: optional analytics or other processing for which consent is requested; and
• Legal obligation: accounting, tax, fraud-prevention, and lawful-request requirements.

11. California privacy rights

If California privacy law applies to Shortcuts AI and your information, you may have rights to know and access personal information, correct inaccurate information, request deletion, receive information about disclosures, and receive equal service when you exercise your rights. You may use an authorized agent where the law permits.

The categories of personal information we may have collected in the preceding 12 months are described in Section 2. They may include identifiers; customer records; commercial information; internet or network activity; approximate or precise location when you request a location tool; audio, visual, or electronic information you submit; professional or employment information you include in content; and inferences created to complete your request. We collect these categories from you, your device, your account and payment providers, and your use of the Service. We use and disclose them for the business purposes described in Sections 3 and 5.

Some content you submit may qualify as sensitive personal information. We use it only to provide requested features, secure the Service, and meet legal obligations; we do not use it to infer characteristics about you for advertising.

Shortcuts AI does not sell personal information and does not knowingly share it for cross-context behavioral advertising. We do not discriminate against you for exercising applicable privacy rights.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

13. Changes to this policy

We may update this policy as the Service, our providers, or legal requirements change. We will post the revised policy and update the date above. If a change materially affects how we use previously collected information, we will provide additional notice when required.

14. Contact

For privacy questions or requests, email support@getshortcuts.ai.