Privacy Policy

ShuttleAI, Inc., a Delaware corporation, is responsible for the personal information it handles when operating its websites, AI products, APIs, developer tools, games (including Scrap Rush), and related support. This policy describes our general practices across those Services.

Different products use different information. A product-specific notice or agreement provides additional details and takes priority for that product if there is a conflict. For example, Kitani’s Privacy Policy describes its operating partners, providers, request routing, analytics, and retention options. This general policy does not weaken a more protective product-specific commitment.

This policy does not govern independent services you visit through links or a platform’s own processing. Our Terms of Service explain the rules for using our Services.

Depending on the product and features you use, information may include:

• Account and contact information: your name, email, account identifiers, authentication information, preferences, and messages you send to support.
• Content you provide: prompts, conversations, files, images, audio, instructions, tool interactions, generated outputs, and feedback submitted through an AI feature.
• Billing information: plan, credit balance, usage charges, invoices, transaction status, and payment-provider references. Payment processors such as Stripe handle payment details on products that use them.
• Technical and usage information: IP address, browser and device characteristics, request times, pages or features used, errors, security events, model selection, token counts, and request or API-key identifiers.
• Game information: progress, settings, upgrades, rewards, and platform identifiers where a particular game integrates an account or platform feature.
• Developer or provider information: organization details, deployments, endpoints, machine characteristics, performance and availability information, and payment or payout records needed for the relevant service.

We receive information from you, from your device’s interactions with a Service, and from providers involved in authentication, payments, hosting, support, or a feature you use. A category listed here is not collected by every product.

We use information to deliver requested features; process AI requests; maintain accounts and saved settings; calculate usage and payments; respond to support; detect fraud and abuse; secure, troubleshoot, and improve our Services; communicate about purchases or important changes; and meet legal obligations.

Where a legal basis is required, we rely on performance of a contract, legitimate interests such as security and reliable operation where those interests are not overridden by your rights, compliance with law, or consent where required. You can withdraw consent without affecting earlier lawful processing.

When you use an AI feature, the selected model, hosting provider, or tool may receive the content and technical information needed to complete the request. Connected tools can send information to another service when you invoke them. Provider practices and product settings can differ.

Training, conversation-history, prompt-caching, and retention practices are explained by the relevant product’s notice and settings. Do not assume every service has zero retention, confidential processing, or identical model-training rules. Where we make a specific no-training or zero-retention commitment, it continues to apply; this policy does not grant permission to override it.

Only submit information you are permitted to share and that is appropriate for your selected product and provider. Avoid submitting passwords, API secrets, or unnecessary sensitive personal information.

The current standalone browser version of Scrap Rush does not require a ShuttleAI account. It stores progress, coin balances, upgrades, and sound settings in your browser’s local storage system (IndexedDB). These saved game records are not uploaded to a ShuttleAI gameplay account. Clearing the game’s site data deletes that browser’s saved progress; another device or website address has separate storage.

This version does not include third-party advertising, an analytics SDK, social login, or in-game payment processing. Hosting and delivery services, including Cloudflare when used to serve the game, still process technical connection information such as IP addresses and requests to deliver files and protect the service. Contacting us separately provides the information in your message.

A version distributed within TikTok or another platform may also be subject to that platform’s own privacy notice and rules. Any additional information received by a future account, SDK, payment, or analytics integration must be described in an updated notice before that integration is offered.

We do not sell personal information for money. We disclose information when necessary to operate a feature you request, work with service providers, comply with law, or protect legitimate rights and safety—not as a blanket permission to give away your information.

• Service delivery: hosting, model inference, payments, authentication, communications, security, and support providers receive information relevant to their role. Independent providers or platforms may have their own notices.
• Your choices: information may be shared when you connect an integration, publish content, or direct us to send it.
• Legal and safety needs: we may disclose information to comply with valid legal process, investigate abuse, protect rights or safety, or obtain professional advice.
• Business changes: relevant records may be transferred in a merger, acquisition, restructuring, or asset sale, subject to applicable law and continuing privacy obligations.

Some products use advertising measurement. For example, Kitani’s disclosed X website tag sends browser and visit information to X. Depending on applicable law, advertising-related disclosures can be considered a “sale,” “sharing,” or targeted advertising even when no money changes hands. The relevant product’s notice and controls apply. We therefore do not make a company-wide promise that no legally defined sharing ever occurs.

Products may use cookies or browser storage for login sessions, preferences, security, and saved progress. Some also use analytics or advertising technologies as described in their specific notices. The ShuttleAI company site currently has no analytics or advertising tag in its application code; hosting infrastructure may still produce technical logs or use security technologies.

You can manage cookies and site storage in your browser, use product privacy controls, and unsubscribe from promotional emails through their unsubscribe option. Essential service and transaction messages may still be sent. Blocking storage can prevent sign-in or erase saved progress.

Kitani’s current website analytics and advertising integrations honor Do Not Track and Global Privacy Control signals, as described in its notice. For other products, consult their notices and controls. You may also contact us to exercise an applicable opt-out right; we will honor legally required opt-out preference signals where they apply.

Retention depends on the product, information type, account status, and purpose. We keep information only as long as reasonably necessary to provide the relevant Service, maintain required transaction records, address support or security issues, resolve disputes, and comply with legal obligations. Product-specific retention periods or zero-retention commitments control where offered.

Local game saves remain on your device until you clear them or your browser removes them. For information we hold, deletion may be subject to legal retention duties and limited security or dispute needs. Backups may retain information until their normal deletion cycle; retained copies remain protected and are not a reason to continue ordinary use of deleted data.

We use safeguards appropriate to the information and Services to reduce unauthorized access, loss, or misuse. No system or transmission method can be guaranteed completely secure. Protect your credentials and report suspected security problems to us promptly.

ShuttleAI is based in the United States. Providers may process information in the United States or other locations. Where transfer restrictions apply, required safeguards or another lawful transfer mechanism must be used. Contact us for information about safeguards relevant to your Service.

Depending on your location and applicable law, you may have rights to know about and access personal information, obtain a portable copy, correct it, request deletion, restrict or object to processing, withdraw consent, or opt out of sale, sharing, targeted advertising, or certain profiling. These rights may have legal exceptions.

Send requests to [email protected], identifying the product and what you would like to do. We may request proportionate information to verify your identity or an authorized agent’s authority. Do not send passwords or API secrets. We will respond within applicable legal time limits and will not unlawfully discriminate for exercising a privacy right.

If we decline a request, you may ask us to reconsider or appeal by replying to our response. You may also complain to the relevant data-protection or consumer-privacy authority. We cannot directly delete a local-only save on a device we do not control; your browser’s clear-site-data setting handles that.

AI accounts, paid services, and developer tools are not offered to children under 13; product or platform rules may set a higher minimum age. Family-friendly gameplay does not authorize a child to create an account on an age-restricted platform.

Scrap Rush’s current browser game uses local progress and has no account, chat, advertising SDK, or payment feature. We do not ask children to submit personal information through that game. Hosting requests may nevertheless contain technical identifiers, which must be handled under applicable children’s privacy rules.

Where a service is directed to children or we know it is processing a child’s personal information, applicable notice, parental-consent, data-minimization, and parental-rights requirements still apply. A minimum-age statement or parental permission in general terms is not a substitute for those requirements.

A parent or guardian with a concern can contact us to request review or deletion of information we hold about their child. If we learn that information was collected without a required legal basis or parental consent, we will take appropriate steps to delete it or obtain the required authorization.

We will update this policy when relevant practices or requirements change and revise the date above. Material changes will receive additional notice, and consent where legally required, before new processing that requires it. An update does not retroactively authorize an incompatible use of previously collected information.

Contact [email protected] for privacy questions, requests, or complaints.

ShuttleAI, Inc.
131 Continental Drive, Suite 305
Newark, Delaware, United States