Sharecase™ Privacy Policy

Last Updated: June 25, 2026

Sharecase™, Inc. (“Company”, “we”, “our”, or “us”) respect your privacy and are committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when providing services to you through our websites, applications, and services that link to this policy (our “Services”) and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

·  Through the Services; or

·  In communications, including email, text, chat, and other electronic messages, between you and the Services.

It does not apply to information collected by:

·  Us through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries) that does not link to this policy; or

·  Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Services.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. This policy may change from time to time (see the “Changes to Our Privacy Policy” section below). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates. 

Parental Consent for Users Under 18

As described in our Terms of Use, Sharecase™ requires verifiable parental or legal guardian consent before activating an account for any Student user under 18, regardless of state of residence. To facilitate this consent, Sharecase™ processes limited personal information of the parent or legal guardian, including their name, contact information (email and/or phone number), the timestamp and IP address of the consent submission, and the version of these Terms of Use and Privacy Policy they accepted on behalf of the Student. This information is retained by Sharecase™™ as an audit record of consent for the duration of the Student user’s account for up to seven (7) years after account deletion to comply with applicable laws and resolve disputes. A parent or legal guardian may revoke consent at any time, solely by following the unique revocation link Sharecase™ provides in the original consent communications (email and/or SMS); Sharecase™ does not provide an in-app, account, or dashboard mechanism for parents or legal guardians to revoke consent. A parent or legal guardian may also request access to or correction of their information, or otherwise exercise rights described in this Privacy Policy and our Terms of Use. The processing of parent or guardian information described in this section is governed by this Privacy Policy.

Children’s Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 13. If we learn we have collected or received personal data from a child under 13 years old without verification of parental consent, we will delete that information. 

The Personal Data That We Collect or Process

“Personal data” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, home address, or payment information (for example, account information such as name, postal address, and email address, credit card number, or any other identifier we may use to contact you online or offline).

The types and categories of personal data we collect or process include:

·  Account and contact information, including name, address, email address, phone number, username, and other contact information you provide us;

·  Payment information, including credit card or debit card information;

·  Account history, including information about your subscription, account, transactions, purchases, order history, or discounts;

·  Demographic information, including your age, gender, or education, if you have consented to such information collection;

·  Location information, including general geographic location such as country, state or province, or city, as well as specific location information, such as one’s school or other educational institution;

·  Device information, including your IP address, device identifiers, preferred language, browser type and settings, and other device information;

·  Content and information you elect to provide as part of your profile or in any reviews you make through the Services or emails, chats, or other communications sent to us; or

·  Images, voice recordings, and videos collected or stored in connection with the Services, if you have consented to such information collection.

If you are a California resident, to access our supplemental California privacy statement, visit https://joinsharecase.com/california-privacy-policy.

We also collect:

·  Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Services feature.

·  Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal information.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information about you when you interact with our Services, such as when you create or update an account, subscribe, or make a purchase, participate in surveys, or create, upload, or post content to the Services, including reviews, media such as photos, videos, or audio recordings.

Automatically Through Our Services

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies and other tracking technologies, including details of your interactions with our Services, such as traffic data, location data, logs, and other communication data, and which resources and Services features that you access and use.

We may use these automatic collection technologies to collect information about your online activities over time and across third-party sites or other online services (behavioral tracking).

Using automatic collection technologies helps us to improve our Services and to deliver a better and more personalized experience.

The technologies we use for this automatic data collection may include:

·  Cookies. A cookie is a small file placed on your device when you interact with the Services. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services. 

·  Web Beacons. Some parts of the Services may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those parts and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). 

To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt out from use of these automated technologies for such uses by checking the relevant box located on the form on which we collect your data. Please note that some Services features may be unavailable as a result.

Sharecase Commitments Regarding Advertising and Data Sales

Notwithstanding any other provisions of this Privacy Policy, Sharecase™ makes the following commitments regarding advertising and personal data sales:

Sharecase™ does not and will not serve targeted advertising to users under the age of 18.

Sharecase™ does not sell personal data of any user (regardless of age) for monetary or other valuable consideration. Sharecase™ has not sold personal data in the preceding twelve (12) months.

Sharecase™ may engage in non-targeted brand sponsorships and partnerships, including the provision of aggregated, non-personally-identifiable analytics to sponsors. Such sponsorships will not include the targeting of advertising at minors.

Sharecase™ may display its own promotional content within the Services and communicate with users about Sharecase™ products and offerings, subject to user preferences and applicable law.

These commitments are foundational to Sharecase™ and reflect our obligation to provide a safe-by-default platform for users under the age of 18 as required by applicable law, including the Texas SCOPE Act (SB 12), the Children's Online Privacy Protection Act (COPPA), and the California Consumer Privacy Act (CCPA).

When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about your or your device. These third parties may include:

·  Advertisers, ad networks, and ad servers;

·  Your device manufacturer; or

·  Your internet or mobile service provider.

These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal data or they may collect information, including personal data, about your online activities over time and across different websites, apps, platforms, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

From Business Partners and Service Providers

We may receive personal data about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal data, to:

·  Provide you with the Services and any contents, features, information, products, or services that we make available through the Services;

·  Fulfill and manage subscriptions, purchases, and payments;

·  Fulfill any other purpose for which you provide it;

·  Provide you with notices about your account or subscription, including expiration and renewal notices;

·  Improve our Services, including by analyzing your information and creating aggregated data derived from your information) to develop, maintain, analyze, improve, optimize, measure, and report on our Services and their features and how users interact with them;

·  Promote our Services, business, and offerings by publishing advertising on our own Services and by placing ads on third parties’ services;

·  Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;

·  Notify you when Services updates are available and about changes to any products or services we offer or provide though them;

·  In any other way we may describe when you provide the information; or

·  For any other purpose with your consent.

The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to:

·  Estimate our audience sizes and usage patterns;

·  Store information about your preferences, allowing us to customize the Services according to your individual needs and interests;

·  Speed up your searches; or

·  Recognize you when you return to our Services.

We may also use your information to contact you about goods and services that may be of interest to you. If you do not want us to use your information in this way, please check the relevant box located on the form on which we collect your information, or adjust your user preferences in your account profile, as applicable. For more information, see the “Your Rights and Choices About Your Information” section below.

SMS, Email, and Other Communications

We may use SMS or text messages to communicate with you for account authentication (including sending one-time passcodes for login or password reset), service-related notifications (such as account, security, or transactional alerts), and, where you have consented, marketing or promotional communications.

By providing your mobile telephone number to us, you consent to receive text messages from us at that number for the purposes described above. Message frequency varies. Message and data rates may apply; your wireless carrier may charge you for sending or receiving text messages, and Sharecase™ is not responsible for any such charges.

You may opt out of marketing text messages at any time by replying STOP. You may receive a one-time confirmation. Transactional and account-related messages (such as authentication codes) will continue as necessary to provide the Services.

For help with text messaging, reply HELP to any text message we send you, or contact us at legal@sharecase.app.

Mobile telephone numbers will not be shared, sold, or rented to third parties for marketing purposes. Sharecase™ may share mobile telephone numbers with our text messaging service providers (such as SMS gateway operators) solely as necessary to deliver text messages on our behalf.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

As an alternative to SMS, Sharecase™ also offers account authentication and account-related communications via email. At signup and for subsequent authentication needs (such as login or password reset), you may choose to receive one-time passcodes either by SMS to your mobile telephone number or by email to your email address. By providing your email address to Sharecase™ and selecting email-based authentication, you consent to receive emails from Sharecase™™ at that address for authentication, security-related communications, transactional notifications, and, with your separate consent, service updates and marketing communications. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by adjusting your communication preferences in your account settings. Transactional and account-related emails (such as authentication codes, security alerts, and account confirmations) will continue to be sent as necessary to provide the Services. Email addresses will not be shared, sold, or rented to third parties for marketing purposes.

Profile Visibility (Public and Private)

Student users may control the visibility of their profile and content (including profile information, posted achievements, and other content) by setting their profile to Public or Private through the Services, subject to default settings and limitations described in our Terms of Use. When a profile is set to Public, profile information and content may be viewable by other Sharecase™ users, by visitors to the public-facing portions of the Services who are not logged in, and (where applicable) by Recruiters using the Services for talent discovery and opportunity matching; may appear in internal search results or be indexed by third-party search engines; and may be accessed through a Public profile URL (such as sharecase.app/username) that may be shared by the Student and by Sharecase™ in connection with these purposes. When a profile is set to Private, the Student remains discoverable in internal search and discovery features of the Services, and other users may see only a limited preview of the Private Student (such as name or username, profile image, role, headline, and general identifying information like school, city, or graduation year) and may use such limited preview to send the Student a connection request; full profile content (such as detailed achievements, posts, articles, endorsements, and connections) is intended to be viewable only by users to whom the Student has granted access (such as connected Supporters, Mentors, or other approved users). Sharecase™ may modify the specific fields included in a limited preview of a Private profile from time to time. Private profile content is not indexed by third-party search engines and Private profile pages are not generally accessible to visitors to the Services who are not logged in. Sharecase™ uses commercially reasonable measures to limit visibility in accordance with the Private setting but cannot guarantee against viewing, copying, screenshotting, or other access by users with permitted access. Default visibility settings for Student users under 18 may be set to Private, and Sharecase™ may apply additional protections to such users at its discretion. Changing a profile from Public to Private limits new visibility but does not reverse viewing, copies, or other access that occurred while the profile was Public. Students may also choose to generate a Resume or similar document from their profile content and transmit it to third parties (such as colleges, universities, scholarship providers, employers, recruiters, or third-party college application services), either through the cross-platform sharing features of the Services or by downloading and distributing the document outside the Services; any such transmission is at the Student’s election and is subject to the Terms of Use. For additional information, please review the Profile Visibility section of our Terms of Use.

Cross-Platform Sharing

The Services include features that allow you to share your own content from Sharecase™™ (such as your own achievements, articles you have authored, posts you have created, or other content you have personally generated or are authorized to share) to third-party platforms, applications, services, and transmission methods, including (without limitation) Instagram, Facebook, Snapchat, X (formerly Twitter), TikTok, LinkedIn, YouTube, Reddit, Discord, WhatsApp, Messenger, SMS or text message, email, AirDrop, your device’s native share menu (including the iOS Share Sheet and Android share menu), copy-link or QR-code-based transmission, and any other social media, messaging, file-sharing, content distribution, or transmission method (collectively, “Third-Party Platforms”).

When you use these sharing features, information about you and the content you share (which may include your name or username, profile image, the content of the achievement or post being shared, any associated visual preview or thumbnail, and metadata about the share) will be transmitted to the Third-Party Platform you select and will be subject to that platform’s privacy policy and terms of service. Once shared, the receiving Third-Party Platform controls how the shared information is processed, displayed, retained, and redistributed; Sharecase™ has limited or no control over the Third-Party Platform’s handling of the information.

Third-Party Platforms may collect additional information about you when you interact with their sharing tools or pages (such as device information, IP address, cookies, or your activity on the Third-Party Platform), and any such collection is governed by the Third-Party Platform’s privacy practices, not by this Privacy Policy. We encourage you to review the privacy policy of any Third-Party Platform before sharing content to it.

Institutional Verification of Achievements and Third-Party Integrations

As described in our Terms of Use, Sharecase™ may offer features that allow a broad range of institutions to verify Student users’ claimed achievements, milestones, credentials, volunteer service, internships, and other experiences. Verifying institutions may include schools, colleges and universities, teachers, coaches, athletic teams and leagues, clubs, extracurricular organizations, service and honor societies (such as the National Charity League and similar organizations), nonprofits and charitable organizations, religious and cultural organizations, volunteer programs, internship host organizations, summer programs and camps, awards or competition administrators, employers, and other institutions or organizations with which a Student has had a relevant relationship. Where you (as a Student) participate in institutional verification, information about you, the content being verified, and (in some cases) the Verifying Institution’s identity may be processed by Sharecase™™ and shared with the Verifying Institution to facilitate verification. Certain Student information processed in connection with verifications by a school or other educational institution may constitute an educational record under the Family Educational Rights and Privacy Act (“FERPA”) or similar laws; Verifying Institutions that are subject to FERPA are responsible for their own compliance with such laws.

Sharecase™ may also offer integrations with third-party platforms such as college application services, scholarship platforms, recruiting platforms, or similar evaluating parties. Where you elect to transmit your information (including verified achievement information) to a third-party integration partner through the Services, the receiving third party’s use of the transmitted information will be governed by that party’s terms of service and privacy practices, not by this Privacy Policy. Sharecase™ does not transmit your information to a third-party integration partner without your election to do so.

Organization Accounts

As described in our Terms of Use, Sharecase™ may from time to time offer Organization Accounts for institutions and organizations (such as schools, colleges, nonprofits, companies, employers, scholarship providers, awards programs, athletic organizations, and similar organizations). Where you (as a Student or other individual user) interact with content posted by an Organization Account, follow or connect with an Organization Account, participate in a program administered through an Organization Account, or otherwise engage with one, information about you and your interactions may be processed by Sharecase™™ and may be made available to the organization in accordance with the additional terms applicable to Organization Accounts and any separate data use or program agreement between Sharecase™ and the organization. Where applicable, Sharecase™ will inform you of the specific information available to an Organization Account through the Services or by notice at or before the time of your interaction.

Resume Generation

As described in our Terms of Use, the Services may offer features that allow Student users to generate a resume, portfolio, or similar document (a “Resume”) from content in the Student’s profile. Where you (as a Student) use these features, Sharecase™ processes the information you have selected for inclusion (which may include achievements, credentials, verifications, endorsements, and other profile content) to assemble and format the Resume. The Resume generation feature may incorporate AI-assisted functionality (such as formatting, summarization, or content suggestions) provided by our AI service provider; the AI-related disclosures in this Privacy Policy apply equally to AI-assisted Resume generation. Once a Resume is generated and downloaded, saved, or transmitted outside the Services, Sharecase™ no longer controls the Resume; the recipient’s use of the Resume is governed by the recipient’s terms and practices, not by this Privacy Policy.

Who We Disclose Your Information To

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may also disclose personal data that we collect or you provide as described in this privacy policy:

·  To our subsidiaries and affiliates;

·  To contractors, service providers, and other third parties we use to support our organization;

·  To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Sharecase™™, Inc.’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by Sharecase™™, Inc. is among the assets transferred;

·  To fulfill the purpose for which you provide it (e.g., if you give us an email address to use an “email a friend” feature of our Services, we will transmit the contents of that email and your email address to the recipients);

·  For any other purpose disclosed by us when you provide the information; or

·  With your consent.

We may also disclose your personal data:

·  To comply with any court order, law, or legal process, including to respond to any government or regulatory request;

·  To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes; or

·  If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our customers and members, or others.

The categories of personal data we may disclose include:

·  Account and contact information;

·  Payment information;

·  Account history, including information about your subscription, account, transactions, purchases, order history, or discounts;

·  Demographic information;

·  Location information;

·  Device information;

·  Content and information you elect to provide to us; or

·  Images, voice recordings, and videos collected or stored in connection with the Services, if you have consented to such information collection.

Use of Artificial Intelligence Service Providers

Some features of the Services — including AI-assisted resume and portfolio generation, AI-enabled career guidance, and AI-enabled career matching — rely on third-party artificial intelligence service providers. Currently, we use OpenAI as our AI service provider for these features. When you use an AI-powered feature: (a) we may transmit limited personal information from your profile (such as achievements, experiences, and biographical details you have entered) to OpenAI in order to generate the requested content; (b) under our contractual agreement with OpenAI, OpenAI does not use this information to train its underlying models; (c) OpenAI retains submitted data only as needed to deliver the feature and in accordance with our agreement; and (d) processing occurs in OpenAI’s data centers located in the United States. You can choose not to use AI-powered features. If we change AI service providers in the future, we will update this Privacy Policy accordingly.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.

Advertising, marketing, cookies, and other tracking technologies choices: 

·  Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. You can choose whether or not to allow the Services to collect information through other tracking technologies by opting out through the method provided to you before the Services collect such information for the first time (e.g., by clicking a button to opt out). If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly.

·  Promotions by the Company. If you do not wish us to use your information to promote our own or third parties' products or services, you can opt out by logging into your account and adjusting your account settings and preferences. Marketing communications from Sharecase™ are opt-in only: the marketing-email checkbox at signup is unchecked by default, and you must affirmatively opt in to receive marketing emails. You may opt out at any time using the unsubscribe link in any marketing email.

·  Targeted Advertising by the Company. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target audience preferences, you can opt out by clicking the unsubscribe link in our marketing emails or adjusting your communication preferences in your account settings. For this opt out to function, you must have your browser set to accept all browser cookies.

Your State Privacy Rights

Depending on your state of residency, you may have certain rights related to your personal data, including: 

·  Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.

·  Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information’s nature and processing purpose.

·  Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.

·  Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal data for these purposes.

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request. 

To exercise any of these rights, please contact us at the email set forth in the “Contact Information” section below.

Nevada provides its residents with a limited right to opt out of certain personal data sales. Residents who wish to exercise their sale opt-out rights may submit a request to the email set forth in the “Contact Information” section below. However, please know we do not currently sell data triggering that statute’s opt-out requirements.

If you are a California resident, additional information applies to you. To access our supplemental California privacy statement and learn more about California residents’ privacy rights, visit https://joinsharecase.com/california-privacy-policy.

Mental Health, Well-Being, and Crisis Resources

Sharecase™ does not knowingly collect mental health, emotional, or psychological information from you unless you affirmatively choose to provide it as part of your interactions with the Services. Some information you choose to post on the Services (for example, content describing your emotional state, content related to mental health, or content shared with mental-health-related Mentors or organizations) may be processed by Sharecase™™ in the course of providing the Services and treated with the protections described in this Privacy Policy and applicable law. The Services are not a mental health, counseling, or crisis intervention service. If you are experiencing a mental health crisis, please contact the 988 Suicide and Crisis Lifeline (call or text 988 in the United States), the Crisis Text Line (text HOME to 741741), the SAMHSA National Helpline (1-800-662-HELP), or your local emergency services (911). Additional information about Sharecase™’s approach to user well-being is provided in our Terms of Use.

How We Protect Your Personal Data

We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

How We Retain Your Personal Data

We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

When you request deletion of your account or your personal data, Sharecase™ will delete the requested personal data within thirty (30) days of receiving a verifiable request, subject to certain exceptions under applicable law. For inactive accounts (where the user has not explicitly requested deletion), Sharecase™ may retain personal data for up to thirty-six (36) months after account closure for legal, compliance, and dispute-resolution purposes. Financial records may be retained for up to seven (7) years to comply with tax and accounting obligations. Parental consent records are retained for up to seven (7) years to comply with the Texas SCOPE Act (SB 12) and other applicable laws.

If you are a California resident, visit https://joinsharecase.com/california-privacy-policy for more information about the retention periods that apply to the personal data categories we collect.

Changes to Our Privacy Policy

We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the “last updated” date and posting the updated policy on the Services. We may email or otherwise communicate reminders about this policy, but you should check our Services periodically to see the current policy and any changes we have made to it.

Contact Information

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us at: legal@sharecase.app.

Mandatory Reporting of Child Sexual Abuse Material (CSAM)

Sharecase™ complies with all applicable federal and state laws related to the protection of minors, including the obligation to report apparent child sexual abuse material (CSAM) to the National Center for Missing & Exploited Children (NCMEC) under 18 U.S.C. § 2258A. Sharecase™ will report CSAM and other child exploitation content to NCMEC within statutory timeframes and may cooperate with law enforcement investigations as required by law. Users can report concerning content, including any content involving minors that may violate Sharecase's policies or applicable law, by using in-app reporting tools or by contacting safety@sharecase.app. Sharecase reviews and acts on reports promptly.

Data Breach Notification

In the event of a security incident or data breach involving personal information that we reasonably believe may pose a risk to affected users, we will notify those users without undue delay, generally within 30 to 60 days of discovery, depending on the nature of the incident and applicable law. Notification will be provided via the email address or phone number associated with the affected account and, where appropriate, by in-app notification. Notifications will describe the nature of the incident, the categories of personal information involved, the steps we have taken in response, and recommended actions for affected users. We will also notify applicable regulators and law enforcement as required by law.

International Users (GDPR, UK Data Protection Act, etc.)

Sharecase is intended primarily for users in the United States. If you access or use Sharecase from outside the United States, you do so on your own initiative and at your own risk, and you are responsible for compliance with your local laws. Some users outside the United States may have additional data rights under their local laws, including the European Union's General Data Protection Regulation (GDPR), the United Kingdom's Data Protection Act, or other applicable data protection laws. If you are an EU, UK, or other international user, you may have rights to access, correct, delete, or object to processing of your personal information, in addition to those described in this Privacy Policy. Contact privacy@sharecase.app to exercise any such rights.

Geographic Availability

Sharecase™ is currently available to users in the United States. We may expand availability to additional countries or regions in the future, in which case the terms of service and privacy practices applicable to users in those regions may be updated accordingly. By creating an account, you represent that you are located in the United States or that you accept these Terms of Use as the governing terms regardless of your location.

Age Transition (Turning 18)

When a Student user reaches the age of 18, the parental consent obligations described in this Privacy Policy and our Terms of Use no longer apply to that user. The Student account remains active and continues to be governed by the Student's own continued acceptance of the Terms of Use and Privacy Policy. The user may adjust their profile visibility settings, choose to convert their account role (where permitted by Sharecase™), or take other actions in their account that were not previously available to them as a minor. Sharecase™ will notify Student users approaching their 18th birthday of any changes that will take effect.

Parental Verification Mechanism

For Student users who are under 18, Sharecase™ requires verifiable parental consent before activating the account. This section describes the mechanism Sharecase uses to obtain and document parental consent.

Consent Flow. During Student signup, the Student provides the contact information (phone number, email address, or both) for a parent or legal guardian. Sharecase then sends a one-time approval request to the parent or guardian through the chosen channel, containing a unique link to a parental consent landing page. On that page, the parent or guardian reviews a description of Sharecase™, the Student account being created, and what the Student can do on the platform. The parent or guardian provides consent through the following affirmative actions: (a) acknowledgment that they are the parent or legal guardian of the Student; (b) affirmation that they consent to the Student creating a Sharecase account; (c) confirmation that they have reviewed Sharecase's Terms of Use and Privacy Policy; and (d) optional: typed full legal name as a written attestation. The Student's account does not activate until consent is received and recorded.

Failed or Declined Consent. If the parent or guardian declines consent, the Student is notified that consent was not granted and may submit a new consent request to a different parent or guardian. If no response is received within fourteen (14) days, the pending consent record expires and the Student may re-initiate the consent request. If the contact information provided is invalid or undeliverable, the Student may update the parent or guardian contact through the "Edit Parent Contact" flow.

Audit Record Retention. Sharecase™ retains the parental consent verification record for the lifetime of the Student's account for up to seven (7) years after account deletion, typically seven (7) years following account deletion, to comply with applicable laws and to resolve disputes. The audit record includes: the parent or guardian's name; contact information used; channel used for the consent request; IP address of the consent submission; device user agent; timestamp; version of the Terms of Use accepted; version of the Privacy Policy accepted; optional typed name attestation; and consent status (approved, declined, or revoked).

Disputes Regarding Consent. If a parent or legal guardian believes a consent record was created without their actual authorization, they may contact Sharecase at privacy@sharecase.app. Sharecase™ will review the verification record promptly and may, in its discretion, suspend the affected Student account pending investigation. Resolution may include account suspension, deletion of the Student account, or other appropriate remedial action.

Infrastructure and Service Provider Disclosure. Sharecase relies on the following third-party service providers to operate the platform. Each is contractually limited to processing personal data solely as necessary to deliver their service to Sharecase, and is not permitted to use personal data for their own purposes:

• Supabase, Inc. — Database, authentication, and backend infrastructure provider. Processes user account data, profile information, posts, achievements, and parental consent records.

• Vercel, Inc. — Web hosting and edge compute provider. Processes user web requests, page renders, and edge function executions.

• Railway Corp. — Application hosting and infrastructure provider. Processes user requests and application workloads.

• SendGrid, Inc. (a Twilio company) — Email delivery service provider. Processes recipient email addresses and email content for transactional and notification messages, including parental consent communications.

• Twilio, Inc. — SMS service provider (described above in SMS, Email, and Other Communications).

• OpenAI, L.L.C. — AI service provider (described above in Use of Artificial Intelligence Service Providers).

• Expo (Exponent, Inc.) — Mobile application build and over-the-air update distribution provider. Used to distribute builds of the Sharecase mobile application and to deliver in-app updates.

• Apple Inc. and Google LLC — Mobile application distribution platforms for iOS App Store and Google Play, respectively. May collect device, installation, and crash telemetry per their published policies.

Sharecase™ may update this list from time to time as our infrastructure evolves. Material changes will be reflected in this Privacy Policy.

Material Changes; Re-Verification. If Sharecase materially expands the scope of what Student users under 18 can do on the platform, Sharecase™ will notify consenting parents and guardians of the change. Re-verification of parental consent may be required in some circumstances, as Sharecase determines appropriate or as required by applicable law.

Multiple Parents or Guardians. A Student may have only one parent or guardian designated as the consenting party on the initial consent record. After initial consent is granted, additional parents or guardians may establish a separate "Verified Parent or Guardian" relationship through the Sharecase Supporter onboarding flow, subject to Student confirmation. Either parent or guardian with verified status may revoke consent at any time, solely by following the unique revocation link provided in their consent communications (email and/or SMS), which suspends the Student account until consent is re-established.

Future Verification Methods. Sharecase may, in the future, introduce stronger identity verification methods as part of the parental consent flow, including but not limited to government-issued ID verification, selfie verification, or knowledge-based authentication, through third-party identity verification vendors. Sharecase™ will update these Terms of Use and our Privacy Policy as appropriate when such methods are introduced and will continue to comply with applicable laws governing the verification of parental consent.