Effective Date: September 8, 2026
Welcome to Shuffle, a service of DNFT, Inc. ("DNFT", "Company", "we", "us", or "our"). This Privacy Policy explains how we collect, use, share, and protect your information when you use our websites, applications, messaging services, AI-powered features, and related software (collectively, the "Service").
By using the Service, you consent to this Privacy Policy and our Terms of Service. If you do not agree, please discontinue use of the Service.
Messages and Content
When you interact with our AI-powered features, we receive and process:
Information You Give Us While the Service Works on Something
Some features act on your behalf on third-party websites and services. To finish a task, the Service may need something from you mid-run and will ask you for it in the conversation:
We treat this as sensitive. It is used to complete the task you asked for, it is not used to train AI models, and it is kept no longer than the task and our security and legal obligations require. You can decline, and the task simply stops.
Connected Accounts and Services
If you connect a third-party account so the Service can keep acting for you without signing in every time, we store a reference to that connection and a record of which service you connected. We also receive what that service returns while the Service is working: page content, order and booking details, confirmations, and similar results. Where a connection is kept as a saved browsing session, that session is held by the infrastructure provider that runs the browser rather than in your Shuffle conversation.
Contact Information
When you use or register for the Service, we collect:
Billing Information
For paid subscriptions, we collect payment and billing details through our secure third-party payment processor, Stripe, Inc. We do not store full credit card numbers on our servers; we only retain a payment token and the last four digits of your card for reference.
Communications with Us
When you contact our support team, we collect the content of your communications.
Message Metadata
Usage Data
Carrier and Network Data
Memory and Things We Infer About You
Shuffle is meant to remember you, so it keeps a memory of your conversations. Alongside what you tell it directly, we derive and store facts and preferences from what you say, so that the Service knows you next time instead of starting over: things like what you are working on, what you like, who matters to you, and how you want to be talked to.
This memory is used to personalize the Service for you and to decide when it is worth reaching out. It is not sold, and it is not shared with advertising partners. You can ask what we hold, correct it, or ask us to delete it. See Section 7.
Records of Actions Taken for You
When the Service does something for you on a third-party site, we keep a record of it: what was asked, which site, the steps taken, what came back, whether it succeeded, and any confirmation or receipt. We keep this so you can see what happened, so support can help when something goes wrong, and so we can investigate abuse.
Safety and Abuse Detection Data
We automatically collect and analyze data to detect potential child exploitation, abuse, and violations of our Terms, including:
We may receive information from:
We use the information we collect to:
Provide and Operate the Service
Improve the Service
AI Model Training Disclosure
Your content (messages, images, inputs) may be used to train, fine-tune, and improve AI models operated by DNFT. To opt out of DNFT's internal model training, email privacy@dnftinc.com with subject "Model Training Opt-Out."
Important: Opting out applies to future data only and does not affect content already used for training, and it does not require us to retrain existing models. Your opt-out does not change how third-party AI providers handle data under their own policies. For the current categories of service providers we use, contact privacy@dnftinc.com.
One exception: even if you opt out, we may still use content flagged for safety review to detect harmful material, enforce our Terms, and improve our safety systems, including detection of content that exploits children.
Separately, and regardless of whether you opt out: credentials, verification codes, and payment details you provide so the Service can finish a task are never used for model training.
Communicate with You
Safety and Security
Legal Compliance
We do not sell personal information for money. We may share certain identifiers (such as device IDs and usage data) with advertising partners for measurement or retargeting purposes, which may be considered a "sale" or "sharing" under California law—see Section 7.2 for your opt-out rights.
We share information in the following circumstances:
We share information with trusted third-party service providers who help us operate the Service, including:
AI Model Providers
These providers process your inputs to generate AI responses. They operate under contractual obligations to protect your data.
Task and Automation Providers
What a given site receives is what completing your request requires, and that site's own privacy policy governs what it then does with it.
Infrastructure Providers
Payment Processing
Analytics
Advertising and Retargeting Partners
We may share certain information with advertising and analytics partners for purposes including:
These partners may include platforms such as Meta (Facebook/Instagram), Google Ads, and similar services. Information shared may include device identifiers, IP addresses, and usage data. This sharing may constitute a "sale" or "sharing" of personal information under California law—see Section 7.2 for your opt-out rights.
What We Do NOT Share with Advertising Partners:
We report suspected child sexual abuse material (CSAM) and child exploitation to:
We may disclose information when required by law, including:
If DNFT is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We may share information for other purposes with your explicit consent.
The Service uses artificial intelligence to process your messages and generate responses. Your inputs (messages, images, and so on) are sent to third-party AI model providers for processing. We use several, they change over time, and you can request the current categories at privacy@dnftinc.com.
AI providers may receive:
Our AI providers operate under contractual agreements that include data protection requirements. However, you should be aware that:
When the Service acts for you on a third-party site, the task itself runs on browser and automation infrastructure we use as a service provider. That provider sees the pages the task visits and anything the task types into them, including a sign-in you provide during the task.
If you connect an account so you do not have to sign in each time, the signed-in browsing session is held by that provider. What we store on our side is a reference to the connection and a record of which service you connected.
Disconnecting a service stops future access. It does not by itself delete what we already received from it. To disconnect, tell Shuffle in the conversation or use your connections settings. To also delete the connection and the data we received through it, email privacy@dnftinc.com, and we will handle it under Section 5.2.
Revoking Shuffle's access from inside the third-party service itself also works, and takes effect immediately on their side.
| Data Type | Retention Period |
|---|---|
| Message content | Duration of your account, plus up to 90 days after deletion |
| Conversation context/memory | Duration of your account |
| Account information | Duration of your account, plus up to 2 years for legal compliance |
| Memory and facts derived from your conversations | Duration of your account, or until you ask us to delete it |
| Records of tasks done on your behalf (what was asked, what happened, confirmations) | Duration of your account, plus up to 2 years for dispute resolution and abuse investigation |
| Connected-service references | Until you disconnect, plus up to 30 days to complete removal with the provider |
| Verification codes and credentials provided during a task | Only as long as the task needs them, then deleted. Never used for model training |
| Billing records | 7 years (legal/tax requirements) |
| Safety-related data | As long as necessary for safety, legal compliance, and investigations |
| Analytics data | Aggregated/anonymized data may be retained indefinitely |
You may request deletion of your data by contacting privacy@dnftinc.com. We will delete your data within 30 days, except where we are required or permitted to retain it for:
We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. These measures include:
Important Notice: No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your device and account credentials.
Features that act on your behalf carry their own risks. A task can go wrong in ways a chat reply cannot: an order placed incorrectly, a message sent to the wrong person, an unintended charge. Pages and documents the Service reads can also contain text written specifically to mislead an AI assistant into doing something you never asked for. We work to resist this and cannot promise we always will. Review what the Service does on your behalf, connect only the accounts you are comfortable having it use, and tell us at support@dnftinc.com if something happens that you did not ask for.
All users have the right to:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to Know
You have the right to request information about:
Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale/Sharing
We may share certain personal information (such as device identifiers and usage data) with advertising and analytics partners for retargeting and measurement purposes. Under California law, this may constitute a "sale" or "sharing" of personal information.
You have the right to opt out of the sale or sharing of your personal information.
To opt out:
We will process your request within 15 business days. Note: Opting out of sale/sharing does not affect our use of your data to provide the Service or for non-advertising purposes.
Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
"Shine the Light" (California Civil Code § 1798.83)
California residents may request information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
How to Exercise Your Rights
Submit requests to: privacy@dnftinc.com
We will verify your identity before processing requests. We will respond within 45 days (or 90 days for complex requests).
Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Contact us at privacy@dnftinc.com to exercise your rights.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing
We process your data based on:
International Transfers
Your data is processed in the United States. By using the Service, you consent to the transfer of your data to the United States, which may have different data protection laws than your country.
Data Protection Authority
You have the right to lodge a complaint with your local data protection authority.
Shuffle is an AI-powered messaging service that provides conversational AI assistance, image generation, information retrieval, reminders, games, and other features via SMS and iMessage. When you text our service number, you interact with an AI assistant that responds to your messages.
By providing your phone number and using the Service, you expressly consent to receive SMS and MMS messages from Shuffle at the phone number you provide. Messages fall into two categories:
Transactional Messages (required for Service operation):
Promotional Messages (optional):
Promotional messages require your express written consent. You may receive promotional messages if you opt in through our website or by texting a promotional keyword.
Consent to receive promotional messages is not required to use the Service or make a purchase.
Message frequency varies based on your usage:
Msg and data rates may apply. You are responsible for any charges from your mobile carrier. Contact your carrier for details about your messaging plan.
For help, visit our website or contact us at:
To stop receiving all messages and disable the Service for your phone number, text any of the following:
Important: Texting STOP will disable the entire Service for your phone number. You will no longer receive AI responses, transactional messages, or promotional messages.
To reactivate, send any message to our service number.
To opt out of promotional messages only (while keeping the Service active), email support@dnftinc.com with subject "Opt Out Promotions."
You may revoke your consent to receive messages at any time by texting STOP or contacting us. Revocation will take effect within 24 hours. Note that revoking consent will disable the Service, as messaging is required for the Service to function.
The Service is intended for users 13 years of age and older. Children under 13 are strictly prohibited from using the Service.
We do not independently verify the age of our users. We rely on users to self-represent their age accurately. By using the Service, you represent that you are at least 13 years old.
Users between 13 and 17 may use the Service only with parental or guardian consent and supervision. We do not verify parental consent; parents and guardians are solely responsible for:
We do not knowingly collect personal information from children under 13. If we obtain actual knowledge that we have collected information from a child under 13, we will immediately:
If you believe a child under 13 is using the Service, please report it immediately to:
Some browsers transmit "Do Not Track" (DNT) signals. There is no industry standard for how to respond to DNT signals. Currently, the Service does not respond to DNT signals. If a standard is adopted, we will update this policy.
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:
Your continued use of the Service after changes take effect constitutes your acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
General Privacy Questions:
Email: privacy@dnftinc.com
Data Deletion Requests:
Email: privacy@dnftinc.com
Subject Line: "Data Deletion Request"
Mailing Address:
DNFT, Inc.
Attn: Privacy
251 Little Falls Drive
Wilmington, DE 19808
Support:
Email: support@dnftinc.com
Website: https://addshuffle.com
Last Updated: September 8, 2026