← Back to Home

Privacy Policy

Last Updated: February 8, 2026

Overview

This privacy policy covers all applications built and maintained under the Ship or Sink brand by Brandon Mann. We believe in transparency and simplicity — your data is yours, and we collect only what's necessary to make our apps work.

TL;DR: We don't sell your data. We don't run ads. We don't track you across the internet. Most data stays on your device or in your private account.

App-Specific Data Collection

Paceometer

A driving pace calculator that shows time cost of speeding.

  • Location data: GPS speed and coordinates are used in real-time to calculate your pace. This data is processed entirely on your device and is never transmitted to our servers.
  • Trip data: Trip distance, duration, and pace calculations are stored locally on your device only.
  • No accounts required. No data leaves your phone.

Vault

AI-powered document intelligence and storage.

  • Documents: Files you upload are stored in your private, authenticated account via Supabase (SOC 2 compliant infrastructure).
  • AI Processing: Document content may be sent to Anthropic's Claude API for AI analysis. Anthropic does not use this data for training.
  • Authentication: Email and password for account access.

Tick PM

Kanban-style project management.

  • Task data: Your boards, tasks, and project information are stored in your private, authenticated account.
  • No third-party sharing. Task data is never shared with external services.
  • Authentication: Email and password for account access.

OKR Dashboard

Objective and Key Result tracking.

  • OKR data: Your objectives, key results, and check-ins are stored in your private, authenticated account.
  • Cross-app integration: If you link Tick PM tasks to key results, task completion data is read from your Tick PM account (same database, same authentication).
  • Authentication: Email and password for account access.

Change Management

AI-powered change management coaching and stakeholder tracking.

  • Stakeholder data: Names, roles, sentiment scores, and ADKAR assessments are stored in your private, authenticated account.
  • AI Coach: Conversation data with the AI Coach may be sent to Anthropic's Claude API. Anthropic does not use this data for training.
  • Authentication: Email and password for account access.

Tastd

Food journaling and restaurant tracking.

  • Location data: Used for restaurant search via Google Places API. Location is sent to Google to return nearby results.
  • Journal entries: Your food ratings and notes are stored in your private, authenticated account.
  • Photos: If you upload food photos, they are stored in your private account.

The Hub

Central command dashboard for the Business Suite.

  • Aggregated data: The Hub reads data from your other suite apps (Vault, Tick PM, OKR, Change Management) to display a unified dashboard. No additional data is collected.
  • Authentication: Same account as your suite apps.

Infrastructure & Security

All web-based suite apps (Vault, Tick PM, OKR Dashboard, Change Management, The Hub) use the following infrastructure:

Database & Auth: Supabase (SOC 2 Type II compliant). All data is encrypted at rest and in transit.

Hosting: Vercel (SOC 2 Type II compliant). All connections use TLS 1.3 encryption.

AI Processing: Anthropic Claude API (SOC 2 Type II compliant). AI providers do not use your data for model training.

Architecture: All database operations are handled through authenticated API routes using service role keys. Your browser never directly communicates with the database. User identity is verified via JWT tokens on every request.

What We Don't Do

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. We do not display ads in any of our applications. We do not use tracking cookies or cross-site analytics beyond basic page view counts via Google Analytics on shiporsink.ai. We do not retain AI conversation data — queries are processed and discarded.

Third-Party Services

Google Analytics: Used on shiporsink.ai (this website) for anonymous traffic statistics. Not used within individual apps.

Google Places API: Used in Tastd for restaurant search. Google's privacy policy applies to location queries sent through this service.

Anthropic Claude API: Used for AI features in Vault, Change Management, and future apps. Anthropic's usage policy prohibits training on API data.

Supabase: Provides authentication and database services. Data is stored in US-based data centers with SOC 2 Type II certification.

Your Rights

You can request a full export of your data at any time by contacting us. You can delete your account and all associated data by contacting us. For apps with local-only storage (Paceometer), uninstalling the app removes all data. We respond to all data requests within 30 days.

Children's Privacy

Our applications are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Contact

For any privacy-related questions, data export requests, or account deletion requests:

Email: brandon@shiporsink.ai

Website: shiporsink.ai

Changes to This Policy

We may update this policy as we ship new apps or add features. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our applications after changes constitutes acceptance of the updated policy.