Privacy
Your data is yours.
We built Shima to help people speak languages, not to harvest their data. This policy reflects that.
What we believe
Privacy is not a feature—it's a right. We collect only what we need to provide the service, we're transparent about what that is, and we don't do anything surprising with it. No fine print. No dark patterns. If something changes, we'll tell you plainly.
Individual learners
Practice data stays on your device. Your drill progress, session history, and mastery levels are stored locally on your device. We don't need them and we don't collect them.
No account required. You can use Shima without creating an account. If you choose to sync progress across devices, that data is stored in your iCloud account—not on our servers.
No analytics or tracking SDKs. We don't use third-party analytics, advertising frameworks, or tracking pixels. We don't build profiles. We don't fingerprint devices.
No data sales. Ever. We will never sell, rent, or share your personal information with third parties for advertising or marketing purposes. This is not a negotiable principle.
Institutional deployments
Scoped data collection. For institutional programs, we collect per-learner progress data (drill accuracy, session history, mastery levels) to enable program reporting. This data is scoped to the institutional deployment and is not shared outside it.
Your institution controls the data. Institutional administrators can export, review, and request deletion of all learner data associated with their deployment. Data handling is governed by the deployment agreement.
Data residency. Infrastructure can be configured for Canadian data residency on request. No learner data leaves the deployment boundary without explicit configuration.
Contact form
When you contact us through the website, we receive your name, email address, and message. We use this only to respond to your inquiry. We don't add you to marketing lists.
Compliance
Shima Learning Inc. is a Canadian company subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). We handle personal information in accordance with Canadian privacy law.
For institutional deployments handling sensitive data, a SOC 2 readiness review is planned prior to deployment.
Changes to this policy
If we make material changes to this policy, we'll update this page and note the date. We won't reduce your privacy protections without telling you.
Questions about your privacy? hello@goshima.co
Last updated: March 2026