Privacy Policy
Effective Date: August 18, 2026
Last Updated: August 18, 2026
App Name: Shugi
Operator: Joyful Labs LLC
Mailing Address: 2108 N St, Ste N, Sacramento, CA 95816
Contact: support@cupofshugi.com
This Privacy Policy explains how Joyful Labs LLC, a California limited liability company (“Joyful Labs,” “we,” “us,” or “our”), the operator of Shugi (“Shugi”), collects, uses, discloses, stores, and protects personal information when you use our app, website, pilot, or related services (the “Service”).
Shugi is an independently operated community platform that helps approved adult members of a trusted local group list, lend, borrow, give, request, and coordinate access to items. Shugi is not operated by, sponsored by, endorsed by, or affiliated with any school, school district, PTA, parent organization, or similar institution unless we expressly state otherwise in writing.
By using the Service, you acknowledge this Privacy Policy. If you do not want your information handled as described here, do not use the Service.
1. Scope of This Privacy Policy
This Privacy Policy applies to personal information we collect through the Service, including information collected when you:
- Create or update an account
- Request access to a private community
- Accept an invitation or access code
- Create, view, pause, retire, or update item listings
- Upload item photos, profile photos, descriptions, or notes
- Request to borrow or receive an item
- Approve, decline, lend, borrow, give, receive, or return an item
- Coordinate pickup, dropoff, return, or related logistics
- Send or receive messages related to items, requests, loans, or returns
- Submit feedback, gratitude notes, issue reports, or return confirmations
- Contact us for support, safety, privacy, or account help
- Use the Service in any other way
This Privacy Policy does not apply to third-party websites, apps, tools, or services that we do not own or control.
2. Information We Collect
We collect information you provide directly, information created through your use of the Service, information provided by other users or administrators, and limited technical information collected automatically.
Account Information
We may collect:
- Full name
- Email address
- Phone number, if provided
- Password, authentication credentials, or sign-in information
- Profile photo or avatar, if provided
- Community affiliation, such as school, neighborhood, parent group, classroom, grade, or other approved group
- Role, such as parent, guardian, staff, administrator, or community member
- Account status, such as pending, active, suspended, restricted, or removed
- Account settings and preferences
Community Access and Verification Information
To keep the Service limited to approved adult community members, we may collect information used to verify, approve, or manage access, such as:
- Invite code, referral source, or invitation source
- School, neighborhood, parent group, classroom, grade, or other community affiliation
- Admin approval status
- Notes related to access approval, community eligibility, safety, trust, or moderation
- Records showing who invited, approved, paused, or removed an account
We do not require child names by default, and users should not enter children’s names, photos, school schedules, or other child-related personal information unless specifically necessary and appropriate for a Service-related purpose.
Item Listing Information
When you create, edit, pause, retire, or manage a listing, we may collect:
- Item name
- Category
- Description
- Photos
- Condition information
- Availability status
- Maximum borrow duration
- Pickup, dropoff, or return notes
- Usage instructions
- Cleaning expectations
- Accessories, parts, chargers, manuals, bags, or attachments included
- Approximate value, value tier, or replacement information, if supported
- Listing confirmation records, including confirmations that the listing is accurate, that you are authorized to lend the item, and that you disclosed known defects or safety issues
- Listing activity, such as creation date, updated date, paused status, retired status, and last confirmed availability
Borrowing, Lending, Giving, and Return Information
When users interact around items, we may collect:
- Borrow requests
- Requested start and return dates
- Borrower notes
- Approval, decline, cancellation, completion, or return status
- Active loan records
- Due dates and overdue status
- Return confirmations
- Item history
- Giver and recipient records, where applicable
- Notes between borrower and lender
- Issue reports involving late, damaged, missing, unsafe, incomplete, or misrepresented items
- Administrative notes related to a request, loan, return, issue, or dispute
Messages and Communications
The Service may allow users to send messages or notes related to listings, requests, pickup, return, item condition, safety, or other community coordination.
We may collect:
- Message content
- Sender and recipient
- Timestamp
- Related item, request, loan, or return
- Attachments or photos, if supported
- Message status, such as sent, read, archived, hidden, or flagged
Shugi administrators and designated community administrators may be able to access messages and related records when needed for safety, support, moderation, dispute handling, policy enforcement, legal compliance, or Service operations.
Contact Information Shared Between Users
To help users coordinate an approved item interaction, the Service may share limited contact information between the relevant borrower and lender, giver and recipient, or other approved parties.
For example, after a request is approved, the other party may see information such as your name, phone number, email address, messages, request details, approved borrowing dates, and pickup or return notes. You should not share another user’s contact information outside the Service without that user’s permission.
We do not intend to publicly display exact home addresses. If you choose to include address, pickup, or dropoff details in a message or note, the other party may see that information.
Feedback, Gratitude, and Community Trust Information
The Service may allow users to submit feedback, gratitude notes, return confirmations, item condition comments, or issue reports.
We may collect:
- Whether an item was as described
- Whether an item was returned on time
- Whether an item was returned in similar condition
- Whether a user would lend to, borrow from, give to, or receive from another user again
- Thank-you notes or appreciation messages
- Private notes to administrators
- Reports of damaged, missing, late, unsafe, incomplete, or misrepresented items
- Records of moderation, trust, or safety decisions
Some feedback may be private to administrators. Some gratitude notes, acknowledgments, or community activity may be visible to other approved members if the feature is enabled.
Support, Safety, and Privacy Request Information
If you contact us, report a concern, or submit a request, we may collect:
- Your name
- Email address
- Phone number, if provided
- Message content
- Issue details
- Screenshots, attachments, or photos
- Records of our response
- Internal notes related to the request, safety concern, dispute, privacy request, or account issue
Usage, Device, and Technical Information
We may automatically collect limited technical and usage information, such as:
- Device type
- Browser type
- Operating system
- IP address
- Log data
- App interactions
- Pages or screens viewed
- Search queries within the Service
- Button clicks
- Referring page, invitation source, or access source
- Error reports
- Approximate location inferred from IP address
- Authentication, security, and session records
We do not collect precise location unless we expressly request it and you consent.
Cookies and Similar Technologies
If the Service is available through a website, we may use cookies, local storage, pixels, software development kits, or similar technologies to:
- Keep you logged in
- Remember preferences
- Improve security
- Understand Service usage
- Diagnose bugs
- Improve product performance
- Support analytics and Service operations
You may be able to manage cookies through your browser settings, but disabling cookies may affect Service functionality.
3. How We Use Information
We use personal information to operate, provide, improve, protect, and administer the Service.
We may use information to:
- Create and manage accounts
- Verify, approve, restrict, suspend, or remove community access
- Display item listings to approved members
- Help users request, lend, borrow, give, receive, return, and coordinate items
- Track active loans, due dates, returns, and item status
- Send notifications, reminders, confirmations, safety notices, policy updates, and administrative messages
- Enable messages between users
- Share relevant contact information after approved item interactions
- Show relevant community activity, if enabled
- Maintain item availability and catalog freshness
- Provide support
- Investigate bugs, errors, safety concerns, misuse, reports, or disputes
- Moderate listings, messages, requests, feedback, accounts, and community activity
- Enforce our Terms of Service and Community Guidelines
- Prevent fraud, abuse, unauthorized access, unsafe behavior, or misuse
- Improve the Service and develop new features
- Analyze usage, product performance, and community health
- Communicate about changes to the Service, Terms, Privacy Policy, or pilot status
- Comply with legal obligations and respond to lawful requests
We aim to collect and use only the information reasonably needed to provide, protect, and improve the Service.
4. Who Can See Your Information
Because the Service is designed for a private community, some information is visible to other approved members.
Other Approved Community Members May See
Depending on the feature and settings, other approved members may see:
- Your name
- Profile photo or avatar, if provided
- Community affiliation, if displayed
- Item listings you create
- Item photos and descriptions
- Item category, availability status, and maximum borrow duration
- General pickup or return notes you include in a listing
- Community activity related to listed items, if enabled
- Gratitude notes or public acknowledgments, if enabled and submitted for public display
Borrowers, Lenders, Givers, and Recipients May See
When you request, borrow, lend, give, or receive an item, the other party may see information needed to coordinate the interaction, such as:
- Your name
- Contact information, such as phone number or email address, if shared by the Service or provided by you
- Request details
- Approved borrowing dates
- Pickup, dropoff, or return notes
- Messages related to the item
- Return status
- Item-related notes needed to complete the interaction
- Issue-related information if a problem arises
Administrators May See
Shugi administrators and designated community administrators may see information needed to operate, moderate, protect, and support the Service, including:
- Account information
- Community affiliation and access records
- Listings
- Requests
- Loan, giving, and return records
- Messages or notes related to items
- Feedback, gratitude notes, issue reports, and private notes
- Reports or disputes
- Usage and activity records
- Support and privacy requests
- Moderation, safety, and trust records
Administrators should use this information only for appropriate Service, safety, moderation, community management, support, legal compliance, and operational purposes.
5. How We Share Information
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising unless we update this Privacy Policy and provide any legally required notices and choices.
We may share information in the following limited circumstances.
With Other Approved Users
We share information as needed to make the Service work, including showing listings, enabling requests, coordinating borrowing and lending, supporting returns, and supporting community trust.
With Administrators
We may share information with Shugi administrators or designated community administrators to manage access, listings, requests, active loans, returns, safety, disputes, support, moderation, and community health.
With Service Providers
We may share information with vendors and service providers who help us operate the Service, such as:
- Hosting providers
- Database providers
- Authentication providers
- Email, SMS, push notification, or messaging providers
- Analytics providers
- Customer support tools
- Security and monitoring tools
- File storage providers
- Development, testing, or error-monitoring tools
- Payment processors, if payments are added later
Service providers may use information only as needed to provide services to us, subject to their applicable obligations.
For Legal, Safety, and Compliance Reasons
We may disclose information if we believe it is reasonably necessary to:
- Comply with law, regulation, subpoena, court order, or legal process
- Enforce our Terms of Service or Community Guidelines
- Protect the rights, safety, or property of users, the community, the public, or Joyful Labs
- Investigate fraud, misuse, security incidents, reports, or safety concerns
- Respond to urgent or emergency situations
- Detect, prevent, or address security, technical, or operational issues
In Connection With a Business Transfer
If Joyful Labs is involved in a merger, acquisition, financing, reorganization, sale of assets, transfer of the Service, community handoff, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law and reasonable privacy considerations.
With Your Consent or Direction
We may share information in other ways with your consent or at your direction.
6. What We Do Not Intend to Do
Unless this Privacy Policy is updated to say otherwise, we do not intend to:
- Sell your personal information
- Share your personal information for cross-context behavioral advertising
- Allow children to create accounts
- Collect personal information directly from children under 13
- Require child names for account creation
- Publicly display your exact home address
- Conduct background checks
- Verify item safety, condition, legality, recall status, or suitability
- Use private messages for advertising targeting
- Share or sell your mobile phone number or SMS/text messaging opt-in consent with third parties or affiliates for their own marketing purposes
- Share your information with the school, district, PTA, parent organization, or similar institution as an official school record
7. Children’s Privacy
The Service is intended for adults only.
Children may not create accounts or use the Service directly. If the Service is associated with a school, parent, or community group, accounts must be created and used by adults, such as parents, guardians, staff, or other approved adult community members.
We do not knowingly collect personal information directly from children under 13. If we learn that we have collected personal information directly from a child under 13 without legally required consent, we will take reasonable steps to delete it.
Users should avoid entering children’s full names, photos of children, school schedules, classroom details, or other child-related personal information unless necessary and appropriate for the Service.
If you believe a child has provided personal information through the Service, contact us at support@cupofshugi.com.
8. Data Retention
We retain personal information for as long as reasonably necessary to provide the Service, operate the community, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.
Retention periods may vary depending on the type of information.
For example:
- Account information may be retained while your account is active and for a reasonable period after deactivation.
- Listings may be retained while active and for a reasonable period after removal, pause, retirement, or account closure.
- Borrowing, lending, giving, and return records may be retained to support return tracking, dispute handling, safety, moderation, and community accountability.
- Messages may be retained to support coordination, safety, moderation, dispute resolution, policy enforcement, and Service operations.
- Feedback, issue reports, and administrative notes may be retained as needed for safety, moderation, trust, and operational purposes.
- Technical logs may be retained for security, debugging, analytics, and fraud prevention.
- Deleted or deactivated accounts may remain in backups or limited records for a reasonable period.
If you request deletion of your account, we will delete or de-identify personal information where reasonably possible, subject to legal, safety, operational, backup, dispute-resolution, trust, security, and legitimate business needs.
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.
These safeguards may include:
- Authentication controls
- Access controls
- Secure hosting providers
- Encryption where appropriate
- Monitoring and logging
- Limited administrator access
- Security reviews and updates
- Backup, recovery, and incident-response practices
No method of transmission, storage, or electronic processing is completely secure. We cannot guarantee absolute security.
You are responsible for keeping your login credentials secure and for notifying us if you believe your account has been accessed without authorization.
10. Your Choices and Rights
Depending on where you live and applicable law, you may have rights related to your personal information.
You may request to:
- Access personal information we have about you
- Correct inaccurate information
- Delete your account or certain personal information
- Export certain information, where technically feasible
- Opt out of certain communications
- Limit certain uses or disclosures, where applicable
- Object to or restrict certain processing, where applicable
To make a request, contact us at support@cupofshugi.com.
We may need to verify your identity before responding. We may deny or limit requests where permitted by law, including where retention is necessary for safety, security, legal compliance, dispute resolution, fraud prevention, trust and safety, or Service operations.
Email, Push, and Other Notifications
You may opt out of non-essential marketing or community update emails by using the unsubscribe link or contacting us.
You may still receive transactional or administrative messages, such as account notices, access notices, request updates, loan reminders, return reminders, safety notices, privacy notices, and policy updates.
If push notifications are supported, you may be able to manage those notifications through your device settings, app settings, or by following instructions in the message.
SMS/Text Messaging
If you opt in, Shugi sends transactional text messages to the mobile phone number on your account — for example, when another member requests to borrow one of your items, or when someone responds to a borrow request you made.
- Opting in is optional and is not a condition of creating or using a Shugi account. You opt in by checking an unchecked consent box when you create your account or later in your account settings; we record the date and time of your consent.
- Message frequency varies and depends on your activity in the Service.
- Message and data rates may apply, depending on your mobile carrier and plan.
- To opt out at any time, reply STOP to any text message, or turn the setting off in your account settings. For help, reply HELP or contact us at support@cupofshugi.com.
- We do not share or sell your mobile phone number or your SMS/text messaging opt-in consent with third parties or affiliates for their own marketing purposes. Mobile information is used only to deliver the notifications described above and is shared only with the messaging service providers that help us send them, as described in "How We Share Information."
11. California Privacy Notice
This section applies to California residents to the extent required by applicable California privacy law.
California privacy laws may provide California residents with certain rights regarding personal information, including the right to know, access, delete, correct, and opt out of certain uses or disclosures of personal information.
Categories of Personal Information We May Collect
In the preceding 12 months, we may have collected the following categories of personal information:
- Identifiers, such as name, email address, phone number, account ID, IP address, device identifiers, or similar identifiers
- Customer records information, such as account and contact information
- Commercial or transaction-related information, such as item requests, lending records, giving records, return records, and loan history
- Internet or network activity, such as app usage, log data, search activity, and interactions with the Service
- Approximate geolocation information, such as location inferred from IP address
- Audio, electronic, visual, or similar information, such as item photos, profile photos, uploaded screenshots, and message attachments
- Professional, community, or affiliation information, such as role or community affiliation, if provided
- User-generated content, such as listings, photos, descriptions, messages, feedback, gratitude notes, issue reports, and support requests
- Inferences, such as community activity, catalog participation, or Service usage patterns
We collect this information for the purposes described in this Privacy Policy.
Sources of Personal Information
We collect personal information from:
- You
- Other users who interact with you through the Service
- Shugi administrators and designated community administrators
- Your device or browser
- Service providers
- Invite, referral, or access systems
Disclosure of Personal Information
We may disclose personal information to:
- Other approved community members
- Borrowers, lenders, givers, or recipients involved in an item interaction
- Shugi administrators and designated community administrators
- Service providers
- Legal, safety, or compliance recipients where necessary
- Successors, acquirers, or transferees in a business transfer or Service transfer
Sale or Sharing
We do not sell personal information.
We do not knowingly share personal information for cross-context behavioral advertising.
If this changes, we will update this Privacy Policy and provide any legally required notices and choices.
Sensitive Personal Information
We do not seek to collect sensitive personal information unless necessary for a specific Service purpose. Please do not submit sensitive personal information through the Service unless specifically requested.
California Privacy Rights
Subject to applicable law, California residents may request to:
- Know what personal information we collect, use, disclose, sell, or share
- Access personal information
- Delete personal information
- Correct inaccurate personal information
- Opt out of sale or sharing, if applicable
- Limit use of sensitive personal information, if applicable
- Not be discriminated against for exercising privacy rights
To exercise California privacy rights, contact us at support@cupofshugi.com.
We may need to verify your identity before completing a request. You may also designate an authorized agent to make a request on your behalf, subject to verification requirements.
Not all California privacy laws apply to all organizations. If a specific law does not apply to Joyful Labs, we may still choose to honor reasonable privacy requests where feasible.
12. Do Not Track and Global Privacy Controls
Some browsers or devices offer “Do Not Track” or similar signals. Because there is not a uniform industry standard for responding to Do Not Track signals, we may not respond to those signals unless required by law.
If we later sell personal information or share personal information for cross-context behavioral advertising, we will update this Privacy Policy and provide any legally required opt-out mechanisms, including recognition of legally required browser-based opt-out signals where applicable.
13. International Users
The Service is intended primarily for users in the United States.
If you access the Service from outside the United States, you understand that your information may be collected, stored, processed, and transferred in the United States or other countries where our service providers operate.
14. Third-Party Services
The Service may use or link to third-party services, such as authentication providers, hosting platforms, analytics tools, email tools, SMS tools, notification tools, storage providers, development tools, customer support tools, security tools, or payment processors if payments are added later.
Third-party services are governed by their own privacy policies and terms. We are not responsible for the privacy practices of third parties we do not own or control.
15. Pilot Status, Shutdown, and Community Transfer
The Service may operate as a limited pilot or experimental community tool.
If the pilot or Service is paused, transferred, or shut down, we may:
- Stop accepting new users
- Deactivate listings
- Notify users of shutdown timing
- Require active loans to be returned by a specific date
- Export certain records for administrative, legal, safety, dispute-resolution, or community handoff purposes
- Delete, anonymize, or retain certain information as described in this Privacy Policy
- Retain limited records where needed for legal, safety, dispute-resolution, accounting, trust, security, or operational purposes
If a community requests an export of listings or related records, we will consider privacy, consent, community expectations, and applicable law before providing any export.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If we make material changes, we will provide notice through the Service, by email, or by another reasonable method.
The updated Privacy Policy will be effective when posted or as otherwise stated in the notice.
Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated policy.
Version history: August 18, 2026 — renamed the Service to Shugi and identified Joyful Labs LLC as the operator. Previously effective July 29, 2026 (added the "SMS/Text Messaging" disclosures in Section 10 and a related item in Section 6) and June 10, 2026.
17. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at:
support@cupofshugi.com
Joyful Labs LLC
2108 N St, Ste N
Sacramento, CA 95816