sho.run is built local-first. Your show runs on your device, and the app collects only the minimum needed to give you an account, process purchases, keep it healthy, and (if you opt in) email you about the beta. The app uses no advertising identifiers and does not track you across other apps. This website uses cookies for analytics and, with your consent, advertising pixels — see “Cookies & website analytics” below. We do not sell your personal data.
The short version: show and stage files stay on your device. Personal data that leaves your device is limited to what's needed for your account, purchases, analytics, diagnostics, and beta email — handled by a small set of trusted processors over encrypted connections. On this website, we set no analytics or advertising cookies until you accept them.
Who we are
This service is operated by sho.run LLC (“sho.run,” “we,” “us”). You can reach us at [email protected] or by mail at sho.run LLC, 525 Courtney Way, Lafayette, CO 80026.
Information we collect
We keep this deliberately small:
- Account info — your email address, and (if you use Sign in with Apple or Google) the name those services return. Authentication is handled through Supabase; a Supabase user ID anchors your account across devices.
- Purchase info — subscription and trial status and store receipts, so we can unlock paid tiers and restore purchases. Payments are processed by Apple, Google, and RevenueCat; we never see your card number.
- Product analytics — a small set of in-app events (for example, trial started, fixture-limit reached, waitlist joined) via PostHog, so we can understand what's working. Anonymous until you sign in.
- Beta & email — if you join the beta or waitlist, your email and a few profile fields go to Klaviyo so we can send beta updates you can unsubscribe from anytime.
- Diagnostics — crash reports via Sentry to keep the app stable. These are scrubbed of personal information and are not linked to your identity.
What stays on your device
The following never leave your device unless you choose to export or send them:
- Your show and stage files (
.sho/.stage) and packs — stored locally. - Microphone audio — used only for on-device audio-reactive visuals; never recorded or transmitted.
- Photos and camera — used only for on-device media import or as a live visual source; frames are not uploaded.
- Local network access — used to discover and control DMX/AV gear on your LAN. This is not location data and is not sent off your network.
We do not collect location, and we use no advertising identifier (no IDFA, no Android Advertising ID).
How we use information
We use the data above to: provide and maintain your account; unlock and restore purchases; keep the app stable and fix bugs; understand product usage in aggregate; and, if you opt in, send beta and product email. We do not use your in-app data for third-party advertising.
Cookies & website analytics
This website (separate from the app) uses cookies and similar technologies. When you first visit, we ask for your consent. Until you accept, we set no analytics or advertising cookies and collect no data through these tools:
- Google Analytics 4 — aggregate traffic and page analytics.
- Meta Pixel — measures the effectiveness of our Facebook/Instagram ads and may be used for retargeting; this shares limited event data with Meta.
- PostHog — first-party website/product analytics.
- Klaviyo onsite — associates site activity with your email profile if you're a subscriber, and powers onsite forms.
You can change your choice anytime using the Cookie settings link in the footer. If you decline, we load only what's strictly needed to serve the page. Essential cookies (such as remembering your consent choice) don't require opt-in.
Who we share it with
We share data only with service providers that process it on our behalf, over encrypted (TLS) connections: Supabase (accounts), RevenueCat and the Apple / Google stores (purchases), Klaviyo (email), PostHog (analytics), and Sentry (diagnostics). We do not sell your personal information and we do not share it with data brokers or for cross-app tracking.
Data retention & security
We keep personal data for as long as your account is active or as needed to provide the service, then delete or anonymize it. All data in transit is encrypted over HTTPS/TLS. Diagnostic data is time-boxed and not linked to you. No system is perfectly secure, but we work to protect your information and limit what we collect in the first place.
Your choices & rights
You can request access to, correction of, or deletion of your personal data at any time. Delete your account and data in-app (Settings → account) or via our Data Deletion page. You can unsubscribe from beta/marketing email using the link in any email or by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; email [email protected] to exercise them.
Children's privacy
sho.run is intended for adults and is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy as the product evolves. We'll revise the “last updated” date above and, for material changes, provide a more prominent notice.
Contact
Questions about privacy? Email [email protected] or write to sho.run LLC, 525 Courtney Way, Lafayette, CO 80026.