Last updated: [DATE]
This Privacy Policy explains how Shai (“we,” “us,” or “our”), operated by Michael Garvey [UPDATE TO ENTITY NAME ONCE FORMED], collects, uses, discloses, and protects information when you use the Shai mobile application (the “App”). It should be read alongside our Terms of Service.
We designed Shai to collect as little personal data as possible while still delivering the App’s features.
1. Information We Collect
a) Information you provide directly
- Account information: When you sign up via Sign in with Apple or Sign in with Google, we receive a unique identifier and, depending on your privacy choices with Apple/Google, your name and email address (Apple’s “Hide My Email” relay address is supported).
- Preferences: Mood, theme, narrator voice, and content preferences you select in the App.
- Support communications: If you email us for support, we retain that correspondence.
b) Information collected automatically
- Usage data: Which stories you play, playback duration, favorites, and app interactions, used to operate core features (e.g., resuming a story, favorites, streaks).
- Device/technical data: Device type, operating system version, and crash/error logs, used for debugging and reliability.
- Subscription status: Whether you have an active Premium subscription, provided to us by Apple via StoreKit — we do not receive your payment card details.
c) Information we do not collect
- We do not collect or process your voice or biometric data. Story narration is pre-generated using AI voice synthesis (ElevenLabs) from written scripts — it does not involve or analyze your voice.
- We do not access your microphone, camera, contacts, or location.
- We do not knowingly collect personal information from children under 13.
2. How We Use Information
We use the information above to:
- Create and maintain your account
- Deliver and personalize app content (mood/theme/narrator selection, favorites, resume playback)
- Process and validate subscriptions
- Maintain app security and prevent abuse
- Respond to support requests
- Improve app performance and fix bugs
- Comply with legal obligations
We do not sell your personal information, and we do not use your data for third-party advertising or ad targeting.
3. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area or UK, we process your personal data under the following legal bases (GDPR Art. 6):
- Contract necessity — to provide the App and Premium features you’ve signed up for
- Legitimate interests — to maintain and secure the App, and improve the product
- Consent — where required (e.g., for optional communications)
- Legal obligation — where required by law
4. Third-Party Service Providers
We share limited data with the following processors, solely to operate the App:
| Provider | Purpose | Data involved |
|---|---|---|
| Apple | Sign in with Apple; App Store subscription billing | Apple ID identifier, subscription status |
| Sign in with Google | Google account identifier, email (if shared) | |
| Supabase | Backend hosting, account data storage, content delivery | Account data, usage data |
| ElevenLabs | AI voice synthesis used by us to produce narration content | Not applicable to your personal data — used only in content production, not on user data |
Each provider processes data under their own privacy policies and, where required, under data processing agreements with us. We do not permit these providers to use your data for their own independent purposes.
5. International Data Transfers
Our service providers may process and store data in the United States or other countries outside your country of residence. Where we transfer personal data from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses, to the extent required by applicable law.
6. Data Retention
We retain your account and usage data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within [30] days, except where we are required to retain certain records for legal, tax, or fraud-prevention purposes.
7. Your Rights
If you are in the EEA/UK (GDPR):
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to certain processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with your local data protection authority
If you are a California resident (CCPA/CPRA):
You have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information as defined under CCPA
- Non-discrimination for exercising these rights
To exercise any of these rights, contact us at [SUPPORT EMAIL]. We may need to verify your identity before fulfilling a request.
8. Account & Data Deletion
You can request full deletion of your account and associated data by [using the in-app “Delete Account” option in Settings / emailing [SUPPORT EMAIL]]. This will delete your account credentials, preferences, and usage history from our systems, subject to the retention exceptions noted in Section 6.
9. Children’s Privacy
Shai is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal data from a child under 13 without parental consent, we will delete it promptly. Parents who believe their child has provided us with personal information can contact us at [SUPPORT EMAIL].
10. Data Security
We use reasonable administrative, technical, and physical safeguards (including those provided by Supabase’s infrastructure) to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Cookies & Tracking (Website)
If this policy is also published on our website, our website may use essential cookies for basic functionality.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the App or by email before they take effect.
13. Contact Us
For privacy questions or to exercise your rights, contact:
[SUPPORT EMAIL]
[MAILING ADDRESS, IF PROVIDED]
This document is a template draft and has not been reviewed by an attorney. Given planned EU/UK and California usage, we recommend legal review before public launch.