Last updated: October 28, 2026
This Privacy Policy explains how Shai (“we,” “us,” or “our”), operated by Michael Garvey, collects, uses, discloses, and protects information when you use the Shai mobile application (the “App”). It should be read alongside our Terms of Service.
We designed Shai to collect as little personal data as possible while still delivering the App’s features.
1. Information We Collect
a) Information you provide directly
- Anonymous identifier: Shai has no accounts or sign-in. The first time you open the App it creates a random identifier on your device. It contains no personal information such as your name or email address. It is stored in your iCloud Keychain, so it is shared between devices signed in to the same Apple ID and can persist if you reinstall the App.
- Preferences: Mood, theme, narrator voice, and content preferences you select in the App.
- Support communications: If you email us for support, we retain that correspondence.
- Waitlist email (website): If you join the waitlist on shaistories.com, we collect the email address you enter and use it only to tell you about Shai’s launch and early access.
b) Information collected automatically
- Usage data: Which stories you play, playback duration, favorites, and app interactions. Some of this is stored on your device to operate core features (e.g., favorites, reward progress). We also collect product analytics events, linked only to your anonymous identifier, to understand how the App is used and to improve it.
- Synced preferences: Your favorites, narrator, story length and reward progress are synced between your devices using Apple’s iCloud key-value storage. This data is held by Apple in your iCloud, not by us.
- Device/technical data: Device type, operating system version, and crash/error logs, used for debugging and reliability.
- Subscription status: Whether you have an active Premium subscription, provided to us by Apple via StoreKit — we do not receive your payment card details.
c) Information we do not collect
- We do not collect or process your voice or biometric data. Story narration is pre-generated using AI voice synthesis (ElevenLabs) from written scripts — it does not involve or analyze your voice.
- We do not access your microphone, camera, contacts, or location.
- We do not knowingly collect personal information from children under 13.
2. How We Use Information
We use the information above to:
- Operate the App and sync your preferences across your devices
- Deliver and personalize app content (mood/theme/narrator selection, favorites, resume playback)
- Process and validate subscriptions
- Maintain app security and prevent abuse
- Respond to support requests
- Understand how the App is used (product analytics), improve app performance and fix bugs
- Send you launch and early-access updates, if you joined the waitlist
- Comply with legal obligations
We do not sell your personal information, and we do not use your data for third-party advertising or ad targeting.
3. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area or UK, we process your personal data under the following legal bases (GDPR Art. 6):
- Contract necessity — to provide the App and Premium features you’ve chosen to use
- Legitimate interests — to maintain and secure the App, and improve the product
- Consent — where required (e.g., for optional communications)
- Legal obligation — where required by law
4. Third-Party Service Providers
We share limited data with the following processors, solely to operate the App:
| Provider | Purpose | Data involved |
|---|---|---|
| Apple | App Store subscription billing; iCloud sync of your preferences and anonymous identifier | Subscription status; synced preferences and identifier (held in your iCloud) |
| PostHog | Product analytics | Anonymous identifier, in-app events, device type and OS version |
| Supabase | Hosting and delivery of story audio, video and images | Standard request data (such as IP address) when the App downloads content |
| Collecting waitlist sign-ups from our website (Google Apps Script); website fonts (Google Fonts) | The email address you enter; your IP address when fonts load | |
| ElevenLabs | AI voice synthesis used by us to produce narration content | Not applicable to your personal data — used only in content production, not on user data |
Each provider processes data under their own privacy policies and, where required, under data processing agreements with us. We do not permit these providers to use your data for their own independent purposes.
5. International Data Transfers
Our service providers may process and store data in the United States or other countries outside your country of residence. Where we transfer personal data from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses, to the extent required by applicable law.
6. Data Retention
Because Shai has no accounts, we keep anonymous usage and analytics data for as long as it is useful to operate and improve the App, and waitlist emails until launch communications are complete. If you ask us to delete your data, we will delete or anonymize it within 30 days, except where we are required to retain certain records for legal, tax, or fraud-prevention purposes.
7. Your Rights
If you are in the EEA/UK (GDPR):
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to certain processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with your local data protection authority
If you are a California resident (CCPA/CPRA):
You have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information as defined under CCPA
- Non-discrimination for exercising these rights
To exercise any of these rights, contact us at hello@shaistories.com. Because we do not hold your name or contact details, we may need to ask you for information that helps us locate data linked to your device before fulfilling a request.
8. Data Deletion
Shai has no accounts to delete. Deleting the App removes the data stored on your device. Data synced through iCloud can be managed in your Apple ID’s iCloud settings, and because your anonymous identifier is kept in iCloud Keychain, it may remain after you delete the App. To have us delete the analytics data linked to your anonymous identifier, or your waitlist email, email hello@shaistories.com. We will process your request within 30 days, subject to the retention exceptions noted in Section 6.
9. Children’s Privacy
Shai is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal data from a child under 13 without parental consent, we will delete it promptly. Parents who believe their child has provided us with personal information can contact us at hello@shaistories.com.
10. Data Security
We use reasonable administrative, technical, and physical safeguards (including those provided by Supabase’s infrastructure) to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Cookies & Tracking (Website)
The Shai website does not use advertising cookies or trackers. When you tap a share button, we record an anonymous event (which button was tapped) with our analytics provider, PostHog, without cookies, local storage, or any persistent identifier. Your IP address may be visible to PostHog when the event is sent. The page loads fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads. The waitlist form sends your email address to us when you submit it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the App or by email before they take effect.
13. Contact Us
For privacy questions or to exercise your rights, contact:
This document is a template draft and has not been reviewed by an attorney. Given planned EU/UK and California usage, we recommend legal review before public launch.