Privacy Policy — Shalev

This Privacy Policy explains what personal data the Shalev app ("Shalev", "the app", "we", "us") collects, why, and your rights over it. Shalev is a personal-assistant app that turns important emails and reminders into a short list of things that need you, and notifies you when they matter.

We have written this to be accurate to how the app actually works. If anything here is unclear, contact us (below).

1. Who is responsible (Controller)

Niv Chen
Israel
Email: niv.chen@gmail.com

For the purposes of the EU General Data Protection Regulation (GDPR), I am the data controller.

2. What we collect and why

Account data. When you create an account we store your email address and, for email/password sign-up, a salted, hashed password (we never store your password in plain text). If you use Sign in with Apple or Sign in with Google, we receive and store your email address (or Apple's private-relay address) and a stable user identifier. Purpose: to create and secure your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Your items, watches, chats and preferences. The to-do items you create or that the assistant distills for you, the "watches" you set up, your chat messages with the assistant, and your settings (quiet hours, brief time, timezone, alert sound, keywords). Purpose: to provide the core service. Legal basis: contract (Art. 6(1)(b)).

Google account data (only if you connect Google). With your explicit consent during Google sign-in, Shalev requests access to:

• Gmail (read, organise, and send). To find and read emails you asked it to watch, prepare a short summary in your daily brief, create draft replies, and — if you enable inbox cleanup — archive or label messages. Shalev can also send email on your behalf in two cases only: (a) actions you explicitly approve on the Approvals list (for example, a reply the assistant proposed), and (b) the monthly expense report, which is emailed to your own inbox. The assistant never sends email to a third party without your approval.
• Google Calendar (events). To show today's events in your brief and to create calendar events when you ask.
• Google Drive (read-only). Only when a task or question refers to a file in your Drive, to find and read that file. Shalev does not modify, delete, or share your Drive files.

We store the access/refresh tokens needed to do this on your behalf. Purpose: the features you enabled. Legal basis: your consent (Art. 6(1)(a)); you can withdraw it any time (Settings, or Google account permissions).

Recurring-expense data (Pro, only if you enable the expense tracker). With the expense tracker on, Shalev scans your Gmail for recurring invoice and subscription payments and stores, per detected service, the service name, amount, currency and payment date, together with your approve/ignore decisions. This produces your monthly summary and lets it learn which senders to track. We store this extracted metadata; we do not store the underlying email bodies. Legal basis: consent (Art. 6(1)(a)) / contract.

Push token. If you allow notifications, we store the Apple Push Notification device token to deliver alerts. Legal basis: consent / contract.

Usage and diagnostics. We record counts of assistant interactions and token usage per account to enforce plan limits, prevent abuse, and understand cost. Legal basis: legitimate interest (Art. 6(1)(f)) and contract.

Optional location. Only if you turn on "Share location with assistant", your approximate current position is sent together with a chat message so the assistant can help with directions and departure times. It is used for that message and is not stored on our servers. Legal basis: consent.

3. Data processed only on your device (never sent to us)

• Contacts. When you say "navigate to [name]", the app looks that name up in your device Contacts to find an address. This lookup happens entirely on your iPhone; your contacts are never transmitted to or stored by us.
• Voice. Speech is transcribed to text on your device by Apple's speech recognition. Only the resulting text is sent to the assistant; the audio never leaves your phone.
• Photos. When you attach a photo, it is downscaled on your device and sent to the assistant for one-time content extraction (see §4). We do not store the image after processing.

4. Third parties who process data for us (Sub-processors)

To run the service we share the minimum necessary data with:

Anthropic does not use data submitted through its API to train, retrain, or improve its models.
Where data is transferred outside the EU/EEA (e.g. to the USA), we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

We do not sell your personal data and do not use it for advertising.

5. Google API Limited Use disclosure

Shalev's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Gmail, Calendar and Drive data is used only to provide the user-facing features described above; it is not used for advertising, is not sold, and is not transferred to others except as needed to provide the service, comply with law, or with your consent. Human access to this data occurs only for security, to comply with law, or with your explicit consent.

This includes raw, aggregated, and derived data: Shalev does not transfer Google Workspace (or Photos) user data to any third-party artificial-intelligence or machine-learning service to create, train, retrain, or improve foundational or generalized AI/ML models. Our AI provider (Anthropic) processes this data under commercial API terms that prohibit training on it, and does not use API inputs or outputs to train, retrain, or improve its models.

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

6. How long we keep data

• Account, items, watches and preferences: until you delete them or your account.
• Chat history: retained to give the assistant short-term memory; you may clear it by deleting your account.
• We distill important emails into short items — we do not store your email bodies on our servers.
• Recurring-expense metadata (if you enable the expense tracker) is kept until you remove it in the app or delete your account.
• On account deletion we remove your personal data from our systems within 30 days, except where we must retain records to comply with law.

7. Your rights

Under the GDPR you have the right to: access your data; correct it; delete it ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time.

To exercise any right — including deleting your account and data — email niv.chen@gmail.com. You can disconnect Google access at any time in the app's Settings or via your Google Account's security settings.

8. Security

We protect data with encrypted transport (HTTPS), hashed passwords, per-user access isolation, and revocable OAuth tokens. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.

9. Children

Shalev is not directed to children. You must be at least 16 years old (or the age of digital consent in your country) to use it.

10. Changes

We may update this policy. Material changes will be notified in the app or by email, and the "Last updated" date above will change.

11. Contact

Questions or requests: niv.chen@gmail.com