Last updated: 8 July 2026
This Privacy Policy explains what personal data the Shalev app (“Shalev”, “the app”, “we”, “us”) collects, why, and your rights over it. Shalev is a personal-assistant app that turns important emails and reminders into a short list of things that need you, and notifies you when they matter.
We have written this to be accurate to how the app actually works. If anything here is unclear, contact us (below).
Zeitgeist LLC, Germany.
For the purposes of the EU General Data Protection Regulation (GDPR) and the German Bundesdatenschutzgesetz (BDSG), the above is the data controller.
Account data. When you create an account we store your email address and, for email/password sign-up, a salted, hashed password (we never store your password in plain text). If you use Sign in with Apple or Sign in with Google, we receive and store your email address (or Apple’s private-relay address) and a stable user identifier. Purpose: to create and secure your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Your items, watches, chats and preferences. The to-do items you create or that the assistant distills for you, the “watches” you set up, your chat messages with the assistant, and your settings (quiet hours, brief time, timezone, alert sound, keywords). Purpose: to provide the core service. Legal basis: contract (Art. 6(1)(b)).
Google account data (only if you connect Google). With your explicit consent during Google sign-in, Shalev requests access to:
We store the access/refresh tokens needed to do this on your behalf. Purpose: the features you enabled. Legal basis: your consent (Art. 6(1)(a)); you can withdraw it any time (Settings, or Google account permissions).
Push token. If you allow notifications, we store the Apple Push Notification device token to deliver alerts. Legal basis: consent / contract.
Usage and diagnostics. We record counts of assistant interactions and token usage per account to enforce plan limits, prevent abuse, and understand cost. Legal basis: legitimate interest (Art. 6(1)(f)) and contract.
Optional location. Only if you turn on “Share location with assistant”, your approximate current position is sent together with a chat message so the assistant can help with directions and departure times. It is used for that message and is not stored on our servers. Legal basis: consent.
To run the service we share the minimum necessary data with:
| Provider | What it processes | Where |
|---|---|---|
| Anthropic (Claude AI) | Your chat messages, item text, attached photos, and email/calendar content you ask the assistant to work with — to generate responses | USA |
| Your Gmail/Calendar data, via the access you granted | USA/EU | |
| Supabase (database) | Your account, items, watches, chats, preferences | EU (Frankfurt) |
| Vercel (app backend hosting) | Requests to our servers | USA/EU edge |
| Apple (APNs, Sign in with Apple) | Push delivery, Apple login | USA/EU |
| Brave Search | Web-search queries you trigger (not tied to your identity) | USA |
Anthropic does not use data submitted through its API to train its models.
Where data is transferred outside the EU/EEA (e.g. to the USA), we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
We do not sell your personal data and do not use it for advertising.
Shalev’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Gmail and Calendar data is used only to provide the user-facing features described above; it is not used for advertising, is not sold, and is not transferred to others except as needed to provide the service, comply with law, or with your consent. Human access to this data occurs only for security, to comply with law, or with your explicit consent.
Under the GDPR you have the right to: access your data; correct it; delete it (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority (in Germany, your state Data Protection Authority; for North Rhine-Westphalia, the LDI NRW).
To exercise any right — including deleting your account and data — please visit our Support page. You can disconnect Google access at any time in the app’s Settings or via your Google Account’s security settings.
We protect data with encrypted transport (HTTPS), hashed passwords, per-user access isolation, and revocable OAuth tokens. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.
Shalev is not directed to children. You must be at least 16 years old (or the age of digital consent in your country) to use it.
We may update this policy. Material changes will be notified in the app or by email, and the “Last updated” date above will change.
Questions or requests? Visit our Support page.