Legal

Privacy Policy

Last updated August 22, 2026

This policy explains what information Shai (“Shai”, “we”) collects when you use our web app, mobile app, or website, why we collect it, and the choices you have. Shai connects members with vetted experts by text, voice, and live video, and handles the payments and identity checks that make that possible.

Information we collect

Account information. Name, email address, and password (stored hashed, never in plain text) when you sign up. Your device timezone, used to show accurate availability and scheduling.
Expert profile information. If you apply to become an expert: your bio, specialties, languages, rates, cover image, and general location (city/country) — all shown publicly on your profile.
Identity verification documents. Experts submit a government ID, a selfie, and short liveness-check frames so a real person can confirm you are who you say you are. These are stored encrypted in private cloud storage, are reviewed by our team, and are permanently deleted no more than 90 days after review — see Retention below.
Payment and payout information. Checkout and expert payouts are handled entirely by Stripe. Shai never sees or stores your card number; expert payouts route through a Stripe Connect account rather than a bank number we hold ourselves.
Two-factor authentication. If you turn on 2FA, your authenticator secret is encrypted at rest and your backup codes are stored hashed, the same way a password is.
Content you send. The text, voice recordings, and video calls exchanged between members and experts through the product.
Support contact details. If you email us or a business inquiry is logged, we keep your name, email, and phone number for that conversation.

How we use it

To create and secure your account, and to keep you signed in.
To verify expert identity before a Verified badge is ever granted — always by a human reviewer, never automatically.
To process payments and route expert payouts, through Stripe.
To connect calls (through Daily.co) and deliver notifications about new messages, bookings, and answers.
To investigate fraud, abuse, or safety reports, and to enforce our terms.
To diagnose and fix technical errors — our error monitoring captures what broke, not the content of your messages.

Cookies

Shai’s web app uses a small number of first-party cookies to make the product work — there is no advertising or cross-site tracking cookie on this site today:

Session cookie. An httpOnly cookie that keeps you signed in. It can’t be read by page scripts and is the only reason a cookie exists at all for most visitors.
Presence cookie. A short-lived cookie used to show when you’re online, for members and experts who are mid-conversation.

Both are strictly necessary for the app to function and can’t be turned off without signing out. If that changes — for example if we ever add analytics or advertising cookies — this section will be updated first, and you’ll be asked again.

We don’t sell your data. We share only what each of the following needs to do its job:

Stripe — checkout and expert payouts.
Daily.co — live video calls.
Amazon S3 (or an S3-compatible provider) — encrypted storage for uploaded photos, voice answers, and verification documents.
Email delivery (SendGrid or Resend) — transactional email, like receipts and password resets.
Expo — delivering push notifications to the mobile app.
Sentry — error monitoring, so we can find and fix bugs.

Retention

Identity verification documents are deleted no more than 90 days after your submission is reviewed.
Usage/analytics events are kept for up to 365 days.
Closing your account deactivates it immediately and removes your profile from public view. Underlying records are kept for a limited period afterward where needed for security, fraud prevention, or a legal obligation, then removed.

Your rights

You can ask us for a copy of the personal data we hold about you, or ask us to delete your account, at any time by contacting us below. We’ll respond within a reasonable time and may need to verify your identity first.

Children

Shai is not directed at children under 18, and we don’t knowingly collect data from them.

Changes to this policy

If we materially change how we collect or use your data, we’ll update the date at the top of this page and, where the change is significant, let you know directly.

Contact us

Questions about this policy or your data: hello@shaiet.app. Already a member and need help with your account? support@shaiet.app.