Privacy policy

We collect as little as possible. If you create an account, we store your email address — that's how sign-in works, since we use one-time email links instead of passwords. If you save situations, we store which ones, so they appear in your account. If you subscribe, payment is handled entirely by Stripe; we never see or store your card details, only whether your subscription is active.

We use PostHog, hosted in the EU, to understand how the app is used: which pages are opened, whether the trial converts. We record event names only — never the content of what you're going through. There is no advertising, no data selling, and no third-party trackers beyond PostHog.

Analytics run without cookies that require a consent banner; nothing is stored on your device for tracking purposes.

If you opted into the daily verse email, every message includes an unsubscribe link, and unsubscribing is immediate.

You can ask us to delete your account and everything attached to it at any time by writing to us. Deletion is complete and permanent.

This policy names what we do plainly because you may be visiting on a hard day, and you shouldn't have to parse legal prose to know you're safe here.

Who we are: the data controller is Shalah Digital Ltd, registered in England and Wales (company number 17363038). Write to hello@shalah.app for anything in this policy.

Your rights: you can ask for a copy of the data we hold about you, have it corrected or deleted, receive it in a portable format, and object to or restrict how it is used. Email us and we will act on it — no forms, no fee.

Where data lives: our database and analytics are hosted in the EU. Stripe, our payment provider, processes payment data partly in the United States under recognised safeguards (standard contractual clauses and the UK addendum).

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority.