Privacy Policy

This translation is provided for convenience only; the Hebrew text is the binding version.

This Privacy Policy explains what information is collected in the Shoko app and related services, how we use it, and how we protect it. The service is operated by Felix Peleg — Clinical Dietitian (licensed sole proprietor) ("we"). Using the service constitutes your acceptance of this policy.

Last updated: August 2026.

1. What information we collect

• Account details: Name, email address, phone (optional), and sign-in methods (encrypted password, or Google/Apple ID for social login).
• Nutrition and health data you enter: Gender, age/date of birth, height, weight, body measurements, activity level, goals, dietary preferences and restrictions, food log, weigh-ins, and metrics.
• Synchronized health data: With your explicit consent, data from Apple Health or Google Health Connect — steps, active energy, workouts, sleep, resting heart rate, and body metrics.
• Chat messages: Your conversations with the automated assistant, used to provide answers and personalize the experience.
• Device and usage information: Device type and OS, app version, language, notification identifier (push token), IP address, and usage/analytics data (including anonymous session recordings to improve the product).
• Payment information: When purchasing a subscription — billing details are processed directly by the payment provider. We do not store the full credit card number; a secure token is kept for recurring charges, along with invoice details.

2. Health data (Apple Health / Google Health)

Health data sync happens only after you grant explicit device permissions and can be disconnected at any time. This data is used solely to display, track, analyze, and tailor goals and recommendations for you. We do not use health data for advertising, do not sell it, and do not share it with third parties for marketing. You can revoke access via your device settings or the profile screen in the app.

3. How we use the information

• Operating the service, calculating targets, tracking, and showing your progress.
• Providing personalized chat responses and improving recommendations.
• Account, subscription, and billing management, and issuing invoices.
• Sending service notifications and alerts (you can disable them).
• Security, abuse prevention, and product improvement.

4. AI-based processing

To recognize foods and answer chat queries, some content (for example, a meal description or question) is processed by an AI provider (OpenAI). The information is sent only for this processing purpose.

5. Sharing information with providers

We do not sell personal information. We use service providers (data processors) solely to operate the service, including: AI provider (OpenAI), Apple and Google (login and health data), email service (SendGrid), payment processor (HYP/Yaad), invoicing service, cloud and infrastructure services (including storage and databases), and analytics/notifications (Firebase, Microsoft Clarity). These providers are obligated to protect the data and use it only to deliver the service. We may also disclose information if required by law or court order.

6. Cookies and local storage

We use cookies and local storage (localStorage) for login, saving preferences, and proper operation of the service.

7. Data security

We take reasonable measures to secure information (encryption in transit, encrypted passwords, access permissions). However, no method guarantees absolute security, and we cannot promise it.

8. Data retention

We retain information while your account is active and as needed to provide the service, meet legal obligations (for example, retaining invoices), and protect our rights. When you delete your account, we will delete or de-identify personal information, except for what must be retained by law.

9. Your rights

Under the Israeli Privacy Protection Law, 1981, you have the right to review information collected about you, request correction if it is inaccurate, and request deletion. Some information can be edited directly in the app (profile, metrics), and you can delete your account. For requests: [email protected].

10. Transfers outside Israel

Some service providers operate outside Israel (for example, in the US/EU). By using the service, you agree to the transfer and processing of information in those countries, subject to reasonable safeguards.

11. Minors

The service is not intended for children under 16. We do not knowingly collect information from children under this age. If you become aware of such information, please contact us to remove it.

12. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with the revision date.

13. Team and agent use (ShokoDesk)

Alongside the Shoko customer app, we also operate the "ShokoDesk" app — an internal tool for our service and support team, available only to authorized agents and not open for self-registration. This section applies to the use of ShokoDesk, in addition to the rest of this policy.

• Agent account information: Name, email address, and password (encrypted) to sign in to a pre-created account in the admin console, notification identifier (push token) and device information, plus crash diagnostics for app stability.
• Customer data displayed in ShokoDesk: For support purposes, the app displays to authorized agents customer contact details (name, phone, email) and conversation content across managed channels (WhatsApp, Instagram, Facebook, email, and in-app chat), as well as subscription status. This information is displayed and transmitted to the agent solely to serve the customer — and is not collected from the agent.
• Access control: Access to customer data in ShokoDesk is role-based and limited — each agent sees only the information required for their role, and team actions in the system are logged.
• Biometric lock: You can lock ShokoDesk with Face ID/Touch ID for device security only. Biometric verification happens locally on the device — we do not receive, store, or transmit any biometric data.
• Confidentiality: Team members with access to ShokoDesk are bound by confidentiality and use customer information solely to provide support, in accordance with this Privacy Policy.

ShokoDesk contains no advertising, does not run marketing trackers, and does not use analytics/screen recording tools as found in the customer app.

14. Contact

For questions about privacy and your data: [email protected]. For general inquiries: [email protected].