Privacy Policy
Shora — AI-Powered Emotional Wellness
Last updated: September 2026
What We Collect
- Account info: Email address (if you register), display name.
- Mood & journal data: Mood check-in responses, journal entries, and sentiment vectors derived from your text.
- Session data: Which sessions you complete, duration, and post-session feedback.
- Device info: Device locale/language preference for personalization.
How We Use It
- To personalize session recommendations using our Thompson Sampling algorithm.
- To generate guided audio via text-to-speech services.
- To track your streaks, stats, and progress.
- To improve the app experience based on aggregated, anonymized usage patterns.
Analytics & Diagnostics
To understand how Shora is used and keep it stable, the app collects
usage analytics (Firebase Analytics: events such as sessions started and
completed, screens viewed, and feature usage, tied to a pseudonymous user
and app-instance identifier, never your journal text or reflections),
crash reports (Firebase Crashlytics: crash stack traces and device
state), and performance data (Firebase Performance Monitoring: app start
and network timings).
You can turn either off at any time in the app under
Profile → gear icon → Privacy. "Share usage
analytics" and "Send crash reports." The same screen shows your User ID,
which you can include in support requests so we can help you faster.
Third-Party Services
- Firebase (Google): Authentication, database, storage, hosting, analytics, crash reporting, and performance monitoring.
- ElevenLabs: Text-to-speech audio generation (your personal data is not sent; only session script text).
- Google Vertex AI: Sentiment analysis of journal text (processed server-side).
- RevenueCat: Subscription and purchase management.
- OneSignal: Push notification delivery. Receives your User ID, a device push token, your app language, a few non-identifying flags we use to choose which reminder wording to send, and the text of the notification itself, which can include your practice streak. Their SDK also records standard device and connection details such as device model, operating system version, time zone and IP address. We never send journal entries, reflections, or the name of a mood you picked.
Data Storage & Security
Your data is stored in Google Cloud (Firebase) with encryption at rest and in transit. We do not sell your data to third parties.
Account Deletion
You can delete your account and all associated data at any time:
Deletion removes your profile, journal entries, session history, audio cache, and subscription. If you signed in with Apple, your Apple token is revoked. The action is immediate and cannot be undone.
Contact
Questions? Email us at support@shoraapp.com
