Privacy Policy
Shenn is an educational guide to traditional medicine and modern research. You may type in health questions, medications you take, and journal notes. This page says what we store, who processes it, how long we keep it, and how you delete it. We write it plainly on purpose.
What we store
Your account
- Email address and display name.
- A password hash (bcrypt) if you signed up with a password, or your Google account identifier if you used Google Sign-In. We never see your Google password.
- A profile photo, if you uploaded one. It is stored under a random file name on our server.
- Your language, colour theme and plan.
What you create in the app
- Chats: your questions, the answers, and the sources each answer cited.
- Journal entries: notes you write and answers you save, with any tags.
- Your medications list, used only to check herb–drug interactions for you.
- Protocols you start and your check-ins (symptom ratings and notes).
- Your daily insight, cached for the day it was generated.
Operational records
- A count of your requests per day, used for daily limits. Counts older than 60 days are deleted by an hourly cleanup.
- Sign-in session tokens, stored hashed. Signing out, or the routine replacement of a token on refresh, marks the token revoked rather than deleting it; the row is deleted by the hourly cleanup once the token's 30-day expiry has passed.
- Server request logs (addresses, paths, timestamps) kept by the hosting stack for troubleshooting. Owner to confirm the retention period.
Shenn has no advertising, no analytics or tracking scripts, and does not sell or share your data for marketing.
Who processes it
| Processor | What it receives | Why |
|---|---|---|
| Our server (Amazon Web Services, Canada Central region, Montréal) | Everything above | Hosting and storage |
| Ollama Cloud (DeepSeek model), with OpenRouter as a fallback when the first is unavailable | Your question, recent turns of the same conversation, the passages retrieved from our library to answer it, up to five of your journal entries whose saved text, notes or herb name contains the text of the question being answered (so the answer can refer to what you have saved), and any herb–medicine interaction warning that names a medicine on your list | Generating the answer. Both are configured to not retain or train on inputs. Owner to confirm the current provider terms. |
| The fact that you signed in with Google | Google Sign-In, only if you choose it | |
| Google Fonts | Your IP address and browser details, as with any web request | The landing page, these policy pages and the web app load their typefaces from Google's font servers |
| Resend | Your email address | Waitlist and launch emails, only if you joined the waitlist |
Search over our library (the embeddings that find relevant passages) runs on our own server; no third party receives your question for that step. Your medications list itself is not sent to the model. When a herb in the retrieved passages has a known interaction with a medicine on your list, the warning (which names that medicine) is included so the answer can mention it. Journal entries are included only when their saved text, notes or herb name contains the text of the question being answered (its first 200 characters), up to five and most recent first; when you ask the assistant to continue, the question being answered is your previous substantive one. A question that matches none of your entries sends none. Owner to confirm whether journal personalisation should become opt-in.
How long we keep it
- Your account and content: until you delete them.
- Daily request counts: 60 days.
- Backups: the database is backed up nightly. Fourteen nightly copies are kept on the server, and copies are stored in Amazon S3 in the same account. Owner to confirm the S3 retention period. Deleted data disappears from backups as they age out.
Deleting your account
Go to Profile → Privacy & Security → Delete account on the web (the iOS app gets the same control in its next update), or email hello@shenn.ai from your account address. Deleting removes your account, chats, journal, medications, protocols, check-ins, daily insights, usage counts, sessions and profile photo from the live database immediately and signs you out everywhere. A request that was already in flight when you deleted can still finish writing afterwards; follow-up sweeps (5 minutes, 35 minutes and about 2.5 hours after deletion) and an hourly sweep for anything they miss remove those rows, so they are gone within about an hour of being written. Backup copies age out as described above. Deletion cannot be undone.
Joining the waitlist is a separate consent, keyed by email address and made before any account exists; deleting an account does not remove a waitlist entry. To leave the waitlist, use the unsubscribe link in any of its emails or write to hello@shenn.ai.
Your rights
You can see your data in the app, correct your name and photo there, and delete everything as above. To ask for a copy of your data, or anything else about it, email hello@shenn.ai. Depending on where you live, you may have further rights under laws such as PIPEDA, GDPR or CCPA; we honour requests under them.
Children
Shenn is for adults. Do not create an account if you are under 18. Owner to confirm the age threshold.
Security
Connections use HTTPS. Passwords are stored as bcrypt hashes. Session tokens are stored hashed and rotated. If you believe you have found a security problem, email hello@shenn.ai.
Changes
When this policy changes, the date at the top changes and the previous version is kept in the project's public history.