Shtello One
Sign in

Privacy Policy

Effective October 13, 2026

The short version. What you save in Shtello One is encrypted on your device before it syncs, and we cannot read it. We read your email, calendar and files only to show them to you and help you with them. We never sell your information, never use it for ads, and never use it to train AI.

This policy explains how Shtello LLC ("Shtello", "we", "us") handles information in Shtello One, on shtelloone.com and in our apps. If you have a question, write to hello@shtelloone.com.

What we collect

  • Your account. Your email address, first name, when you signed up and your sign-in sessions.
  • Your password. Your password never leaves your device. Your device turns it into a sign-in code, and we keep only a one-way hash of that code. We cannot see or recover your password.
  • Your saved data, encrypted. Your tasks, plans, notes, settings, knowledge bank and connection details are encrypted on your device with a key only you hold, then stored on our servers so they can sync between your devices. We cannot decrypt them.
  • Reminder settings. If you turn on email reminders, we keep your reminder time and time zone so we can send them.

Connected accounts

You choose what to connect. Shtello One can connect to Google (Gmail, Google Calendar and Google Drive file names), Microsoft (Outlook mail, calendar and OneDrive), other email providers through an app password, and calendars through a share link. All access is read only. We never send, delete or change anything in those accounts.

  • Your sign-in tokens and app passwords are kept encrypted with your other data. When your device checks for new mail or events, it sends the token to our server for that one request. Our server reads the new items, hands them back to your device and keeps nothing.
  • Checks while the app is closed are optional. If you turn them on, your connection details are stored on our server, encrypted with a server key, so it can check on your schedule. What it finds is sealed with a key that only your device has. Turning this off, or deleting your account, removes them.

Google user data

Shtello One's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • We use Google data only to show you your own email, calendar and files and to help you with them, for example sorting what needs a reply or planning your day.
  • We do not use Google data for advertising, do not sell it, and do not use it to train AI models.
  • No person at Shtello reads your Google data unless you ask us to in writing for support, it is needed for security, or the law requires it.

How the AI works with your information

When you ask Shtello One for help, your device sends only what is needed for that answer, such as the note you wrote and the relevant events or messages, to our AI provider (Claude, made by Anthropic) over an encrypted connection. We do not store it. Anthropic does not use it to train its models and keeps it only as long as its own policy allows for safety and abuse checks. The answer comes back to your device, where it is saved encrypted.

Other services the app uses

  • Weather. Your approximate location is sent from your device to Open-Meteo to get your forecast.
  • Travel times. When you ask when to leave, the start and end points are sent to Google Maps to get the drive or transit time.
  • Holidays and Shabbat times. Holiday dates come from Nager.Date and Hebcal. For Shabbat times, your approximate location is sent to Hebcal.
  • Hosting and email. Our hosting providers run the app and store your encrypted data. Our email provider sends sign-up and reminder emails.

We do not use advertising, tracking cookies or third-party analytics. Your browser keeps your data and sign-in on your device using its own storage.

What we never do

  • Sell or rent your information.
  • Use your information for ads.
  • Use your information to train AI.
  • Share it with anyone except the providers above, to run the service, or when the law requires it.

Keeping and deleting your data

We keep your account and encrypted data until you delete your account. You can delete it anytime in the app: open You, then Delete account under Your account and privacy. That removes your account, your encrypted data and any checks-while-closed setup from our servers. Copies kept on your own devices stay there until you sign out or clear them.

You can also email us to ask what we hold about you, to correct it or to delete it.

Security

Your data is encrypted on your device with AES-256 before it syncs, and all traffic uses HTTPS. Your recovery key is the only other way to unlock your data, so keep it safe. If you lose both your password and your recovery key, no one can recover your data, including us.

Children

Shtello One is not meant for children under 13 to use on their own. A child under 13 may use it only with a parent or guardian who creates and manages the account. If you believe a child under 13 gave us information without a parent, write to us and we will delete it.

Changes

If we change this policy, we will update the date above, and for important changes we will tell you in the app or by email before they take effect.

Contact

Shtello LLC, hello@shtelloone.com. See also our Terms of Use.