Privacy Policy

1. Information we handle

Account information. When a host signs in with Apple or Google, Shokken processes the account identifier, email address, and profile information supplied for the account, such as a name, username, or avatar.

Waitlist information. Hosts and guests provide guest names, optional phone numbers, party sizes, optional notes, SMS choices, and waitlist activity such as joining, notification, cancellation, seating, and archival times. Hosts also create waitlists and menus.

Menu sources. If a host chooses to import a menu, Shokken processes the selected photos or PDF files, file metadata, and the resulting menu content.

Website contact and scheduling. If a visitor submits the website contact form, Shokken processes the name, contact method, and message the visitor supplies through Netlify. If a visitor chooses to book a call, Cal.com processes the scheduling and booking information the visitor supplies.

Subscriptions. Shokken uses RevenueCat and the applicable app store to provide subscription entitlements. Shokken receives and stores subscription and entitlement information associated with the Shokken account. Shokken does not collect payment-card numbers in the app.

Texts. If a guest opts in, Shokken processes the guest's phone number and the transactional waitlist message and delivery information needed to send text updates. Shokken also retains consent evidence: phone number, timestamp, opt-in or opt-out action, collection source and flow, and minimal guest and waitlist identifiers.

2. How we use information

Shokken uses this information to authenticate hosts; operate and synchronize waitlists; provide guest browser status pages; publish menus selected by hosts; process optional menu imports; provide and manage subscriptions; send opted-in transactional waitlist texts; secure and operate the service; respond to support/privacy requests; and complete account deletion.

3. When information is available to others

A host can choose to publish a menu. A guest's wait status is available through the guest's unique status link. Hosts are responsible for sharing guest links only with the intended guest.

Shokken does not sell mobile phone numbers or SMS opt-in consent, and does not share them with third parties or affiliates for marketing or promotional purposes. Shokken provides them to Twilio only as needed to deliver the transactional waitlist texts the guest requested.

Shokken uses Supabase for authentication, database, storage, and backend services; RevenueCat for subscription entitlements; Twilio to send opted-in transactional texts; and OpenAI to process menu-source photos and PDFs only when a host uses menu import. These providers process the information needed to provide their services. Apple and Google provide the sign-in and store-purchase services selected by the host. Netlify processes product-site contact-form submissions, and Cal.com processes information a visitor supplies to schedule a call.

4. Retention and deletion

Operational waitlist and menu data remains until a host deletes it or deletes the Shokken account. Account deletion removes the Shokken authentication/profile record and associated waitlists, guests, menus, and menu-source files; it also redacts ordinary retained SMS and RevenueCat webhook audit data. Deleting a Shokken account does not itself cancel an App Store or Google Play subscription.

Shokken retains the minimal SMS consent evidence described above for at least four years after related operational or account deletion. Shokken also retains a limited account-deletion operation record as needed to complete or retry a deletion request; the current service does not define an automatic pruning schedule for that operation record.

Provider systems may retain limited records under their applicable terms and settings. Deleting a Shokken account does not delete store-owned purchase records or cancel a subscription. Contact privacy@shokken.rsvp with questions about a subscription-provider record associated with a deleted Shokken account.

Website contact submissions and scheduling details remain under Shokken's applicable Netlify and Cal.com settings until they are deleted or no longer needed for the support or scheduling purpose.

5. Account deletion and privacy requests

To delete an account in the app, go to Profile > Account actions > Delete account. If you cannot access the app, email privacy@shokken.rsvp from the account email address with the subject "Delete Shokken account." Shokken may need to verify the request. This public deletion route is available at https://shokken.rsvp/privacy/#account-deletion.

Questions and other privacy requests may be sent to privacy@shokken.rsvp.

6. Policy updates

Shokken may update this policy as the service, providers, or legal requirements change. This page displays the current version.

7. Contact