Kehila A.I
·
Open the app
Draft Outline pending legal review — to be reviewed by counsel. Do not publish as-is.
Privacy policy · Law 25 · GDPR

Privacy.

Last updated: May 28, 2026 · Version 0.1 · draft · Applicable: Quebec, Canada
Article 01

Kehila A.I's commitment

Kehila A.I is a siddur. We treat your data the way we treat a paper siddur: we know nothing about it.
To be completed by legal counsel. Describe the applicable rule, legal basis (GDPR / Quebec Law 25 / others), conditions, exceptions, and user recourse. Keep the tone plain, in Montreal English, without unnecessary jargon. To be reviewed before publication.
Article 02

Identity of the data controller

a. Publisher details (legal entity, address, registration)

To be completed by legal counsel. A short paragraph: clear statement of the rule, exception, contact.

b. Data Protection Officer (DPO)

To be completed by legal counsel.

c. Representative for Quebec users (Law 25)

To be completed by legal counsel.

Article 03

Data collected

a. Usage data (city, selected synagogue, UI language)

To be completed by legal counsel.

b. Optional account data (email for sync)

To be completed by legal counsel.

c. No religious-practice data stored on our servers

To be completed by legal counsel.

Article 04

Processing purposes

To be completed by legal counsel. Describe the applicable rule, the precise purposes, and the legal basis.
  • Compute astronomical times (zmanim) based on your city
  • Display the schedule of the synagogue you selected
  • Sync your settings across devices (if an account is created)
Article 05

Legal basis

a. Consent (notifications, geolocation)

To be completed by legal counsel.

b. Contract performance (use of the app)

To be completed by legal counsel.

c. Legitimate interest (security, fraud prevention)

To be completed by legal counsel.

Article 06

Retention period

To be completed by legal counsel.
Article 07

Recipients and sub-processors

  • Apple Inc. — App Store distribution
  • Cloudflare Inc. — hosting (Workers + D1) — minimal technical data
  • Postmark (Wildbit LLC) — sending emails from the contact form
  • No other third parties. No data sold or shared for advertising.
To be completed by legal counsel to specify sub-processing contracts, protection clauses, and applicable jurisdictions.
Article 08

Transfers outside Canada

To be completed by legal counsel.
Article 09

Security

  • Encryption in transit (TLS 1.3)
  • Encryption at rest for user accounts
  • Two-factor authentication available
Article 10

Your rights

a. Access, rectification, erasure

To be completed by legal counsel.

b. Portability

To be completed by legal counsel.

c. Restriction and objection

To be completed by legal counsel.

d. Withdrawal of consent at any time

To be completed by legal counsel.

Article 11

Minors

To be completed by legal counsel.
Article 12

Cookies and trackers

See our dedicated Cookie policy.
Article 13

Changes to this policy

To be completed by legal counsel.
Article 14

Recourse and supervisory authorities

  • Commission d'accès à l'information du Québec (CAI)
  • Office of the Privacy Commissioner of Canada
  • Competent authorities for European users
Article 15

Contact us

privacy@kehila.ai · response within 30 days.