SHABAP is an all-in-one Shabbat planning app. It helps you plan menus, manage guest lists with RSVPs, generate shopping lists automatically from your menu, create seating arrangements, set reminders, and share everything via WhatsApp — so you arrive at candle-lighting calm and prepared.

How much does SHABAP cost?

SHABAP costs just $1/week (paid annually) or $4.99/month. Every plan starts with a free 7-day trial with full access to all features.

Can I plan Chag and Yom Tov meals too?

Yes! SHABAP supports all major Chagim including Rosh Hashana, Yom Kippur, Sukkot, Chanukah, Purim, Pesach, and Shavuot — with the same menu planning, guest management, and shopping list features as Shabbat.

Can my partner or co-host see and edit the plan?

Absolutely. SHABAP has built-in co-host sharing. Invite your partner and both of you can see and edit menus, guests, shopping lists, and tasks in real-time.

How does the shopping list work?

Your shopping list is automatically generated from the dishes in your menu. You can check items off as you shop, add custom items, and your co-host sees the same list in real-time. No more forgotten ingredients.

SHABAP — Shabbat Planner | Plan Meals, Guests & Shopping Lists

Effective date: October 16, 2026

1. Who We Are

SHABAP (“the App”) is operated by HiFam LLC, located at 40 Old Lancaster Road, Merion Station, PA 19066. For questions about this policy, contact us at shalom@shabap.ai.

2. Information We Collect

We collect the minimum information needed to provide the App:

Account information: Your name, email address, and profile photo (provided during sign-up or via Google OAuth).
Shabbat planning data: Events, menus, guest lists, recipes, reminders, and seating plans you create within the App.
Payment information: Processed securely by Stripe. We do not store your credit card number. We receive your Stripe customer ID and subscription status.
Usage data: Basic analytics such as pages visited, feature usage, and error logs to improve the App.

3. Google OAuth & Limited Scopes

When you sign in with Google, we request access to your email address and basic profile information (name, profile picture). We use this solely to create and authenticate your account. We do not access your contacts, Google Drive, Gmail, or any other Google services beyond what is listed here.

If you connect Google Calendar (optional), we request read-only access to display your existing calendar events alongside your Shabbat plans. We never modify your Google Calendar.

4. How We Use Your Information

To provide, maintain, and improve the App.
To authenticate your identity and manage your account.
To process payments and manage your subscription.
To send transactional emails (e.g., Shabbat reminders you configure).
To respond to support requests.

We do not sell or rent your personal data. On our website (not in the iPhone or Android app), and only if you accept cookies, we use Google Ads, Meta (Facebook/Instagram) and Pinterest advertising cookies to measure whether our ads work, for example that a visit from an ad led to a free trial. See “Third-Party Services” below.

When you arrive from one of our ads or links, we save the campaign tags in the link (utm_source, utm_campaign and similar) with your new account, so we know which campaigns bring people to SHABAP.

5. Third-Party Services

We use the following services to operate the App:

Google OAuth — Authentication (email + profile only)
Stripe — Payment processing
Cloudinary — Image hosting for profile photos and recipe images
Resend — Email delivery (account emails and Bubbe’s Thursday email)
Railway — Application hosting and database
Apple, Google Play and RevenueCat — In-app subscriptions in the iPhone and Android apps (purchase status, linked to your SHABAP account)
OpenAI — Powers Bubbe, the AI helper (see below)
PostHog — Product analytics (how the App is used), linked to your account
Sentry — Crash and error reports
Apple Push Notification service and Google Firebase Cloud Messaging — Deliver the reminders you turn on in the iPhone and Android apps (a device token, no message history)
Amazon — Edit pages on our website list products we like, with links to Amazon (we earn a small commission as an Amazon Associate) and product photos loaded from Amazon’s servers, which see your device’s IP address like any image host. We send Amazon nothing about you; what you do on amazon.com follows Amazon’s privacy notice
Google Ads, Meta Pixel and Pinterest Tag — Ad measurement on our website, only after you accept cookies: pages visited and when a free trial starts (with an order number, no name, email or card details). Never used in the iPhone or Android app

Each service operates under its own privacy policy. We only share the minimum data necessary for each service to function.

5a. Bubbe and AI (OpenAI)

Bubbe, the App’s AI helper, and the AI features built on it (menu ideas, recipe writing, reading a recipe from a photo, read-aloud) are powered by OpenAI. When you use them, what you type or upload and the details you ask Bubbe to work with (for example your menu, recipes, guest names, dietary needs or a photo) are sent to OpenAI to produce the answer.

We ask for your permission in the App before anything is sent to OpenAI for the first time. Nothing is sent until you agree, and you can withdraw permission at any time in Settings → AI Assistant.

Under OpenAI’s API terms, this data is not used to train OpenAI’s models and is kept by OpenAI for up to 30 days for abuse and safety monitoring. See OpenAI’s privacy policy.

What Bubbe remembers. When you tell Bubbe something lasting about your household (for example an allergy, who loves which dish, or when you start preparing for Pesach), she can save it in your account so she can use it in later chats. These notes are shared with your co-host, sent to OpenAI along with your chats, and you can see, add and delete them at any time in Settings → What Bubbe remembers. They are deleted with your account.

5b. Bubbe’s Thursday Email

You can sign up for Bubbe’s Thursday email on our website without an account. We only email you after you sign up (the form says it includes the Thursday email) and confirm your address from the email we send (double opt-in).

For this list we store: your email address, your first name if you give it, when you signed up and confirmed, the exact consent wording you agreed to, which page you signed up on and the campaign link you arrived from (utm tags), and a one-way scrambled (hashed) version of your IP address, used only to stop abuse. We never store your IP address itself. Emails are sent through Resend.

Every email has an Unsubscribe link, and most email apps also show a one-click unsubscribe button. After you unsubscribe we keep a record that you did, so you are never emailed again by mistake. To have the record deleted entirely, write to shalom@shabap.ai. We never sell or share the list.

6. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on Railway (US-based infrastructure). We use encryption in transit (HTTPS/TLS) for all connections. Passwords are hashed with bcrypt and are never stored in plain text.

7. Data Retention & Deletion

We retain your data for as long as you have an active account. You can delete your account yourself at any time from your Profile or at shabap.ai/delete-account, which also explains what is deleted and what is retained. You may also request deletion of your account and all associated data by contacting shalom@shabap.ai. We will process deletion requests within 30 days.

Deleting your account

In the app, open Profile and choose Delete Account. This works even if your subscription has ended.
Any active subscription is cancelled immediately, and your profile, login methods, preferences, recipes, contacts and the Shabbatot you planned on your own are permanently deleted.
Data you share with a co-host (shared household plans, guests and family members) stays with your co-host, and other hosts keep their own guest lists and RSVP records.
Our payment processor (Stripe) keeps billing records as required by law, and deleted data may remain in backups for a limited time until they are overwritten.

8. Children’s Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Your Rights

Depending on your location, you may have the right to:

Access, correct, or delete your personal data.
Object to or restrict certain processing.
Request a copy of your data in a portable format.
Withdraw consent at any time (for optional features).

To exercise any of these rights, email shalom@shabap.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a notice within the App. Continued use of the App after changes constitutes acceptance.