Privacy Policy — Shabbox
Last updated: July 28, 2026
Shabbox is one of the Derekh Learning family of companion apps. It has no account and no sign-in. This page explains exactly what this specific app does — and does not do — with your information. For the company-wide policy covering our website, web app, and main iOS app, see the Derekh Learning Privacy Policy.
What Shabbox collects
The only data type this app touches is your location, and only to calculate candle-lighting and Shabbat times for where you are.
- Location is used only for app functionality, is not linked to your identity, is not used to track you, and is not stored by us.
Everything else about the app is Data Not Collected.
Where your data lives, and how sharing works
- Your dinners, guests, RSVPs, and bring-list are stored in your own iCloud using Apple's CloudKit. We (Derekh Learning) do not have access to that data.
- When you invite guests, you share a dinner through Apple's CloudKit sharing — an invite-only link. There is no public feed and no discovery; only people you invite can see the dinner, and anyone can leave or be removed. Guest data flows through Apple's iCloud, not through us.
Services this app connects to
- Hebcal (hebcal.com) — a public Jewish-calendar API, for Hebrew dates, holidays, and times. Requests are generic; no personal data is sent. When you enable location, your coordinates are sent to Hebcal only to return candle/Shabbat times.
- Derekh Learning content service — a read-only request that returns already-published, shared Torah content (a lesson, verse, or card). The request sends nothing about you. (the weekly Torah content for the Host Kit).
- Apple iCloud / CloudKit for the invite-only dinner sharing described above.
Permissions
- Location (When In Use) — "Your location is used only to calculate candle-lighting and Shabbat times for where you are. It isn't stored or shared."
No accounts, no analytics, no ads
This app has no login and no user account. It contains no third-party analytics or advertising SDKs, and it does not track you across other apps or websites. There is no advertising identifier (IDFA) use.
Children's privacy
This app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take reasonable steps to address it.
Data retention
Because this app keeps your information on your device, we do not hold it. Data stored on your device is removed when you delete the app (subject to any device or iCloud backups, which are under your control).
Your choices
You can manage any permissions this app uses (such as location or microphone) at any time in iOS Settings, and the app keeps working without them wherever possible. Deleting the app removes its on-device data.
Changes to this policy
We may update this page from time to time. When we do, we will change the "last updated" date at the top.
Contact
Questions about this app's privacy? Email us at support@derekhlearning.com.