Privacy Policy

Last updated: 2026-05-26

This Privacy Policy describes what information the "Tefillin Click" app (the "App") collects, how it is used, and your rights regarding it.

1. Who we are

The App is operated by [Operator Legal Name], Israeli Company ID [number], [address in Israel]. For any inquiries, please email privacy@tefillinclick.co.il.

2. What data we collect

• Phone number (for identity verification via Firebase Phone Authentication).
• Display name and profile photo you provide.
• Precise location (lat/lon + geohash) — while using the app in the foreground, and during an active volunteer trip.
• Push notification tokens (FCM) for your devices.
• Chat message content between matched participants.
• Request history (origin, status, timestamps).
• Device information and crash logs (Firebase Crashlytics).

3. Why we collect it

• To connect seekers with available volunteers nearby.
• To send real-time notifications about requests, confirmations, and updates.
• To prevent abuse (rate limiting, App Check).
• To comply with legal obligations.

4. Legal basis (GDPR)

Consent and legitimate interest in operating the service and protecting user safety.

5. Third parties

• Google Firebase (authentication, database, functions, notifications, storage, App Check) — Policy.
• Google Maps (map display, navigation) — Policy.
• Apple Push Notification Service and Google Play Services — built-in OS systems.

6. Data retention

Requests are kept with identifying details for 90 days, then anonymized for statistical purposes. Account data is retained until deletion request plus a 30-day grace period.

7. Your rights

• Access to information we store about you.
• Correction of inaccurate information.
• Deletion — via the "Delete account" screen in the app or this page.
• Data export — email us at the address above.

8. Minors

The App is intended for users aged 13 and above (16 and above in the EU). Under 16 in the EU, parental consent is required.

9. Security

We use encryption in transit and at rest (Firebase), Phone OTP MFA, App Check to prevent abuse, and include no third-party trackers.

10. International data transfer

Firebase servers are located in EU/US regions with Standard Contractual Clauses for international data transfer.

11. Changes to this policy

Material changes will be notified to you in-app and via email. Continued use after changes constitutes acceptance.

12. Contact

privacy@tefillinclick.co.il
Postal address: [Physical address in Israel]