Privacy Policy

This Privacy Policy explains how Yonatan Uzan ("we", "us", or "our") collects, uses, and protects your information when you use the Beit Knesset App (the "App"). We are committed to protecting your privacy and being transparent about the limited data we handle.

1. Information We Collect

1.1 Account & authentication data

To create and secure your account we collect, depending on the sign-in method you choose:

• Email address (Magic Link or Google sign-in).
• Phone number (SMS one-time-password sign-in).
• Display name (e.g. the name associated with your Google account or the name you provide).

This information is used solely to authenticate you and identify you within your synagogue community.

1.2 Community membership data

• The synagogue communities you join or request to join.
• Your role within a community (e.g. member, Gabbai, committee member).
• Your approval status within a community.

1.3 Wallet & transaction data

If you use the digital wallet features, we store:

• Your wallet balance and any promotional bonus balance.
• Your transaction history (top-ups, purchases/commitments, credits, debits, and refunds), including amounts, dates, and related descriptions.

All monetary values are stored as integers in the smallest currency unit. We do not store full payment-card numbers; card payments are processed by our payment provider (see Section 3).

1.4 Technical & diagnostic data

• Basic crash and error diagnostics to keep the App stable and secure.
• Device-level tokens used to deliver push notifications (e.g. prayer-time and community updates), if you enable notifications.

We do not collect your precise location, your contacts, or your browsing activity outside the App.

2. How We Use Your Information

We use the information described above only to:

• Authenticate you and keep your account secure.
• Connect you with your synagogue community and show the correct content.
• Operate the digital wallet (balances, top-ups, purchases, refunds) and show your transaction history.
• Send you service-related and (where enabled) community notifications.
• Diagnose crashes, prevent abuse, and improve reliability.
• Comply with our legal and accounting obligations.

We do not use your data for profiling, behavioural advertising, or any purpose unrelated to running the App.

3. How Your Information Is Shared

We never sell your personal data and never share it with third parties for their own marketing. We share data only with the limited service providers required to operate the App, and only to the extent necessary:

• Backend & hosting (Supabase): stores your account, community, and wallet data and enforces row-level security so users can only access their own data.
• Authentication providers (e.g. Google, SMS provider): used only to verify your identity during sign-in.
• Payment provider (Stripe): processes wallet top-ups. Card details are entered with and handled by Stripe and are not stored by us.
• Push notification provider (Firebase Cloud Messaging): delivers notifications you have opted into.

These providers act as our processors under contract and may only use the data to provide their service to us. We may also disclose information if required by law or to protect the rights, safety, and security of our users and the App.

4. Data Retention

We keep your personal data only as long as your account is active or as needed to provide the App. We may retain certain transaction records for as long as required to meet legal, tax, or accounting obligations, after which they are deleted or anonymised.

5. Your Rights and Account Deletion

You can delete your account at any time from Settings → Delete Account inside the App. Deleting your account permanently removes your profile, community memberships, wallet balances, and transaction history through cascading deletion, except where we are legally required to retain limited records.

Depending on where you live, you may also have rights to access, correct, export, or restrict the processing of your personal data. To exercise these rights, contact us at yoniuzan20@gmail.com.

6. Data Security

We protect your data using industry-standard measures, including encrypted connections (TLS), database row-level security so each user can only access their own records, secure storage of session tokens on your device, and server-side controls on all wallet operations. No method of transmission or storage is completely secure, but we work to protect your information.

7. Children's Privacy

The App is not directed to children under the age of 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

8. International Users

Your information may be processed and stored on servers located in the European Economic Area (EEA), the United States, and other regions where our infrastructure providers (including Supabase, Stripe, and Firebase) operate. By using the App, you understand that your data may be transferred to and processed in locations with different data-protection laws than your own.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, notify you within the App.

10. Contact Us

If you have any questions about this Privacy Policy or your data, contact us at:

• Email: yoniuzan20@gmail.com
• Developer: Yonatan Uzan