Privacy Policy

Effective date: 17 October 2026

This Privacy Policy explains how Ron Tabachnik ("we", "us"), the operator of the Shalom app, collects, uses and shares personal data. We act as the data controller. Contact: ron@digitab.co.il.

1. Data we collect

Account data. Email address and password (the password is stored by our authentication provider in hashed form; we never see it). Email verification status.

Profile data. Display name, city and "about you" text that you choose to add. This profile is visible to other signed-in users.

Content you create. Places, posts, comments, reviews, ratings, photos, minyanim, events and meal listings, RSVP requests and the note you send a host, reports you submit, and the list of users you block.

Direct messages. The messages you send and receive, with timestamps, stored so the conversation is available on your devices. Only you and the other participant can access them in the App. We access them only to investigate a report, enforce our Community Guidelines, or comply with law.

Location. With your permission, the App uses your device's precise location on the device to find nearby places, minyanim and events and to calculate Shabbat and prayer times. Your precise location is not stored on our servers. If you turn on "Minyanim nearby" alerts, we store an approximate location (rounded to about 1 km) so we can notify you. If you create city alerts, we store the alert areas you choose.

Claim documents. If you claim a place, we collect your name, phone, email, role and the proof documents or photos you upload. These are visible only to you and our review team.

Device and notification data. A push notification token, your notification preferences and app language.

Technical data. Our infrastructure providers automatically process technical data such as IP address, device type and error logs to deliver and secure the service.

We do not collect contacts, photos outside those you choose to upload, health data, financial data or advertising identifiers, and we do not track you across other companies' apps or websites.

2. Why we use it (legal bases)

To provide the App and its features you request (performance of a contract).
To keep the community safe: moderating content, reviewing reports and claims, preventing fraud and abuse (legitimate interests, legal obligations).
To send notifications you opt into (consent, which you can withdraw in the App or iOS Settings).
To improve and fix the App (legitimate interests).
To comply with law and respond to lawful requests (legal obligations).

We do not sell personal data and do not use it for third-party advertising.

3. Who we share it with

Other users: your public profile and the content you post are visible to other users. Hosts see the name and note you send with an RSVP; approved guests see the host's private address.
Service providers who process data for us under contract: Supabase (authentication, database and server functions; Supabase, Inc., with our data hosted in Stockholm, Sweden), Cloudflare (storage and delivery of photos and claim documents; Cloudflare, Inc., stored in Europe), our email delivery provider (account and password emails), Apple (push notification delivery, Maps and geocoding performed on your device) and HebCal (receives the coordinates of the area you view in order to return calendar and prayer times; no account data is sent).
Authorities when required by law or to protect the rights, safety and property of users, the public or us.
A successor in a merger, acquisition or sale of assets, subject to this Policy.

4. International transfers

Our database is hosted in the European Union (Sweden) and our files in Europe. Our providers may also process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses.

5. Retention

We keep your data while your account is active. When you delete your account, we delete or anonymize your profile, private settings and push tokens. Content you posted publicly may be deleted or anonymized; messages remain available to the other participant unless they delete them. Claim documents are deleted within 12 months after a decision unless needed to resolve a dispute. Reports and moderation records may be kept for up to 2 years for safety and legal purposes. Backups expire on our providers' standard schedules.

6. Your rights

Depending on where you live (including under the EU and UK GDPR and the Israeli Protection of Privacy Law), you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. You can edit your profile and delete your account in the App. For any other request, email ron@digitab.co.il. We will respond within the time required by law. You may also complain to your local data protection authority, such as the Israeli Privacy Protection Authority or your EU supervisory authority.

7. Children

The App is not intended for children under 16. We do not knowingly collect personal data from them. If you believe a child has given us data, contact us and we will delete it.

8. Security

We use industry-standard measures including encrypted connections, access rules that restrict who can read private data, and limited administrative access. No system is perfectly secure; please use a strong, unique password.

9. Changes

We will post updates in the App and update the effective date. Material changes will be highlighted.

10. Contact

Ron Tabachnik, ron@digitab.co.il