Privacy Policy
DRAFT - pending legal review. This policy is not in force and is not legal advice. The app name (Mevin) still awaits a trademark check. The operator, providers and periods in square brackets are placeholders, and must match what the app actually does before publication.
The short version
- We collect only what we need to connect customers with pros: account details, profiles, messages, quotes and reviews.
- We show no ads, sell no personal data, and share none of it for advertising.
- Identity verification with an ID and a selfie is optional, done by an outside provider (Didit), and we receive only the result.
- Chat is not end-to-end encrypted. It is stored on servers in the EU, and a person on our side reads messages only when they're reported or we suspect fraud.
- Data is stored on Supabase servers in Frankfurt, Germany.
- You can delete your account in the app. After 30 days it is permanently deleted, except as set out in section 9.
1. Who is responsible for your data
The database owner (controller) is [OPERATOR NAME], [ADDRESS] ("Mevin", "we"). Privacy enquiries: support@mevin.co.il. [No data protection officer has been appointed, as the law does not require one at our current scale. If one is appointed, their details will appear here.]
2. What other users see, and when
| What | Who sees it | When |
|---|---|---|
| A pro's profile: business or personal name, photo, categories, service area, portfolio, price range, badges and reviews | Every user | While the profile is live |
| A pro's business number | Customers in a conversation with them, and on quote cards | Once a conversation starts |
| A customer's first name and photo | Pros the customer contacts | From the first message |
| Chat content: text, photos, voice notes, documents and location pins | Only the other person in that conversation | As soon as it's sent |
| A review you wrote, with your first name and last initial | Every user | Once both sides have reviewed, or after [14] days |
| ID and selfie images, ID number, licence documents | No user. Only the badge ("Identity verified", "Licence document reviewed") is shown | — |
What you send in chat stays with the other person even if you delete your account, as explained in section 9. The exception is a location you sent: deleting your account erases it at once.
3. What we collect, why, and whether you have to give it
"Required" means we can't provide the Service, or that part of it, without the data. No law obliges you to give us any of it, but without "required" data you won't be able to use the feature.
| Data | Purpose | Required or optional | If you don't provide it |
|---|---|---|---|
| Email address (from Apple, Google or email sign-in) | Signing in; contacting you about your account | Required | You can't sign in |
| Phone number (we store only a one-way code of it; the number itself goes to the SMS provider to send the code) | Verifying you before you message; preventing duplicate accounts and fraud | Required to send messages | You can browse and search, but not message |
| Name, profile photo, language | Shown to the other side | Name required; photo optional | A placeholder icon is shown |
| Professional profile: business name, categories, service area, description, portfolio, price range | Shown to customers; search | Required for pros (portfolio and prices optional) | You can't publish a profile |
| Business number and licence declaration | Showing a registered business; legal compliance | Required for pros; licence only in regulated categories | You can't publish a profile, or the regulated category isn't shown |
| Licence documents (may include an ID number and address) | Manual review and a licence badge | Optional | No licence badge |
| Identity verification: ID photo and selfie (biometric data) | "Identity verified" badge; preventing impersonation | Optional, with separate explicit consent | No identity badge |
| Service area / search location | Showing nearby pros. A pro's exact base point is stored to work out distances but never shown: customers see the area and a distance in whole kilometres | Optional - you can type a city instead of granting location access | Results aren't sorted by exact distance |
| Searches: the category and a rough area (about 1 km), with no link to who searched | Learning where pros are missing | Automatic, not linked to you | — |
| Chat content: text, photos, voice notes, documents, location pins | Messaging, safety, handling reports | Optional for each item | — |
| Quotes and job confirmations | Agreeing a job; enabling reviews | Optional | You can't leave a review |
| Reviews and ratings | Trust between users | Optional | — |
| Reports and blocks | Safety and enforcing our terms | Optional | — |
| Subscription: store purchase ID, plan, dates, renewal status (we never receive card details) | Running the subscription and conversation allowance | Required for subscribers | You can't subscribe |
| Push token | Notifying you of new messages, quotes or reviews | Optional (device permission) | No notifications |
| Usage data (screens viewed, in-app events, device type) | Improving the product | Optional: off until you turn it on in Settings > Privacy [lawyer: or on until you turn it off] | Nothing changes for you |
| Crash reports (error, device, app version, user ID) | Fixing bugs | Optional: on unless you turn it off in Settings > Privacy | Nothing changes for you |
| Logs and security data (IP address, sign-in times, verification attempts) | Security and fraud prevention | Required | — |
| Support messages | Answering you | Optional | We can't reply |
We don't collect health information, and we ask you not to send it in chat.
4. Identity verification and licence documents
4.1. Identity verification is carried out by Didit, an outside provider processing the data on our behalf. Didit checks that the ID document is genuine and that the selfie matches its photo. We don't receive the images to keep: we store only the result (pass/fail) and the date. We have set Didit to delete the images and data after [30 days], and no biometric template is kept. You can ask for earlier deletion.
4.2. Licence documents are kept in private storage and reviewed only by [OPERATOR NAME]. After a decision we keep the licence type, number and review date, and delete the file within [30 days].
5. Chat
Messages, photos, voice notes and documents are stored on Supabase servers in Frankfurt and encrypted in transit and at rest, but not end-to-end. [Automated tools may flag suspicious messages, such as malicious links.] A person on our side reads messages only when they're reported, when we suspect fraud or abuse, or when the law requires it. A location pin is sent only when you choose to send one, once; we don't track your location.
6. Who we share data with
We don't sell personal data or share it for advertising. We share it only:
With providers who run the Service for us (processors, under contract):
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, file storage, authentication | Frankfurt, Germany |
| [SMS PROVIDER] | Sending verification codes by text | [LOCATION] |
| Didit | Identity verification (optional) | [LOCATION] |
| PostHog | Usage analytics | EU |
| Sentry | Crash reporting | [EU / US] |
| Expo, Apple (APNs), Google (FCM) | Delivering notifications | US |
| RevenueCat | Subscription management | US |
| Apple, Google | Selling and billing subscriptions (as independent controllers, under their own policies) | US |
| Telegram | Internal alerts to the operator about events (e.g. a new report, including the text the reporter wrote), with no more detail than handling it needs | [LOCATION] |
With other users, as described in section 2.
With authorities, where the law or a court order requires it, or where there is a real risk to someone's life or safety.
With a buyer of the Service or a company we set up, subject to this policy.
7. Transfers outside Israel
Data is stored mainly in the EU. Transfers to providers in the US or elsewhere are made under Israel's Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001, based on the provider's contractual undertaking to protect the data [to verify].
8. Security
Access to every database table is restricted so each user sees only what they're allowed to. Sensitive documents are kept in private storage. System access is limited to the operator. We maintain a data security procedure under Israel's Privacy Protection (Data Security) Regulations, 2017. If a serious security incident occurs, we will report it to the Privacy Protection Authority as required and notify affected people where the law requires. No system is completely secure.
9. How long we keep data
| Data | Retention |
|---|---|
| Account and profile | While your account is active. After you ask to delete it: 30 days in which you can change your mind, then deletion |
| Chat content | While your account is active. After deletion, your messages stay with the other person, with your name replaced by "Deleted user". Photos, voice notes and documents you sent stay with them too. Locations you sent are erased at once. You can also delete a location you sent for everyone at any time. |
| Reviews you wrote | Stay on the profile, signed "Deleted user" instead of your name |
| Reviews about you | Removed with the profile: their text is erased and the rating is no longer shown anywhere |
| Identity verification result | While your account is active. Images held by Didit: [30 days] |
| Licence document files | [30 days] after the decision. Licence type and number: while the profile is live |
| Subscription records | Our record of your subscription: deleted with the account. Notices the stores send us about it: [400 days]. Apple and Google keep the purchase records under their own policies |
| Reports, blocks and suspensions | [24 months] after the account closes, to keep banned users from returning and to defend legal claims |
| Phone number of a banned account | [24 months], stored only as a hash |
| Logs and security data | [90 days] |
| Usage data (PostHog) | [12 months] |
| Crash reports (Sentry) | [90 days] |
| Support messages | While your account is active; deleted with it |
| Backups | Deleted on the backup cycle, within [30 days] |
10. Your rights
10.1. Access and correction: you can view and edit most of your data in settings. For a full copy or a correction, email support@mevin.co.il. We'll reply within 30 days.
10.2. Deletion: in the app's settings, or at https://mevin.co.il/delete-account.html without installing the app.
10.3. Withdrawing consent: you can switch off notifications and marketing in Settings, and usage analytics and crash reports in Settings > Privacy, and ask us to delete your identity verification. Withdrawal doesn't affect processing already carried out.
10.4. Marketing: we send marketing emails, texts or notifications only if you've agreed. You can opt out in any message and in settings.
10.5. Complaints: you can contact Israel's Privacy Protection Authority at the Ministry of Justice.
11. Age
The Service is for people aged 18 and over. If we learn we hold data about a minor, we'll delete it.
12. Changes
We'll update this policy when the Service or the law changes, and tell you in the app before a material change takes effect. The version and date are at the top of this page.