Privacy Policy

Last updated: October 3, 2026 · Website and app

1. Scope and Contact

1.1. This policy applies to the services operated by the Association on all supported devices, alongside the Terms of Use. Privacy questions and requests may be sent to info@m-lenegdi.org.

1.2. When the app opens a web page, the sections describing website use also apply to that browsing. When you visit an external provider, its policy also applies. The Association’s responsibility for information it discloses and for its choice of providers remains subject to applicable law.

1.3. The app description in this policy refers to version 0.5.129, build 136. A new service or materially new use of information requires the policy and user notices to be updated before it is enabled.

2. Providing Information and Your Choices

2.1. As a rule, you are not legally required to give us personal information to browse open content. Providing details when registering, contacting us, donating, or using a personal service is voluntary. Without the details needed for a particular service, we may be unable to provide it, respond to your inquiry, or complete the action.

2.2. Accepting the Terms of Use is not blanket consent to mailing lists, location collection, or any additional use of information. Separate choices shown in the service and device permissions apply to their stated purposes. Continuing to browse does not replace express consent where it is required.

2.3. Do not send passwords, recovery keys, full payment-card details, or sensitive information that is unnecessary for your inquiry. If information about another person is needed, make sure you have permission or another lawful basis to provide it.

3. Website Registration and My Account

3.1. Registration through the website’s personal area involves providing a full name, email address, and password. Account management also involves an account identifier, sign-in details, user choices, and technical data needed for authentication, account operation, access recovery, and security.

3.2. An account provides the personal services available through it, such as saving content and returning to it. Choosing to save reading history and a reading position associates the content you read and your progress with your account, providing continuity across devices signed in to the same website account.

3.3. The registration form offers separate choices for receiving updates and saving reading history. You can register without selecting them. You can change your choice or request deletion through the available account controls or by contacting us. Turning off reading history does not, by itself, remove security records or quiz-attempt data.

3.4. Selecting a support level or donation frequency in My Account records your service preference; it does not create a charge by itself. A charge requires completion of the designated payment process.

3.5. A display name may appear alongside public activity, particularly in the quiz leaderboard described below. Email addresses are not intended to appear in the leaderboard. Choose a display name suitable for publication and avoid identifying details about children.

4. Information and Accounts in the App

4.1. Guest access to content does not require a birth date or an account. A person using a youth profile has an encrypted local profile. Personalization details, including birth date and form of address, remain optional and are stored on the device. An unlock password and recovery key protect the profile. This pathway does not register an online account or disclose those details to an account service.

4.2. Local profiles also store saved content, bookmarks, progress, and some Siddur and quiz settings on the device. The device’s profile registry and certain technical preferences are stored separately. The recovery key is shown to the user; the Association has no remote copy capable of restoring a deleted local profile.

4.3. Users aged 18 or over may use an account verified through email and password, an email code, Google, or Apple. The sign-in provider supplies Supabase with a user identifier, email address, and approved profile details, such as a display name. Your Google or Apple password is not disclosed to the app. Apple may supply a private relay address if you choose that option.

4.4. An adult user may link a verified phone number for SMS sign-in. The number is stored by Supabase’s identity service and disclosed to the SMS provider actually configured to send the code. Linking a number is not a subscription to a mailing list or WhatsApp.

4.5. For an online account, the app uses Supabase to synchronize an encrypted copy of the profile. This includes the name, birth date, country, city, and street address if you chose to provide them; personal preferences; bookmarks; favorites; results; study progress; and reading settings. The encryption key is managed by the server’s vault service and released only after account authentication. This is not end-to-end encryption against the service operator. The local unlock password, biometric key, and device location are not included in this copy.

4.6. Quick unlock uses the operating system’s secure vault. The app does not receive a face image, fingerprint, or biometric template. Signing out removes remembered-access and biometric keys from that device but does not delete the account. Deletion is described in section 17.

4.7. For adult users only, the app may refresh public menus and articles from the website. The server receives the IP address and technical request information. The refresh does not send account details, saved items, or quiz results. Titles, links, and article details are stored on the device for later viewing. Opening a full web article is a separate browsing action. Youth Mode does not make this network request or open external links.

4.8. Country and city of residence are optional when creating or updating an online account. They are not conditions of registration, sign-in, content access, or synchronization. If provided voluntarily, they are also stored in a private, protected account record for geographic analysis, understanding the service’s reach, and service planning. Street and house number are optional, excluded from the separate geographic record, and not used for geographic analysis. You can update these details in My Account.

5. The Reasoning Quiz, Results, and Rankings

5.1. The quiz includes learning and challenge paths, topic and difficulty choices, and children’s paths by age group. When using the website quiz, data sent to the quiz service may include an attempt identifier, selected path and age group, questions and selected answers, response times, attempt completion, score, and progress. The data operates the exercise, provides feedback, calculates results, and supports ranking where applicable.

5.2. Website practice without signing in also involves data. A visitor identifier used by the quiz service is stored in the browser and sent with service requests. Attempts and answers may be stored on the server for guests as well. Such an identifier does not require a name, but it is not a guarantee of complete anonymity.

5.3. When a signed-in user takes a path eligible for ranking, the result may appear in a public table under that path’s rules. The table displays a display name and achievement data, such as score or time. Children’s paths may be grouped by the selected age group. Others can view and copy public information.

5.4. To practice without association with an account’s leaderboard entry, use guest access. Before a child participates through an account or in a public ranking, involve a parent or guardian and choose a nickname that does not identify the child. Contact us with questions or to request removal of a public result. This does not mean a separate button to hide every result is currently available.

5.5. In the app, local quiz data is stored on the device according to the profile and is not automatically published to the website’s leaderboard. In Youth Mode, the quiz runs locally without a website account, public ranking, or transmission of results.

6. Moreh HaEmet Q&A, Et Lehashiv, and Learning Content

6.1. The services include searching, filtering, opening questions and answers, consulting sources, and copying or sharing prepared content. Website browsing may be included in the usage and measurement records described in this policy. Account-based saving of content or progress is handled according to your choice and the service.

6.2. A personal question or material sent through the Association’s contact channels is treated as an inquiry, not as public information merely because it was sent. Publication of an inquiry that identifies a person requires appropriate permission or another lawful basis. This policy does not grant blanket permission to publish private correspondence.

6.3. The content of an inquiry, study choices, reading history, and activity in Torah services may reveal or permit inferences about beliefs, views, and personal matters. Limit unnecessary details and consider the available saving and publication options.

7. The Siddur, Daily Times, and Location

7.1. The Siddur and daily-times tools may store display preferences, bookmarks, reading position, time zone, and geographic location, depending on the feature used.

7.2. On the website, granting browser location permission may allow the daily-times tool to receive precise latitude and longitude. The location and time zone are stored in the browser for reuse and sent with date information to Hebcal to calculate times and calendar events. That provider also receives technical communication details, such as the IP address.

7.3. Website location use also includes checking Shabbat and holiday dates for operation of the daily-times component. Information already stored in the browser may be reused on later visits. Revoking location permission prevents a new location from being obtained but does not necessarily erase a stored location. To remove it, also clear the website’s data in your browser settings.

7.4. In the adult app pathway, after a manual selection or location permission, latitude, longitude, time zone, and date are stored on the device and sent to Hebcal for calendar and time data. Account details are not sent with them. The last location may also be used for local calculations and reminders. In Youth Mode, these location and network services are blocked; only local date and calendar information is shown.

7.5. You can refuse location permission and continue using content that does not depend on it. Daily-times functionality depends on the data and options available in each service. Permissions can be changed in your browser or operating-system settings.

7.6. The country and city of residence in your account profile are separate from the daily-times location. The app does not infer them from GPS, use them to replace the prayer location, or send them to Hebcal. Changing either setting does not change the other.

8. App Permissions, Biometrics, and Reminders

8.1. If biometric unlock is selected for a local account, authentication uses the operating system’s mechanisms. The app receives an authentication result, not the fingerprint image or facial template stored by the system. Availability depends on the device and its settings.

8.2. Prayer reminders in this version are local notifications scheduled on the device at your request. They may require notification permission and, on Android, exact-scheduling settings. Enabling them does not automatically subscribe you to a mailing list or server-delivered content notifications.

8.3. For an adult who chooses lesson reminders or push notifications about new articles, Firebase Cloud Messaging processes an installation token and technical information needed for delivery. The token is linked to the account only after an express request and an authorization check. Firebase’s automatic initialization is disabled until that choice is made. This operation is blocked in Youth Mode.

8.4. You can change reminder choices in the app and permissions in device settings. Reminder and location settings may apply to the device and remain after sign-out. Disable them separately if necessary.

8.5. Opening a link, email, phone call, download, copy, or share action at your request may transfer information to the app you choose. For example, sharing through WhatsApp is also subject to that service and to your selected recipients.

9. Donations and Support

9.1. When you donate, the Association may receive your name, contact details, amount, date, payment method, reference, and information needed to issue a receipt, maintain accounts, or investigate a charge. Choosing an external donation route takes you to its payment provider.

9.2. Support channels shown on the website include Nedarim Plus and methods such as Bit and bank transfer. Payment details are provided through the selected channel and processed under its terms. Do not send full card details or a security code to the Association in an ordinary message.

9.3. Donation and receipt data may be retained after an account closes when required for accounting or by law. Account deletion or removal from a mailing list does not cancel a recurring donation; cancellation of the charge must be requested separately.

10. Inquiries, Mailing Lists, and Matchmaking

10.1. When you contact us by email, phone, or a messaging service, we receive the details you choose to provide and your message. These are used to respond, handle the request, and keep the records needed for that purpose. The email or messaging provider also processes information under its own policy.

10.2. The website’s registration form has a separate choice for receiving updates. When the mailing service is active and you choose to subscribe, your contact details are used to send the content described in that choice. Promotional messages or requests for support are sent only in accordance with your permission and applicable law. You can request removal using the message’s unsubscribe option or by contacting us; account deletion is not required.

10.3. Service messages needed to fulfill your request, protect your account, or handle a donation may be sent without a content-update subscription, subject to applicable law.

10.4. Matchmaking registration is open according to the server’s configuration. Voluntary enrollment is separate from general app use and follows the declarations, privacy provisions, and permissions described in the matchmaking addendum to this document. An old preference setting is not permission to publish a profile or disclose a phone number.

10.5. Information provided for matchmaking is not intended for publication on the website or in open groups. Details may be passed to a prospective match only within the permission given and for the purpose of an introduction. Before providing details, consider asking the service representative what will be shared and with whom. Requests to stop handling an introduction or remove details may be sent through the same channel or by email.

11. Technical Information, Cookies, and Browser Storage

11.1. Website browsing involves processing communication and usage data such as IP address, browser and operating system, device type, pages and requests, timestamps, referral source, errors, and security data. Measurement services may infer an approximate location from an IP address. This differs from permission to obtain a precise location.

11.2. The website uses cookies and local storage for sign-in, remembering preferences, component operation, and measurement. Local data includes a quiz visitor identifier, sound preference, and location saved for the times tool. Some information is stored without an account.

11.3. The website incorporates Automattic’s WordPress.com / Jetpack components, measurement based on Matomo through WPMU DEV, and external media and infrastructure components. Measurement components may receive visit, page, and communication information. Describing the website as using “essential cookies only” would not describe all these components.

11.4. You can block or delete cookies and site data through your browser. Blocking may affect sign-in and saved preferences. Additional management options, if offered by the service, follow your selection. This policy does not represent that every measurement component currently waits for approval in a consent dialog.

11.5. Deleting browser data does not erase information already sent to a server or external provider. Similarly, signing out does not remove the website’s data from the device.

12. Recipients and Service Providers

12.1. To provide the services, information is disclosed as needed to Supabase for authentication, databases, and storage; Google or Apple if you choose their sign-in; the SMS provider actually configured, if the service is active and a phone number has been added; Firebase if lesson reminders or new-article push notifications are enabled; Hebcal if an adult requests location-based calendar information; and hosting, maintenance, security, email, payment, and accounting providers as needed for the selected service.

12.2. WordPress.com / Jetpack components may process technical and visit data according to their functions on the website. Provider details appear in Automattic’s Privacy Notice for Visitors to Our Users’ Sites: https://automattic.com/privacy-notice/. WPMU DEV / Matomo provides measurement. Hebcal receives location and request data for website daily times, as described in section 7.

12.3. YouTube and Vimeo videos, Spotify players, messaging services such as WhatsApp and Telegram, source links, payment providers, and file-distribution services also operate under their own terms and policies. Loading an embedded external component may contact its provider without deliberately leaving the page. In the adult app pathway, Spotify loads only after the listening card is selected. YouTube videos may contain ads supplied by YouTube; the app does not include its own advertising SDK. The existence of an external link does not mean all account data is disclosed to it.

12.4. Information may also be disclosed to professional advisers, authorities, or courts where required or permitted by law, and to investigate misuse or protect rights, to an appropriate extent. Information may be disclosed to another recipient following an appropriate user request or authorization.

13. Processing Outside Israel

13.1. Internet, measurement, payment, media, and communication providers may process and store information outside Israel. Processing locations depend on the provider and service and may involve more than one country. Not all information displayed on the website is stored in Israel.

13.2. Transfers abroad of personal information for which the Association is responsible are subject to applicable transfer laws and appropriate arrangements with providers. A deliberate visit to an external service is also subject to its own transfer arrangements. Contact the Association with questions about particular information.

14. Purposes of Information Use

14.1. Information is used to operate accounts and requested services; save preferences and content; analyze country and city to understand the service’s reach and plan services; operate the quiz and display feedback and rankings; calculate times and reminders; answer inquiries; handle requested introductions; send selected updates; and process donations and receipts.

14.2. Technical information is also used for maintenance, usage measurement and service improvement, troubleshooting, and prevention of fraud and misuse. Information needed to comply with law, resolve a dispute, or protect rights is processed for those purposes. A materially new use inconsistent with the original collection purposes requires assessment, notice, and consent where required.

15. Retention

15.1. Retention depends on the information and purpose. Account details and saved personal items support the account; quiz attempts and rankings support history, scoring, and fair competition; inquiries support handling and follow-up; and donation data is also retained under accounting obligations.

15.2. Information is retained while needed for the stated purposes or required by law, not indefinitely merely because storage is possible. When there is no further need or basis for retention, the information must be deleted or appropriately de-identified. Data allowing indirect identification is not necessarily anonymous.

15.3. Deletion requests may be subject to retention of some information because of a legal obligation, a dispute, or a defined security need. Backups are not necessarily updated at the same time as the active system. In handling a request, we will explain the applicable exceptions and retention periods. Deletion by the Association does not ensure deletion of a copy someone else made from public information.

15.4. Local device or browser information is retained according to their settings until the relevant deletion or reset. Local data must be deleted on the device where it was stored.

16. Information Security

16.1. The Association is committed to handling information in accordance with law and taking appropriate protective measures based on the service and information involved. No system is completely immune to failures or unauthorized access. Describing encryption does not promise such immunity.

16.2. Choose a unique password, protect your device, sign out of the website on shared devices, and keep recovery keys secure without sharing them. You can report suspected unauthorized access without including a password or recovery key.

16.3. Any security incident will be handled according to the Association’s applicable obligations, including reporting or notification obligations where they apply.

17. Access, Correction, Account Closure, and Deletion

17.1. You may contact info@m-lenegdi.org to request access to personal information, correction, account closure, or deletion, according to law and the type of information. Do not send a password, one-time code, or recovery key.

17.2. Deletion in the app: an adult opens My Account > Manage Account > Delete Account and All Data, verifies ownership using the local password if one was set or the authenticated account connection, types the confirmation word shown in the interface, and confirms. After successful deletion, the Supabase identity, profile, country-and-city record, synchronization copy, website link and app data, reading history and saved items created through the app, lesson-board registrations, and notification tokens are deleted, followed by the local vault. If online deletion fails, the process stops and local data remains available for another attempt.

17.3. Deletion without the app: instructions and a request link are available at https://m-lenegdi.org/account-deletion/. You can send a request from the account’s email address. We will ask only for reasonable information needed to verify ownership and handle the request.

17.4. Local youth profile: Manage Account lets you delete the encrypted profile and all its local data from the device. This profile has no cloud account or cloud copy. The Association cannot remotely delete information held only on the device.

17.5. A WordPress account that existed independently before linking may remain a separate website account; the link and app data are deleted. You can also request deletion of the website account, subject to law and any independent content its owner published. A website account created solely for the app, with no independent content, is deleted when the technical conditions allow it.

17.6. Donation data, receipts, accounting records, dispute records, or information required by law may be retained only for the necessary purpose and period. Account deletion does not cancel a recurring donation. Operational logs may retain the event type and time after account identifiers are deleted or anonymized. Backup copies may remain temporarily until the normal backup cycle and will not be used to continue operating the account.

18. Children and Minors

18.1. Torah content, the Siddur, and local quiz paths are available to minors. A birth date supplied when setting up a youth profile is used on the device to determine Youth Mode; it is not identity-document verification.

18.2. Youth Mode does not create or link an online account and does not include email, phone, country, city, or street collection; social sign-in; cloud synchronization; website history; private lessons; server notifications; location services; external links; shopping; donations; inquiries; or matchmaking. Profile and activity details stay in the device’s local vault.

18.3. Parents and guardians are encouraged to supervise minors’ use and keep the profile password and recovery key appropriately. A parent who believes a minor’s information reached an online service can contact us for investigation, correction, or removal as appropriate.

19. Information About Others and Public Sharing

19.1. Do not provide another person’s personal information without permission or another appropriate lawful basis. This also applies to halachic questions describing an identifiable person, matchmaking inquiries, documents, dedications, and names in material submitted for publication.

19.2. When sharing content or joining a messaging group, check what other members or recipients can see. This policy does not give users permission to collect other participants’ personal information or use it for harassment or mailing lists.

20. Policy Updates

20.1. This policy will be updated to reflect changes in services, information processing, and law. The update date appears at the top. Material changes will be communicated appropriately, and additional consent will be requested where required.

20.2. Changing the wording does not, by itself, authorize a new use of information collected previously. Describing a future service neither activates it nor constitutes consent to it.

21. Contact

21.1. Mishpatav Lenegdi Association, Registered Association No. 580648681. Email: info@m-lenegdi.org. Phone: 055-688-1423. Please indicate whether your inquiry concerns the website, the app and its version, the quiz, a donation, or another service.

21.2. Related documents: Terms of Use and Accessibility Statement. These documents address users of all genders.