דוברים — מדיניות פרטיות | Dovrim — Privacy Policy

תאריך תחילה / Effective Date: 21.07.2026

מסמך זה מופיע בעברית ולאחריה באנגלית. הנוסח האנגלי הוא הנוסח המחייב (ראו סעיף "שפה" להלן). This document appears in Hebrew followed by English. The English version controls (see "Language" below).

Privacy Policy — Dovrim (English — controlling version)

1. Who we are

This Privacy Policy (the "Policy") explains how Liad Peretz, an individual developer based in Israel (the "Provider", "we", "us"), collects and processes personal data in connection with the Dovrim mobile application (Hebrew: דוברים) — an English-vocabulary learning app for Hebrew speakers (the "App" or the "Service").

• Data controller: Liad Peretz, individual developer, Israel.
• Privacy contact: contact@liadperetz.com
• This Policy: https://dovrim.liadperetz.com/privacy
• Terms of Use: https://dovrim.liadperetz.com/terms

This Policy applies together with the Terms of Use; on matters of personal data, this Policy controls.

2. The short version

• The App is offline-first: the vocabulary dataset ships inside the App, and your progress is stored in an encrypted database on your device.
• Only your dynamic learning data, content you choose to submit (associations, upvotes, translation reports), and sign-in identity sync to our backend, hosted with Supabase in the European Union (Frankfurt, Germany).
• The Free Tier is supported by advertising served by independent third-party ad networks — where and when ads are served (see Section 4); paid subscribers see no ads. We have no analytics or crash-reporting tools of our own, and we never sell data. Period.
• You can use the App as a guest, without providing a name or email.
• You can delete your account and all your data from inside the App at any time.

3. Data we collect

You are under no legal obligation to provide personal data; it is needed only to provide the Service as described below. If you prefer not to provide it, you can use guest mode — but we will not be able to restore your progress on another device.

About associations and upvotes: associations are stored so that they can be shown to other users — without your name. They are linked to an internal identifier only, and your upvote records may be similarly accessible (internal identifier only); your display name is never exposed to other users. Please do not include personal information you would not want stored on our servers in an association or a report note.

4. Data we do NOT collect — and advertising

• No analytics, no crash reporting, and no tracking tools of our own — we use no such SDKs for our own purposes.
• No access to your location, contacts, camera, microphone, or photos — the App requests no such system permission.
• We do not sell personal data and do not pass it to third parties for their own marketing. The ad networks in the Free Tier receive data directly from your device, only as described below — never from our servers.
• We ourselves do not track you across other apps or websites. Third-party ad networks may do so only as set out below: on iOS — only if you approved it in the system App Tracking Transparency prompt; in the EEA, the UK, and Switzerland — only with your consent; and elsewhere — under their own privacy policies and subject to the operating system's controls, which let you limit or reset your advertising identifier in your device settings.
• We do not knowingly collect data from children under 16 (see Section 10).

Ads in the Free Tier

• Dovrim's Free Tier is supported by advertising, which helps fund the Service. Paid subscribers see no ads. (See the Terms of Use, Sections 4.4 and 12.)
• Current status: the current version of the App shows no ads and contains no ad-network SDKs at all. The disclosures below apply where and when ads are served in the Free Tier.
• Who serves the ads: ads are served by independent third-party ad networks. When they serve ads, these networks may process device data, advertising identifiers, your IP address, and general usage data, under their own privacy policies. We do not control how they operate; they act as independent recipients of the data — not as processors on our behalf.
• iOS — App Tracking Transparency (ATT): where cross-app tracking may occur on iOS, you will first be asked to allow it through the system prompt (App Tracking Transparency). Declining never blocks any feature — you simply see less-relevant ads. You can change your choice at any time in iOS Settings.
• EEA, UK, and Switzerland — consent: personalized ads are shown only with your consent, which is requested separately from your acceptance of the Terms of Use and which you can withdraw at any time (see Section 11). Consent — not legitimate interest — is the legal basis for personalized advertising. Without consent, only non-personalized ads are shown.
• Under 16: we do not show personalized or targeted advertising to users under 16 (see Section 10); in any case, the Service is intended only for people aged 16 or older.
• Reporting an inappropriate ad: write to us at contact@liadperetz.com (or use the in-app reporting option, where available) — we will act on it, including with the relevant ad network.

5. Purposes and legal bases

Under Israel's Protection of Privacy Law, 5741-1981, we use personal data only for the purposes for which it was provided. We do not carry out automated decision-making with legal effect on you, and we do not build marketing profiles.

6. Where data lives and who processes it

• On your device: your progress is stored in an encrypted database (file-level encryption); the encryption key and your sign-in tokens are protected by the operating system's secure key store (iOS Keychain / Android Keystore). We never transmit them; on iOS they may be included in your own encrypted device backups.
• On the server: synced data is hosted by Supabase (an infrastructure provider acting as our processor) in region eu-central-1 — Frankfurt, Germany. Database-level access controls (Row-Level Security) ensure each user can read only their own data, except content intended for sharing — associations and upvote records, without your name and under an internal identifier only — as described in Section 3.
• Sign-in providers: if you choose Google or Apple sign-in, authentication happens with them under their own privacy policies. We receive basic account details from them — your email address, display name, avatar-image URL, and the provider's account identifier — and store no more than that.
• All traffic between the App and the servers is encrypted in transit (TLS).

7. Sharing

We share personal data with no one, except: (a) Supabase, as our hosting processor, as described above; (b) association text shown to other users without your name, as described in Section 3; (c) where required by law or by an order of a competent authority; (d) in a transfer of the Service (for example, incorporation or sale) — in which case we will notify you, and this Policy will continue to apply to data collected under it; (e) where and when ads are served in the Free Tier — third-party ad networks receive device and advertising data directly from your device — never from our servers — as described in Sections 3–4 and under their own privacy policies.

8. Retention

• Account and learning data are kept for as long as your account exists.
• Account deletion (Section 9) permanently and immediately erases all your data from our live systems — including associations you wrote — and then from your device. Residual copies in the hosting provider's routine backups are purged automatically within a short rotation window (days).
• Technical infrastructure logs (IP addresses) are retained briefly by the hosting provider for security and operations and are deleted on a rolling basis.

9. Account and data deletion

• From inside the App (fastest): Profile → "Delete account" → confirm. Deletion is permanent and removes your sign-in identity, learning progress, associations, upvotes, and reports — from our servers and your device.
• Without access to the App: email contact@liadperetz.com from the address you signed up with, subject "Account deletion". We process requests within 30 days; deletion through this channel erases your data from our servers, and the on-device copy is removed when you uninstall the App. Full instructions: https://dovrim.liadperetz.com/delete-account
• Guest accounts: a guest account cannot be identified remotely — it can only be deleted from inside the App. Note that guest data not linked to an account may also be lost on reinstall or when switching devices.
• Note for iOS users: for operating-system security reasons, a stored sign-in may survive deleting and reinstalling the App (it is kept in the Keychain). Signing out or deleting your account clears it.

10. Children (16+)

The Service is intended only for people aged 16 or older, and we do not knowingly collect personal data from anyone under 16. If we learn that such data was collected, we will delete it. If you believe a child under 16 has provided us data, contact us: contact@liadperetz.com.

11. Your rights

Under Israeli law (Protection of Privacy Law, 5741-1981, as amended): you have the right to inspect data held about you, to request correction or deletion of inaccurate data, and to lodge a complaint with the Privacy Protection Authority (www.gov.il/he/departments/the_privacy_protection_authority).

If the GDPR applies to you (for example, you are in the EU): you have the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and objection — and the right to complain to your local supervisory authority.

Where we rely on your consent, you may withdraw it at any time (by contacting us or using the relevant in-app control), without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any right: contact@liadperetz.com. We respond within 30 days. Exercising your rights is free of charge.

12. Security

We apply reasonable, accepted safeguards: local database encryption, keys and tokens in Keychain/Keystore, encryption in transit (TLS), server-side row-level access control (RLS), and server-side content moderation. However, no security method is perfect, and we cannot guarantee absolute security. If a security incident affects your data, we will act in accordance with our legal notification duties.

13. International transfers

Synced data is stored in the European Union (Germany). Israel benefits from an EU adequacy decision, and transfers between Israel and the EU are carried out in accordance with applicable law.

14. Changes to this Policy

We will update the Effective Date above whenever this Policy changes. For material changes, we will give prominent advance notice — at least 30 days before the change takes effect — via an in-app notice (and by email, where your account has one). Changes do not apply retroactively.

15. Language

This Policy is published in Hebrew and in English. In case of any inconsistency, the English version controls.

16. Contact

Data controller: Liad Peretz (individual developer, Israel)
Email: contact@liadperetz.com
Website: https://dovrim.liadperetz.com