Privacy Policy

1. Who We Are

MiklatMatch ("we", "us", or "our") operates the MiklatMatch application and website atmiklat-match--miklatmatch-14930.europe-west4.hosted.app. We provide a platform for locating, reviewing, and sharing information about bomb shelters in Israel. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with Israel's Privacy Protection Law (5741-1981) and its 2023 amendments.

For questions about this policy, contact us at privacy@miklatmatch.com.

2. Information We Collect

Information you provide directly

• Account information: first name, last name, email address, date of birth, password (hashed — we never store your plaintext password)
• Profile photo (optional)
• Shelter information you submit: name, address, coordinates, capacity, amenities, access codes
• Reviews: ratings, written reviews, and photos you upload
• Status reports: real-time shelter condition reports

Information collected automatically

• Device location (only when you explicitly grant permission, used to show nearby shelters and calculate distances)
• Push notification subscription token (to deliver red-alert notifications)
• Basic usage analytics (pages viewed, features used)
• IP address and standard web server logs

3. How We Use Your Information

• To provide the core service: finding nearby shelters, displaying reviews, and sending red-alert push notifications
• To authenticate your account and keep it secure
• To display your public contributions (shelter additions, reviews) to other users — your name is visible on reviews you post
• To moderate content for safety and accuracy
• To improve the app based on usage patterns
• To communicate with you about your account (password resets, security alerts)

We do not sell your personal data to third parties, use it for advertising profiling, or share it with any party except as described in Section 4.

4. Information We Share

• Publicly visible: Your display name and reviews are visible to all app users. Shelter data you submit is visible once approved.
• Service providers: We use Railway (database hosting) and cloud storage for photos. These providers process data only on our behalf and under strict data processing agreements.
• Legal requirements: We may disclose data if required by Israeli law, court order, or to protect the safety of users.

5. Location Data

Location access is entirely optional. We request it only when you use the "Find nearby shelters" feature. Location is processed on-device to calculate distances — we do not log or store a history of your location. You can revoke location permission at any time in your device settings.

6. Push Notifications

If you grant notification permission, we store a push subscription token to send you red-alert (rocket siren) notifications. This token is linked to your account if you are logged in, or stored anonymously if not. You can revoke notification permission in your browser or device settings at any time.

7. Data Retention

We retain your account data for as long as your account is active. You may request deletion at any time (see Section 8). Deleted accounts are permanently removed within 30 days. Reviews and shelter contributions associated with a deleted account are anonymised rather than removed, to preserve the community knowledge base.

8. Your Rights

Under Israeli law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (edit profile in the app)
• Delete your account and personal data (in the app: Profile → Delete Account)
• Object to certain uses of your data

To exercise these rights, contact us at privacy@miklatmatch.com. We will respond within 30 days.

9. Security

We use industry-standard security measures including HTTPS (TLS), bcrypt password hashing, JWT-based sessions, and restricted database access. No system is perfectly secure; if you discover a vulnerability, please report it to privacy@miklatmatch.com.

10. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify registered users by email. Continued use of the app after changes take effect constitutes acceptance of the updated policy.