Privacy Policy — Israel
Draft: this text is under review and not yet in force.
Version IL-[DATE] · Last updated: [DATE]
LIVEDATE is a real-time dating app. We designed the app to collect as little data as possible: your exact location is never saved, and your verification selfie is deleted as soon as it has been reviewed.
This policy explains what data we process, why, for how long, and what your rights are. It applies to members who use LIVEDATE in Israel. It is available in Hebrew, English and French. [LAWYER: if the versions differ, the Hebrew version prevails.]
1. Who is responsible for your data?
The data controller ("בעל השליטה במאגר") is Pixela (Osek Patur), registration number [TO BE DECIDED], [ADDRESS — TO BE DECIDED] ("we", "us"). Contact for any question about your data: support@livedate-app.com. [LAWYER: is a data protection officer (DPO) required? If so, their details here.]
2. What data do we process?
You have no legal obligation to give us this data; without it, some LIVEDATE features cannot work (for example, no account without an email address). [LAWYER: notice obligation under section 11 of the Privacy Protection Law.]
Account: email address, password (stored encrypted; we never know it)
Why
Create your account, sign you in, secure your access
How long
As long as your account exists
Profile: first name, date of birth (only your age is shown), gender, gender you are looking for, intention, bio, interests, answers to questions, photos and videos, language
Why
Show you to other members and suggest compatible profiles
How long
As long as your account exists (or until you delete them)
Approximate area ("Nearby" mode): an area of about 1 km, never your exact location
Why
Show a rounded distance ("5 km away") and suggest people near you
How long
Updated when you use the app; deleted with your account
Check-in ("Live" mode): the place you chose, the start and end time
Why
Make you visible to people at the same place or close by, for 2 or 4 hours
How long
Automatically erased after 30 days
Location at check-in
Why
Check that you are really there
How long
Used at that moment, never saved
Interactions: likes, matches, messages, meetup suggestions
Why
Run matches and messaging
How long
As long as the match exists. If either of you deletes their account, the chat is deleted for both
Delivery and read receipts
Why
Show the other person "delivered" and "read" ticks. You can turn off read receipts (Profile → Settings)
How long
As long as the chat exists
Plan, purchases and counters: your plan (free, LIVEDATE+, Gold), its dates, the number of likes and undos used today. The payment itself is handled by Google Play: we never receive your card details
Why
Apply the free plan limits and plan benefits; keep accounts
How long
Plan: as long as your account exists. Counters: 30 days at most. Purchases: [LEGAL PERIOD, accounting], no longer linked to your account once it is deleted
Consents: date and version of the terms you accepted, date of your consent to sensitive data
Why
Prove that you accepted the terms and gave your consent
How long
As long as your account exists
Safety: blocks, reports (reason and details you write)
Why
Protect members and moderate
How long
Blocks: until unblocked or the account is deleted. Reports: [PERIOD, e.g. 1 year]; after an account is deleted, kept without any link to it
Moderation log: moderation team actions (type of action, account or content concerned, reason)
Why
Keep a record of moderation decisions and be able to account for them
How long
1 year, then automatically erased; after an account is deleted, kept without its first name or email
Profile verification: selfie with a gesture
Why
Check that your photos are really yours (Verified badge)
How long
Selfie deleted as soon as a decision is made. The result (approved or rejected, reason) is kept for 1 year
Notifications: your phone's technical identifier for notifications, your settings
Why
Send you the notifications you turned on
How long
Until you sign out or delete your account. Sending history: 30 days
Crash reports: phone model, Android and app version, technical description of the error
Why
Fix bugs in the app
How long
Kept by Google (Firebase Crashlytics) for 90 days at most. They contain no email, first name, location, messages or account identifier
Anti-bot check: technical signals from your device and connection, analysed at sign-up or sign-in
Why
Prevent automated creation of fake accounts
How long
Processed by Cloudflare (Turnstile) during the check; not kept by LIVEDATE
Statistics: aggregated numbers (e.g. number of check-ins per place and per hour)
Why
Improve the service and understand which places work
How long
These figures are anonymous: they cannot identify you
Sharing your date
The "Share my date" feature prepares a message (with whom, where, when) that you send to someone you trust with the app of your choice (WhatsApp, text message…). If you turn on "Add my current location", your location is taken once and added to the message as a map link. It is only sent to the person you choose: it does not go through our servers and is never saved by LIVEDATE.
We do not collect: your GPS location continuously, your contacts, the content of your phone, or advertising data. There is no targeted advertising and we do not sell any data.
Information of special sensitivity
Your gender and the gender you are looking for may reveal your sexual orientation: this is information of special sensitivity under the Israeli Privacy Protection Law. It is necessary for a dating app to work: you provide it with your explicit consent, given at sign-up, and you can withdraw it at any time by deleting your account. [LAWYER: Amendment 13, classification of the data and related obligations.]
Profile verification
The comparison between your selfie and your photos is done by eye, by a person on the moderation team. No facial recognition or automated biometric processing is used. The selfie is only visible to moderators, never to other members.
3. Why are we allowed to use your data?
- To provide the service you asked for when accepting the Terms of Use: account, profile, discovery, matches, messaging, check-in, plans.
- With your consent: information that may reveal your sexual orientation, location at check-in, notifications, profile verification. You can withdraw it at any time (app settings, turning off notifications, deleting your account).
- For members' safety: moderation, abuse prevention, anonymous statistics.
- To comply with the law: answering requests from the authorities where the law provides for it.
4. Who can see your data?
- Other members see your profile (first name, age, photos, bio, interests, answers, badge), a rounded distance or the name of the place where you checked in. They never see your email address, your full date of birth or your exact location.
- In discreet mode, you only appear to people you have liked.
- Paused profile: you no longer appear in discovery at all.
- Who liked you: LIVEDATE+ and Gold members see the list of people who liked them. On the free plan, only the number is shown.
- Tonight's pulse (Gold) shows how lively some places are in three levels ("Lively", "Buzzing", "Packed"), never a number of people, nothing below a minimum threshold set for each city and no names.
- Moderators (the LIVEDATE administrator) can view profiles, photos and reports to keep members safe. They do not read your private chats. Every moderation action is recorded in a log.
- Our technical service providers, who process data only on our behalf:
Supabase
Role
Hosting of the database, accounts and photos — region: [REGION]
Google (Firebase Cloud Messaging and Crashlytics)
Role
Sending notifications to your phone; crash reports without personal data
Google Play
Role
Payment for plans (we do not receive your card details)
MapTiler
Role
Map backgrounds (receives the map area displayed, not your identity)
Cloudflare
Role
Hosting of the website and the admin console; anti-bot check (Turnstile)
Telegram
Role
Internal moderation alerts: only a type and a pending count (e.g. "3 reports"), no data about you
[Brevo — to be added once connected]
Role
Sending emails (confirmation, password)
Place data (names, categories, addresses of bars, cafés, restaurants…): © OpenStreetMap contributors (ODbL licence) and Foursquare Open Source Places, © Foursquare Labs, Inc. (Apache 2.0 licence). These public lists are imported once into our database: no data about you is sent to OpenStreetMap or Foursquare, which are not our service providers.
Data processed outside Israel
Our providers may store or process data outside Israel (for example in the European Union or the United States). These transfers take place under the conditions set by the Israeli regulations on transferring data to databases abroad, with providers who commit to protecting your data. [LAWYER: exact basis for each transfer; country of the Supabase region.]
5. Your rights
At any time, you can:
- review the data we hold about you and get a copy;
- correct it if it is inaccurate or incomplete (most of it directly in the app: Profile → Edit my profile);
- delete your account and your data: from the app (Profile → Account → Delete my account), or by writing to support from your account's email address;
- withdraw your consent (notifications; sensitive data by deleting your account);
- refuse advertising messages (we send none without your consent).
To exercise these rights, write to support@livedate-app.com. We will answer within the time limits set by law [LAWYER: response time; 30 days?]. We may ask you to prove that the account is yours: a deletion request must come from the account's email address.
If you think your rights are not being respected, you can file a complaint with the Privacy Protection Authority (הרשות להגנת הפרטיות, www.gov.il/he/departments/the_privacy_protection_authority). [TO VERIFY: website address.]
6. Security
- All communications are encrypted (HTTPS).
- Photos, videos and selfies are stored in private spaces, only accessible to authorised people.
- Each member can only read what concerns them (access rules enforced directly by the database).
- Access to the admin console is protected by two-factor authentication, and every action there is recorded in a log.
- [LAWYER: Information Security Regulations 2017 (תקנות אבטחת מידע): security level of the database and related obligations.]
7. Minimum age
LIVEDATE is only for people aged 18 and over. If we learn that an account belongs to a minor, it is deleted.
8. Changes
We may change this policy. If there is an important change, we will tell you in the app before it applies.