Privacy Policy

The data controller responsible for your personal data is:

• Account data: email address (required to create an account and verify identity via OTP)
• Profile data: display name, languages, location (city/country), topics of interest - all optional and controlled by you
• Content data: posts, messages, and other content you choose to publish on the platform
• Sign-in provider data: if you sign in with Google or Apple, we receive a basic account identifier and your email from that provider to create and secure your account
• Support messages: if you contact us, we keep the name, email, and message you send so we can reply
• Usage data: pages visited, actions taken, timestamps - used only to improve the platform
• Device/technical data: IP address, browser type, device type - standard server logs
• Location data: approximate city/country if you choose "Use my location" - never stored without your explicit action

• Provide and operate the YehudaHub platform and its features
• Authenticate your identity and secure your account
• Enable you to post, connect, and message within the community
• Show you relevant content and community activity
• Improve platform performance and debug issues
• Comply with legal obligations under French and EU law

• Contract performance: processing necessary to operate your account
• Legitimate interest: platform security, fraud prevention, analytics
• Consent: optional features like location sharing or notifications
• Legal obligation: where required by law

We keep your account data as long as your account is active. You can delete your account at any time from inside the app: in the iOS app under Profile, or on the web from the menu under Account. Your account is deactivated immediately, your posts and blessings are hidden, and all personal data is permanently deleted within 30 days. Chat messages you sent are anonymised rather than deleted so other members' conversations stay intact. If you change your mind, sign in again within 30 days and choose Restore account. We may retain data where legally required (such as transaction records); anonymised usage data may be retained indefinitely for analytics.

As a user in the EU/EEA, you have the right to:

• Access - request a copy of the personal data we hold about you
• Rectification - correct inaccurate or incomplete data
• Erasure - request deletion of your data ("right to be forgotten")
• Portability - receive your data in a machine-readable format
• Restriction - limit how we process your data in certain situations
• Object - object to processing based on legitimate interest
• Withdraw consent - at any time, for consent-based processing

To exercise any of these rights, use the contact form below or visit our Help page. You also have the right to lodge a complaint with the French data protection authority (CNIL - cnil.fr).

We do not sell your personal data. We share data only with:

• Cloudflare - network security, DDoS protection, and encrypted delivery
• Supabase - database and authentication infrastructure (EU data residency available)
• Vercel - hosting and edge delivery
• OpenAI - on-demand translation of posts and messages into your language; content sent for translation is not used to train models
• Google / Apple - sign-in, when you choose to authenticate with your Google or Apple account
• Google Maps / Nominatim - location search and geocoding (only when you search by location)
• Legal authorities - if required by applicable law or court order

Real estate and services listings: contact details within a listing are not publicly exposed by default. They are disclosed only through the platform's gated access flow, to verified users who have unlocked access to that listing.

YehudaHub uses essential cookies and browser storage to keep you signed in and remember your preferences (such as language). No advertising or tracking cookies are used. You can clear cookies at any time via your browser settings.

YehudaHub infrastructure is protected by Cloudflare, providing network-level security and DDoS mitigation. All connections are encrypted in transit (HTTPS/TLS). We use row-level security on our database, OTP-based passwordless authentication, and no stored passwords. We take reasonable technical and organisational measures to protect your data, but no system is unconditionally secure.

We may update this policy as the platform evolves. Significant changes will be communicated via the platform. Continued use after changes constitutes acceptance of the updated policy.