Privacy Policy

1. Who controls your data

BoNetze, operated in Israel by the BoNetze team, decides why and how your data is used and is therefore the controller of that data under the Protection of Privacy Law, 5741-1981, as amended by Amendment 13.

Write to us through the report link on every place page for anything concerning your data. We answer within seven working days, and a request under your rights below within thirty days.

2. What we collect and why

To sign you in: your phone number and the fact that it was verified, or the name and e-mail address Google gives us if you choose that route. Without one of them you cannot have an account, but you can still browse the whole catalogue.

To run the service for you: your interface language, the assistant you chose, an optional birth year, the places you save, your likes, reactions, check-ins, suggestions, photos, routes, points and coupons.

To keep the service safe: the address your requests come from, the description your browser sends and the time of each sign-in, stored with the session.

We use this data to provide the service you asked for, to keep it working and secure and, only where you consented, to share your location inside your family group. We never sell it and we never use it for advertising.

3. Location

Your location is used only if you switch sharing on for yourself, and only inside the family group you belong to. It is never shown to other users, never used to build a profile of you and never given to a business.

We keep your last position and the positions of the past 24 hours; anything older is deleted automatically. When you switch sharing off, or withdraw the consent from your profile, sharing stops at once and the positions we hold are deleted.

4. Supervised profiles for ages 14 to 17

A child profile is created by a parent or guardian, who confirms that they hold parental responsibility; that confirmation is recorded. The child's phone number is never stored, only a one-way hash of it used to match the invitation.

A child profile has the family map and the emergency numbers and nothing else. It receives no marketing, earns no points and has no public presence. The parent can delete it at any moment, and everything it holds goes with it.

5. Photos

Before a photo you upload is stored, its location metadata and the other data the camera embedded are removed. The photo is then checked automatically and by a person before it appears.

A published photo is shown with the place and without your name. You can ask us to remove any photo you uploaded, through the report link.

6. Who else sees your data

Service providers who work for us and only on our instructions: the messaging provider that delivers your one-time code, our hosting and database provider, the map tile provider, and our error and usage measurement, which is configured not to receive your identity.

The members of the family group you joined, for the location you chose to share with them. Businesses see counts, never who you are. Authorities only where the law requires it.

Some of these providers process data outside Israel. Where that happens, the transfer is covered by the safeguards Israeli law requires.

7. How long we keep it

Your account data is kept while your account exists. Positions are kept for 24 hours. Sign-in sessions expire and are removed.

When you delete your account everything about you is erased from the live database, consent records included. What remains is a dated record that a consent of a given kind and version once existed, under a one-way digest that cannot be traced back to you; we keep it as evidence that we asked properly.

8. Your rights

You may see the data we hold about you, and the profile screen offers all of it as one file. You may correct it, ask for it to be deleted and withdraw any consent you gave, without giving a reason and as easily as you gave it.

Withdrawing a consent stops what it allowed from that moment on; it does not make unlawful what was lawful before.

If you believe we handled your data wrongly, tell us first through the report link. You may also complain to the Privacy Protection Authority at the Ministry of Justice.

9. How we protect it

Traffic is encrypted in transit. Phone numbers used for invitations are stored only as a one-way hash. Access to the database is limited to the people who need it, and administrative actions are logged.

If a security incident affects your data we will tell you, and the Privacy Protection Authority, as the law requires.

10. Cookies and local storage

We set a cookie so that you stay signed in, and a cookie for a supervised child's device. Your theme and language choices are stored in your browser.

There are no advertising cookies and no tracking across other sites.

11. Changes to this policy

When this policy changes we publish a new version with a new version number and ask you to accept it before you continue. The version you accepted is stored with the date.