In short: we collect only what's needed to run the wallet, Smart Pay, the marketplace and the chat. Card numbers and codes are stored encrypted. We don't sell information, don't use it for advertising, and don't collect location, contacts, photos or credit card numbers. The information is stored with cloud providers, some of them outside Israel. You can view your information, ask to correct it, and delete your account.
1. About this policy and the database controller
1.1 This policy explains what personal information is collected when you use the PayZo app and the arnaki.app website, why, who it's shared with, how long it's kept and what your rights are. It is written under the Privacy Protection Law, 5741-1981, and the regulations under it.
1.2 The controller of the database is Guy Moshe Forer, 3 Golda Meir Street, Ness Ziona, Israel. Privacy enquiries: privacy@arnaki.app.
1.3 This policy forms part of the Terms of Use. If this English version and the Hebrew version differ, the Hebrew version prevails.
2. What information we collect
| Type | What exactly | Source |
|---|---|---|
| Account details | Name, email address, phone number, password (stored only as a hash from which the password can't be recovered), confirmation of age 18+, the time you accepted the terms and the version accepted | You, at sign-up |
| Cards | The brand, card number, PIN or security code if you entered one, amount and balance, expiry date. For store credit: the brand, amount, credit number if you entered one, source and description | You |
| Perk cards | The type of card you chose from the list (for example the issuer or club name) and a nickname. Not a card number | You |
| Smart Pay | The business and amount you checked, the recommendation you chose, your settings, and the balance updates that follow from your choice | You and your use |
| Marketplace | The listings you published (brand, amount, asking price) and seller approval (full name and time you accepted the seller terms) | You |
| Chat | The content of messages you send and receive, the opening message sent in your name when you contact a seller, your choice to share your phone number in a conversation, reports (reason and note) and blocks | You and other users |
| Contacting us | The content of your message and the contact details you gave | You |
| Technical and usage data | Your device's notification token (only if you allowed notifications), language and country from your device settings, IP address and type of browser or device, app error logs, views of marketplace listings (listing ID and a random browsing ID, guests included), coupon use, and balance checks you ran | Your device and our servers, automatically |
3. What we don't collect
3.1 We don't collect credit card or bank account numbers, location, contacts, photos, camera or microphone, and we don't use advertising identifiers. The app contains no third-party advertising or analytics tools.
3.2 In the current version we don't ask for an ID number or a picture of an identity document.
4. Do you have to give us the information?
4.1 There's no legal obligation to give us information; giving it is up to you.
4.2 Without account details (name, email, phone and password) you can't open an account. You can browse the marketplace and coupons as a guest without giving any details. Without card details you can't save a card in the wallet or get recommendations for it. Without a full name you can't get seller approval. Without allowing notifications you won't be notified about new messages, and the rest of the service works as usual.
5. How we use the information
- To run the service: manage the account, store and show the cards, calculate payment recommendations, show perks and coupons, run the marketplace and chat, and send service messages.
- For safety and fraud prevention: approve sellers, handle reports, enforce the terms, limit misuse and secure the service.
- To improve the service: fix faults using error logs, and improve the quality of payment recommendations based on the choices users make, using the data in aggregate form as far as possible.
- To comply with the law: keep records the law requires, respond to a competent authority and defend against claims.
5.1 We don't sell personal information, don't share it with advertisers, and don't build profiles for advertising.
6. What other users see
6.1 Other users see the name you chose, the details of the listings you published (brand, amount and price, without the card number or code), and the messages in your conversations with them.
6.2 Your phone number isn't shown to other users unless you choose to share it in a particular conversation. You can stop sharing at any time, but someone who already saw the number may have kept it.
6.3 If you give a card's details to another user outside the service, that's your choice, and what they do with them is outside our control.
7. Who we share information with
7.1 Service providers who work for us, only to the extent they need to provide their service to us. All of them are bound to protect the information:
| Provider | Role | What it receives | Location |
|---|---|---|---|
| MongoDB Atlas | Database | All the information in the service, with sensitive fields encrypted | Japan (Tokyo) |
| Railway | Server hosting | Information passing through the server, server logs | European Union (Netherlands) |
| Resend | Sending email | Email address, name and message content (reset code) | European Union (Ireland) |
| Expo and Apple | Phone notifications and app updates | Notification token, the sender's name in the notification (without the message content), an install ID for updates | USA |
| Sentry | Error reporting | Error and device details and an internal user ID. Names, emails, phone numbers and card numbers are removed before sending | USA |
7.2 Card issuers: when you ask for a balance check, the card's details (number, and code if required) are entered on the issuer's website, for the check only. The issuer receives them under its own policy.
7.3 As required by law: when we're required to by law, court order or a competent authority's demand, or when it's needed to protect the rights, property or safety of users, the public or us, including in a case of suspected fraud.
7.4 Structural change: in a merger, acquisition or transfer of the business, provided the receiving body undertakes to protect the information under this policy. We'll tell you about it in advance.
8. Transfer of information outside Israel
8.1 Some of our service providers store or process information outside Israel, as set out in section 7. The transfer is made under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001: to countries whose law ensures an adequate level of protection, such as EU member states, or on the basis of the provider's contractual undertaking to protect the information and not pass it to others.
9. Information security
9.1 What we actually do:
- all communication between the app and the server is encrypted (HTTPS);
- card numbers, PINs and security codes are stored encrypted with AES-256 and are not written to logs;
- passwords are stored only as a one-way hash (bcrypt);
- a password reset code is valid for 15 minutes, single-use and limited in attempts;
- changing your password signs out all devices, and signing out ends the session on the server;
- rate limits on sensitive actions, and access to information limited to staff who need it;
- in the app: the sign-in token is kept in the device's secure storage, the app screen is blurred in the app switcher, and a copied card number is cleared from the clipboard after 60 seconds.
9.2 No system is completely immune. If a security incident affects your information, we'll act under the law, including reporting to the Privacy Protection Authority and notifying you where the law requires.
9.3 You have a part too: choose a strong password you don't use elsewhere, and tell us right away if you suspect unauthorized access.
10. How long we keep information
| Information | Retention |
|---|---|
| Account details, cards, settings | As long as the account is active. On account deletion: deleted or anonymized immediately, as set out in section 11 |
| Chat messages | Kept with the recipient as long as the conversation exists. After an account is deleted, the sender's name is replaced with "Deleted user" |
| Reports and how they were handled | 3 years, for safety and fraud prevention |
| Seller approval and verification records | Up to 7 years, the limitation period, to defend against claims and prevent fraud |
| App error logs, listing view records | 30 days |
| Balance check records | 2 days |
| Backups | Up to 30 days, then deleted |
10.1 When the period ends, the information is deleted, or kept only in a form that doesn't identify you.
11. Deleting your account
11.1 You can delete your account at any time from inside the app (Profile → Delete account), or by asking at privacy@arnaki.app. Deletion is final and immediate.
11.2 Deleted immediately: your cards, store credits, perk cards, listings, phone number, seller approval and preferences. Your name and email are replaced with values that don't identify you, your password is cancelled, and your devices are signed out.
11.3 Kept, as set out in section 10: messages you sent (with the people who received them, under "Deleted user"), reports, records the law requires or that are needed to prevent fraud and defend against claims, and backups until they're deleted. The record that you accepted the terms is kept on the anonymized account.
11.4 Before deleting, save your card details outside the app, because after deletion we can't restore them.
12. Your rights
12.1 Under the Privacy Protection Law, you're entitled:
- to view the information about you that we hold (section 13 of the Law);
- to ask us to correct or delete information that is not accurate, complete, clear or up to date (section 14 of the Law);
- to ask us to delete your account and information, as set out in section 11;
- to ask to be removed from direct mailing, if you agree to receive it in the future (section 17F of the Law);
- to complain to the Privacy Protection Authority at the Ministry of Justice.
12.2 To exercise a right, write to privacy@arnaki.app from the address registered on the account. We may ask for more details to confirm that you're the account holder. We'll reply within 30 days. If we refuse a request, we'll explain why.
12.3 If you ask to correct a detail that can't be changed in the app, such as your name, email or phone number, we'll correct it at your request.
13. Automated decisions
13.1 Smart Pay recommendations are calculated automatically, by estimated savings, how much of the amount is covered and the number of cards. They're recommendations only; whether to act on them is your decision.
13.2 Chat messages pass an automatic filter for offensive words. In addition, the number of certain actions is limited automatically, such as balance checks, sign-in attempts and listings.
13.3 Decisions on seller approval, suspension and handling reports are made by a person.
14. Minimum age
14.1 The service is for people aged 18 and over, and we don't knowingly collect information about minors. If we learn that a minor has opened an account, we'll delete it. A parent who believes their child opened an account can contact us.
15. Notifications and mailing
15.1 We send service messages only: a password reset code by email, and a phone notification about a new chat message. The notification shows the sender's name only, without the message content. You can turn notifications off in your phone's settings.
15.2 We won't send you advertising without your explicit prior consent. If you agree in the future, you can withdraw consent at any time, through the link in the message or by contacting us.
16. The website and storage on your device
16.1 The arnaki.app website doesn't use cookies, analytics or advertising tools. The accessibility menu saves your choices in your own browser only. The website's hosting provider may keep basic technical records, such as IP addresses, for security.
16.2 The app stores on your device the sign-in token (in secure storage), language and country settings, and a favorites list. Card details are not stored on the device. When you sign out, the information stored on the device is cleared, except the language settings.
17. Changes to this policy
17.1 If we change this policy materially, we'll give notice in the app or by email before the change takes effect. If the change widens the use of information already collected, we'll ask for your consent where the law requires it.
18. Contact
18.1 Privacy questions, requests and complaints: privacy@arnaki.app, or by post to 3 Golda Meir Street, Ness Ziona, Israel.