Privacy Policy

This Privacy Policy explains how Neibra ("Neibra", "we", "us", "our") collects, uses, shares and protects personal data when you use the Neibra mobile application and the website at neibra.app (together, the "Service"). We wrote it to meet the Israeli Protection of Privacy Law, 5741-1981, including Amendment 13 and the regulations under it, and, where it applies to you, the EU General Data Protection Regulation (GDPR).

1. Who we are

Neibra operates the Service and is responsible for (the "controller" or "database owner" of) the personal data described in this policy. You can contact us about anything in this policy, including exercising your rights, at hello@neibra.app.

2. The data we collect

Data you give us

• Account data: email address, password (stored by our authentication service in hashed form; we never see it in plain text), name, date of birth, and an optional profile photo.
• Phone number: the mobile number you verify by SMS one-time code.
• Listings: title, category, description, photos, availability, community settings, and the approximate pickup area (see How we protect your location).
• Rentals: requests, dates, acceptance or decline, cancellations, handover and return records, condition confirmations and confirmation codes.
• Messages: the content of chats with other users, and your choices to hide or block a conversation.
• Reviews and ratings you give and receive.
• Communities: communities you create or join, your role, and invite codes.
• Reports and support: reports you file about content or users, and your correspondence with us.
• Consents: which version of the Terms of Use, Privacy Policy and Rental Rules you accepted, and when.

Data collected automatically

• Location: with your permission, the app reads your device's location on your phone to show items near you in the catalog and on the map. The app does not upload your position in the background or at regular intervals. Your location is sent to our servers only (a) as part of a nearby search request, to find items around you — it is used to answer that request and is not stored; and (b) when you publish a listing, as described in How we protect your location. We do not keep a history of your movements, and the app does not display your location to other users. You can refuse or withdraw location permission in your device settings; the app will then work with limited functionality.
• Device data: device model, operating system and version, app version, and a push notification token.
• Session and security data: login and session records, such as time of sign-in, device and IP address, kept to protect your account and the Service.

Data from others

Other users may provide data about you, for example in messages, reviews, reports, or condition confirmations about a rental you took part in.

Payment data

During the current launch phase, all lending on Neibra is free and we do not collect any payment, card or deposit data. We do not use a payment provider. If we introduce paid features later, we will update this policy before they go live.

3. How we protect your location

When you publish a listing, your device sends its location to our servers, and we store it only after applying a random offset of up to about 180 metres. A new random offset is chosen for each listing, so other users see only an approximate area. The exact spot is never stored or shown, and your exact home address is never shown to other users. Location sent with a nearby search is used only to answer that search and is not stored. You agree the exact meeting point with the other user in chat.

4. Why we use your data and our legal bases

Where the GDPR applies, we rely on the legal bases shown below. Under Israeli law, we use your data only for these purposes, which are the purposes for which it was collected.

You are not legally required to provide us with personal data. However, without the data marked as required in the app (such as your email, name, date of birth and, for borrowing or listing, a verified phone number), we cannot provide the Service to you.

We do not use your data for advertising, we do not sell or rent it, and we do not build advertising profiles.

5. Automated moderation

Item photos are automatically analysed by an image moderation service (Amazon Rekognition) before a listing is published, to detect inappropriate content such as nudity or violence. A photo flagged by this check may be blocked or sent for review. This check concerns images, not your personal characteristics, and it does not produce legal effects for you. If you believe a listing was blocked by mistake, contact us and a person will review it.

6. What other users can see

• Your name, profile photo, ratings and reviews are visible to other users of the Service.
• Your listings, including photos and the approximate pickup area, are visible to users nearby.
• Messages are visible to the participants of the conversation.
• Members of a community can see the names of other members of that community.
• We do not show your email address, date of birth or phone number to other users. Share contact details in chat only if you choose to.

7. Who we share data with

We share personal data only with the following recipients, and only as needed for the purposes above. Our service providers process data on our instructions under written agreements.

• Amazon Web Services (AWS) — cloud hosting, database and storage, user authentication (Amazon Cognito), SMS delivery of one-time codes (Amazon SNS), and image moderation (Amazon Rekognition).
• Google (Firebase Cloud Messaging) — delivery of push notifications to your device, using a device token.
• OpenStreetMap Foundation — map tiles are loaded from OpenStreetMap tile servers, so your device's IP address and the requested map area reach those servers.
• Mobile carriers — to deliver SMS messages to your phone number.
• Other users — as described in What other users can see.
• Authorities and others where required — when we are required by law, court order or a competent authority, or where necessary to protect the rights, property or safety of users, the public or Neibra.
• Successors — in connection with a merger, acquisition or sale of the Service, subject to this policy.

Our website loads fonts from Google Fonts, which means your browser connects to Google servers and shares your IP address with Google when you visit the site.

8. Where your data is stored and international transfers

Our main database and storage are hosted by AWS in the European Union (Frankfurt, Germany, region eu-central-1). The EU is recognised under Israeli law as providing an adequate level of data protection, and Israel is recognised by the European Commission as providing adequate protection for data transferred from the EU.

Some of our providers, such as Google and AWS, may process limited data in other countries, including the United States. Where that happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework, and on the permitted grounds for transfer under Israeli law. You can ask us for more information about these safeguards.

9. How long we keep data

• Account and profile data: while your account is active, and deleted or anonymised when you delete your account, subject to the exceptions below.
• Session and login records: 90 days.
• SMS one-time codes: only for the short time needed to verify your number.
• Messages and listings: while your account is active; conversations you hide are hidden only for you and remain available to the other participant.
• Records of completed rentals and reviews: kept in anonymised form (shown as "Deleted user") after you delete your account, for as long as needed to keep ratings meaningful, handle disputes and meet legal obligations, typically up to seven years.
• Reports, moderation and safety records: for as long as needed to protect users and prevent repeat abuse, and to defend legal claims.
• Consent records: for as long as we may need to prove which documents you accepted.

Backups are overwritten on a rolling basis, so deleted data may remain in backups for a limited period before it is removed.

10. Your rights

Subject to the conditions and exceptions of applicable law, you have the right to:

• Access — ask whether we hold data about you and receive a copy of it (under the Israeli Privacy Law this is the right to inspect information about you held in a database);
• Correction — ask us to correct data that is inaccurate, incomplete, unclear or outdated;
• Deletion — delete your account in the app, or ask us to delete your data and your account;
• Objection and restriction — object to processing based on our legitimate interests, or ask us to restrict processing;
• Portability — receive data you provided to us in a structured, machine-readable format, where the GDPR applies;
• Withdraw consent — for example, by turning off location access or notifications in your device settings, without affecting earlier processing;
• Complain — to the Israeli Privacy Protection Authority, or, if you are in the EU, to your local data protection authority. We would appreciate the chance to address your concern first.

To exercise any of these rights, email hello@neibra.app from the email address linked to your account. We may need to verify your identity before acting on a request. We will respond within the time required by law, and in any case within 30 days.

11. Deleting your account

You can delete your account in the app under Settings → Delete account. Alternatively, email hello@neibra.app from the address linked to your account. An account with an active rental cannot be deleted until that rental is finished or cancelled. If your account is suspended or blocked, the in-app option is not available — to delete it, email hello@neibra.app from the address linked to your account and we will process the request. When your account is deleted, we delete or anonymise your profile, photos, listings, phone number, community memberships and device tokens. We may keep, for the periods described under How long we keep data: records of completed rentals and reviews in anonymised form (shown as "Deleted user"), reports and safety records as needed, consent records, and data we must keep by law or to establish or defend legal claims. Messages you sent may remain visible to the other participant in a de-identified form, and reviews you left may remain without your name.

12. Children

The Service is only for people aged 18 and over. We ask for your date of birth during sign-up and do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it.

13. Security

We protect personal data with measures appropriate to its sensitivity, including encryption in transit (HTTPS/TLS), managed authentication, a database that is not directly reachable from the internet, and access controls that limit access to people who need it. No system is perfectly secure; if a security incident affects your data, we will notify you and the competent authorities as required by law.

14. Changes to this policy

We may update this Privacy Policy from time to time. The version number and effective date at the top of this page show when it was last changed. If we make material changes, we will notify you in the app or by email before they take effect and, where required, ask for your consent again. The app records which version you have accepted and when.

15. Contact

For any privacy question or request, write to us at hello@neibra.app.