Privacy Policy

1. Who We Are

The Service is operated by Aneel Abu Rish ("the Operator"). Workli is a platform that connects customers seeking local services with independent service providers in Israel, available as a mobile app and a website.

The Operator is the owner and holder of the database for the purposes of the Protection of Privacy Law. Contact details for exercising your rights appear at the end of this document.

2. Information You Provide

When you register and use the Service, we collect information you actively provide: You are not legally obligated to provide us with information, but without certain details (such as a phone number for verification) we cannot provide parts of the Service.

• Account & identity: phone number (required — for one-time-code verification), display name, and email if you choose to provide one.
• Role & preferences: whether you use the Service as a customer or a provider (you may use both), and your city.
• Provider profile (public): description/bio, service areas and trades, service-area cities, pricing, profile photo, work-photo gallery, and contact/social links (WhatsApp, phone, Instagram, Facebook, LinkedIn, website).
• Business presence & business location (optional, for providers): business name, business phone and email, service methods, and the business location — only if you choose to add it — with full control over its exposure level (exact location, general area only, or hidden).
• Customer profile: display name, city, phone number, and profile photo.
• Job requests: title, description, category/service, city, estimated budget, start/end dates, urgency, and any photos you attach.
• Job address or exact location (optional): stored separately from the public request, never shown on the public jobs board, and disclosed only to the provider you select — for arrival and completing the job.
• Offers: price (optional), duration estimate, and a message to the customer.
• Messages & chat: the content of messages you send to other users within the app.
• Reviews & ratings: a rating (1–5) and free text you write about another user.
• Support correspondence: the content of your communications with us.
• Consent records: when your account is created, the date of acceptance of the Terms of Use and the Privacy Policy and the version accepted are recorded.

3. Information Collected Automatically

• Technical data: app version, operating-system and device type, language, and timestamps (such as last login).
• Basic usage data: operational counters such as provider profile-view counts.
• Session token: stored on your device to keep you signed in (see "Local Storage & Cookies").
• Device push-notification token — only if you granted permission to receive push notifications.
• Server logs: our infrastructure providers record operational data such as IP address and request metadata, for security and maintenance.
• Sign-up source/referral information (where relevant), for general analysis and fraud prevention.

4. Information We Do Not Collect

• We do not track your device location and do not collect location in the background. A precise location is stored only if you actively choose to add a business location to your profile or an address to a job — and it remains under your control.
• We do not collect financial information or payment-card details. The Service is currently free for all users. When subscription billing is enabled, payment will be processed through the app stores (Apple/Google), and we do not see or store your payment details.
• We do not use third-party advertising, tracking, or analytics tools, and we do not build advertising profiles.
• We do not access your microphone, audio recordings, or device contacts.

5. How We Use Information

We use information to:

• Verify your identity and manage your account (SMS/OTP verification is performed via Twilio).
• Display provider profiles to potential customers and enable search and filtering.
• Operate the job marketplace: posting requests, presenting them to relevant providers, submitting offers, and accepting them.
• Enable communication between the parties (in-app chat) and share contact details after a match.
• Send operational notifications (see "Notifications").
• Manage subscriptions and access to certain features.
• Improve the Service, diagnose issues, and prevent fraud and abuse.
• Comply with legal obligations and protect our rights and those of users.

Operational messages (such as verification codes, confirmations, quotes, job updates, and system notifications) are sent as an integral part of the Service. Marketing messages (by SMS, email, or push notification) will be sent only in accordance with Section 30A of the Israeli Communications Law (Telecommunications and Broadcasts), 5742-1982, and every such message will include a simple opt-out (replying "remove", an unsubscribe link, or turning off notifications in the app). Opting out does not apply to operational messages required to run the Service.

The legal bases for processing are your consent, performance of our agreement with you (the Terms of Use), our legitimate interests in operating a safe platform, and compliance with legal obligations.

6. Notifications

Within the app we show notifications about relevant events (a new offer, an offer accepted/declined, a completed job, system messages). These notifications are stored in your account so you can review them.

If you grant permission to receive push notifications, we use Expo’s push service to deliver them, which uses a device push identifier for that purpose. You can revoke this permission at any time in your device settings.

7. What Is Visible to Other Users

• A provider profile is public: name, photo, bio, trades, service areas, gallery, links, rating, and number of jobs — visible to all app users and on the Workli website, and may appear in search-engine results.
• A job request you post is visible to providers who can submit an offer.
• When an offer is submitted, the customer sees the provider profile and the offer details.
• After an offer is accepted, the selected provider is given the customer’s name and phone number to coordinate the work. These details are disclosed only to the provider assigned to the job.
• Chat messages are visible only to the two participants.
• A business location you chose to add is displayed according to the exposure level you selected (exact / general area / hidden).
• A review you write is shown publicly alongside your display name.

8. Sharing With Third Parties

We do not sell, rent, or trade your personal information. We rely on service providers ("processors") acting on our behalf solely to operate the Service:

• Supabase — database, authentication, and file (image) storage. Servers are located in the European Union.
• Twilio — sending SMS messages to verify your phone number.
• Expo (EAS) — app build/delivery infrastructure and push notification service (if enabled).
• Apple App Store and Google Play — app distribution, and subscription payment processing when billing is enabled.
• Vercel — hosting for the Workli website.
• Google Fonts — font delivery on the website (not applicable in the app).

Information may also be disclosed pursuant to a legal requirement or court order, to protect rights and safety, or in connection with a merger/acquisition/change of ownership — subject to this policy.

When you choose to contact a user via WhatsApp or a phone call, you move to an external service that is not under our control and is subject to its own privacy policy.

9. Transfers Outside Israel

Some of our service providers store or process information outside Israel (mainly in the EU and the US). Such transfers are carried out subject to the Protection of Privacy Law and customary safeguards, including contractual commitments by providers to maintain an adequate level of protection.

10. Data Security

We take reasonable technical and organizational measures to protect the information, including encryption in transit, row-level access control (RLS) that limits each user to their own data, and least-privilege permissions. Only the session token is stored on your device. However, no security method is completely foolproof, and we cannot guarantee absolute security.

11. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. After deletion, some information is retained for limited periods:

• Security and system logs — up to 90 days, for fraud detection and security analysis.
• Billing and accounting records (if and when transactions occur) — as required by the Israel Tax Authority (about 7 years).
• Content reported as a violation — until the report is resolved, and up to one year afterward for documentation.
• Backups — deleted on a short, recurring cycle.
• Consent records for the Terms of Use and the Privacy Policy (date and version) — retained even after account deletion, as needed to evidence consent and comply with the law.

12. Your Rights

Under the Israeli Protection of Privacy Law, 5741-1981 and its regulations (and subject to any other law applicable to you), you have the right to:

• Access the information held about you.
• Request correction of information that is incorrect, incomplete, unclear, or out of date.
• Request deletion of information collected without consent or no longer needed.
• Withdraw consent and restrict certain uses, where possible.
• File a complaint with the Privacy Protection Authority at the Ministry of Justice.

To exercise these rights, contact us at workli.officialmail@gmail.com. We will respond within a reasonable time and as required by law.

13. Account Deletion

You may request account deletion at any time — through the app settings, via the account-deletion form on the website, or by contacting support. Upon deletion, your profile data, photos, job requests, offers, and contact details are deleted. Reviews and messages may be retained in a de-identified form for the integrity of the other party’s data and to comply with the law. See the Account Deletion page for full instructions. Completing deletion may take up to 30 days.

14. Minors

The Service is intended for users aged 18 and over. We do not knowingly collect information from minors. If we learn that such information has been collected, we will delete it.

15. Local Storage & Cookies

In the app, we store only the session token locally (in AsyncStorage). We do not use advertising cookies.

On the website, we use local storage and/or cookies to keep your display-mode preference (light/dark) and to keep you signed in, and we use fonts served by Google Fonts. We do not use advertising tracking cookies.

16. Changes to This Policy

We will update this policy from time to time. A material change will be published in the app and on the website, and where appropriate notice will be sent or renewed acceptance will be required. Continued use after the update constitutes acceptance of the updated policy. The date of acceptance and the version accepted are recorded in our systems.

17. Contact

For questions, access/correction/deletion requests, or any privacy matter:
workli.officialmail@gmail.com