Privacy Policy

1. Who We Are

The Service is operated by Aneel Abu Rish ("the Operator"). Workli is a platform that connects customers seeking local services with independent service providers in Israel, available as a mobile app and a website.

The Operator is the owner and holder of the database for the purposes of the Protection of Privacy Law. Contact details for exercising your rights appear at the end of this document.

2. Information You Provide

When you register and use the Service, we collect information you actively provide:

• Account & identity: phone number (required — for one-time-code verification), display name, and email if you choose to provide one.
• Role & preferences: whether you use the Service as a customer or a provider (you may use both), and your city.
• Provider profile (public): description/bio, service areas and trades, service-area cities, pricing, profile photo, work-photo gallery, and contact/social links (WhatsApp, phone, Instagram, Facebook, LinkedIn, website).
• Customer profile: display name, city, phone number, and profile photo.
• Job requests: title, description, category/service, city, estimated budget, start/end dates, urgency, and any photos you attach.
• Offers: price (optional), duration estimate, and a message to the customer.
• Messages & chat: the content of messages you send to other users within the app.
• Reviews & ratings: a rating (1–5) and free text you write about another user.
• Support correspondence: the content of your communications with us.

3. Information Collected Automatically

• Technical data: app version, operating-system and device type, language, and timestamps (such as last login).
• Basic usage data: operational counters such as provider profile-view counts.
• Session token: stored on your device to keep you signed in (see "Local Storage & Cookies").
• Server logs: our infrastructure providers record operational data such as IP address and request metadata, for security and maintenance.
• Sign-up source/referral information (where relevant), for general analysis and fraud prevention.

4. Information We Do Not Collect

• We do not collect precise GPS location. "Location" is only the city you select manually.
• We do not collect financial information or payment-card details. The Service is currently free for all users. When subscription billing is enabled, payment will be processed through the app stores (Apple/Google), and we do not see or store your payment details.
• We do not use third-party advertising, tracking, or analytics tools, and we do not build advertising profiles.
• We do not access your microphone, audio recordings, or device contacts.

5. How We Use Information

We use information to:

• Verify your identity and manage your account (SMS/OTP verification is performed via Twilio).
• Display provider profiles to potential customers and enable search and filtering.
• Operate the job marketplace: posting requests, presenting them to relevant providers, submitting offers, and accepting them.
• Enable communication between the parties (in-app chat) and share contact details after a match.
• Send operational notifications (see "Notifications").
• Manage subscriptions and access to certain features.
• Improve the Service, diagnose issues, and prevent fraud and abuse.
• Comply with legal obligations and protect our rights and those of users.

The legal bases for processing are your consent, performance of our agreement with you (the Terms of Use), our legitimate interests in operating a safe platform, and compliance with legal obligations.

6. Notifications

Within the app we show notifications about relevant events (a new offer, an offer accepted/declined, a completed job, system messages). These notifications are stored in your account so you can review them.

If you grant permission to receive push notifications, we use Expo’s push service to deliver them, which uses a device push identifier for that purpose. You can revoke this permission at any time in your device settings.

7. What Is Visible to Other Users

• A provider profile is public: name, photo, bio, trades, service areas, gallery, links, rating, and number of jobs — visible to all app users and on the Workli website, and may appear in search-engine results.
• A job request you post is visible to providers who can submit an offer.
• When an offer is submitted, the customer sees the provider profile and the offer details.
• After an offer is accepted, the selected provider is given the customer’s name and phone number to coordinate the work. These details are disclosed only to the provider assigned to the job.
• Chat messages are visible only to the two participants.
• A review you write is shown publicly alongside your display name.

8. Sharing With Third Parties

We do not sell, rent, or trade your personal information. We rely on service providers ("processors") acting on our behalf solely to operate the Service:

• Supabase — database, authentication, and file (image) storage. Servers are located in the European Union.
• Twilio — sending SMS messages to verify your phone number.
• Expo (EAS) — app build/delivery infrastructure and push notification service (if enabled).
• Apple App Store and Google Play — app distribution, and subscription payment processing when billing is enabled.
• Vercel — hosting for the Workli website.
• Google Fonts — font delivery on the website (not applicable in the app).

Information may also be disclosed pursuant to a legal requirement or court order, to protect rights and safety, or in connection with a merger/acquisition/change of ownership — subject to this policy.

When you choose to contact a user via WhatsApp or a phone call, you move to an external service that is not under our control and is subject to its own privacy policy.

9. Transfers Outside Israel

Some of our service providers store or process information outside Israel (mainly in the EU and the US). Such transfers are carried out subject to the Protection of Privacy Law and customary safeguards, including contractual commitments by providers to maintain an adequate level of protection.

10. Data Security

We take reasonable technical and organizational measures to protect the information, including encryption in transit, row-level access control (RLS) that limits each user to their own data, and least-privilege permissions. Only the session token is stored on your device. However, no security method is completely foolproof, and we cannot guarantee absolute security.

11. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. After deletion, some information is retained for limited periods:

• Security and system logs — up to 90 days, for fraud detection and security analysis.
• Billing and accounting records (if and when transactions occur) — as required by the Israel Tax Authority (about 7 years).
• Content reported as a violation — until the report is resolved, and up to one year afterward for documentation.
• Backups — deleted on a short, recurring cycle.

12. Your Rights

Under the Israeli Protection of Privacy Law, 5741-1981 and its regulations (and subject to any other law applicable to you), you have the right to:

• Access the information held about you.
• Request correction of information that is incorrect, incomplete, unclear, or out of date.
• Request deletion of information collected without consent or no longer needed.
• Withdraw consent and restrict certain uses, where possible.
• File a complaint with the Privacy Protection Authority at the Ministry of Justice.

To exercise these rights, contact us at workli.officialmail@gmail.com. We will respond within a reasonable time and as required by law.

13. Account Deletion

You may request account deletion at any time — through the app settings or by contacting support. Upon deletion, your profile data, photos, job requests, offers, and contact details are deleted. Reviews and messages may be retained in a de-identified form for the integrity of the other party’s data and to comply with the law. See the Account Deletion page for full instructions. Completing deletion may take up to 30 days.

14. Minors

The Service is intended for users aged 18 and over. We do not knowingly collect information from minors. If we learn that such information has been collected, we will delete it.

15. Local Storage & Cookies

In the app, we store only the session token locally (in AsyncStorage). We do not use advertising cookies.

On the website, we use local storage and/or cookies to keep your display-mode preference (light/dark) and to keep you signed in, and we use fonts served by Google Fonts. We do not use advertising tracking cookies.

16. Changes to This Policy

We will update this policy from time to time. A material change will be published in the app and on the website, and notice will be sent where appropriate. Continued use after the update constitutes acceptance of the updated policy.

17. Contact

For questions, access/correction/deletion requests, or any privacy matter:
workli.officialmail@gmail.com