Brofix Privacy Policy
1. Who we are
Brofix is a mobile app that connects customers with home-service professionals in Israel. During the pilot there is no registered company, so the controllers of personal data are the three founders, Eran David Tzarum, Hoshen Nusbaum and Naveh Bar Hama ("we"). When a company is registered, we will update the responsible party here.
Privacy contact: brofixapp@gmail.com
2. What we collect and why
| Data | When | Why |
|---|---|---|
| Full name, phone number, email, role (customer or professional) | Sign-up | Create the account, identify you, let the two sides contact each other on a job |
| Google or Apple sign-in data (account ID and email) | If you choose that login | Authentication. We never receive your password |
| Service request: category, description, address, city, map location of the address, requested timing | When a customer creates a request | Match professionals and show them the request |
| Request photos | If you attach them | Clarify the problem. Before upload the photo is re-encoded on the phone, which removes the location data the camera stores in the file |
| Device location | If you grant location permission | Fill in the request address and estimate arrival time |
| Live location of the professional | Only from the moment the professional taps "Heading out" until "Arrived" | Show the customer where the professional is and the time left. Only the latest position is stored, with no route history, and it is deleted on arrival or cancellation |
| Quotes (price, departure time, short message) | When a professional quotes | Compare offers and book jobs |
| Chat messages (text only) | Only after the customer selects a professional | Coordinate the job and arrival |
| Ratings and reviews | After a completed job | Reputation for both sides |
| Professional profile: business name, bio, categories, service cities, availability | Professional sign-up | Match requests |
| License and insurance documents (image), license type and number | If a professional uploads them | Professional verification and a "verified" badge. Only the professional and the system administrator can see the documents |
| Payment method and status as reported (cash, Bit, etc.) | After a job | Manage the job state. Payment itself happens outside the app, and we do not receive card or bank details |
| Push notification token and device platform | If you allow notifications | Send notifications about requests, quotes, messages and arrival |
| Reports and blocks between users | If you report or block a user | Safety and abuse prevention |
| Error and crash data: device type, OS version, app version, error details | Automatically | Find and fix bugs |
We do not use advertising or marketing trackers, and we do not sell data.
3. Who we share it with
- The other party on a job. Matching professionals see a request, its photos, the city and an approximate location (about 1 km) before they quote. The exact address and phone number are revealed only to the professional who is selected, and the phone number is visible only during an active job and up to 24 hours after it ends.
- Infrastructure providers that process data for us:
- Supabase: database, authentication, file storage and server functions. Servers are in Frankfurt, Germany.
- Google: travel-time and route calculation (Google Maps Platform), Google sign-in if you choose it, and sending sign-in codes by email.
- Expo and Firebase: push notifications and app updates.
- Sentry: error monitoring.
- Apple: Sign in with Apple if you choose it, and notifications on iPhone.
- Authorities, if required by law or a court order.
4. Transfers outside Israel
Data is stored in the European Union (Frankfurt). Some providers (Google, Expo, Sentry, Apple) may also process data outside Israel and the EU, including in the United States.
5. How long we keep data
- Live location: deleted on arrival or cancellation. Temporary arrival-time calculations are deleted after about one hour.
- Chat: open for writing until 24 hours after the job ends, and deleted 180 days after the job ended or was cancelled.
- Request photos: deleted 90 days after the request is closed.
- Address of a request that did not become a job: deleted 90 days after the request is closed.
- Rejected license documents: deleted after 30 days.
- Notifications: deleted after 90 days.
- Account details, jobs, quotes and ratings: kept while the account is active. When you delete your account, identifying details are deleted, as described on the account deletion page.
6. Your rights
You may ask to access the data we hold about you, to correct inaccurate data, and to delete it. The law may require us to keep some data.
How to ask: email brofixapp@gmail.com from the address on your account, with the subject "Privacy request", and say what you want. We will reply within 30 days. You can also delete your account yourself inside the app (how).
You can revoke location, camera, photo and notification permissions at any time in your device settings.
If you are unhappy with how we handle your request, you can contact the Israeli Privacy Protection Authority.
7. Security
Data is stored in a database where each table has its own access rules. Photos and documents are kept in private storage with short-lived access links. Traffic is encrypted. No system is perfectly secure, and we cannot guarantee absolute security.
8. Children
The service is for people aged 18 and over. We do not knowingly collect data about minors, and if we learn that we have, we will delete it.
9. Whether you must provide data
Name, phone and email are required to open an account. Location, photos and notifications are optional, but some features, such as arrival tracking, will not work without them.
10. Changes to this policy
We may update this policy from time to time. We will announce material changes in the app. The effective date is at the top of this page.
11. Contact
brofixapp@gmail.com