IPHONE · ISRAEL · HEBREW & ENGLISH
Privacy policy
Updated: 14 October 2026
Operator and contact
Sakhir is operated by Naor Zeharya. For support, privacy and purchase questions, contact support@sakhir.app. These documents cover the iPhone release for personal use in Israel, in Hebrew and English.
Work records on your device and in your account
Workplaces, rates, shifts, breaks, tips, notes, templates and plans are stored on your device for tracking and calculations. In releases supporting accounts, signing in copies your existing work records to your Supabase account and synchronizes changes between devices signed in to that account. Without an account, work records are not uploaded to this service. Older releases without accounts continue to store records locally. A local working copy enables offline use; changes wait for connectivity to return. The existing source is retained during the transition. Shared files and system backups may create additional copies outside the app.
Account details and authentication emails
In account-enabled releases, Supabase processes your account ID, email address, authentication and synchronized records to operate the account and store its data. Provider sign-in is supported only when available in the app; the provider processes authentication under its own policy. Passwords and verification codes are not stored in the work database or sent to usage measurement. When configured, Brevo receives the destination address, authentication or reset message and delivery information to send the email. Work records and wages are not attached to authentication emails. Never share a password, code or sign-in link with support or anyone else.
Your choices
You have no legal obligation to enter work records, create an account, agree to usage measurement or contact support. Account details are required for sign-in and synchronization; without an account, you can keep work records on your device without account sync. An appropriate estimate requires the relevant rate and shift details. Declining usage measurement does not prevent tracking or calculations. Support may be limited without enough information about a problem. Purchases and entitlement restoration require Apple and RevenueCat to process transaction information; this service is separate from your usage measurement choice.
Purchases and entitlements
Purchases use the App Store. Apple handles payment card details and does not provide them to the app. When configured, RevenueCat checks entitlements and may operate when the app opens, before a purchase. It uses a technical identifier and processes purchase history, entitlements and operational details to provide purchases and purchase dashboard information. Transaction information is available to us through purchase services. An identifier without a name or email can still link actions to the same service user; it does not guarantee anonymity. App code does not send shift contents, wages or workplace names to RevenueCat. The app has no switch to disable the purchase service.
Optional usage measurement
Usage measurement to improve the app stays off until you explicitly choose Settings > Help improve Sakhir > Share usage events, and operates only in a build with a configured measurement service. If the service is not configured, your choice does not cause events to be sent. When enabled, screen categories, language and a random installation measurement ID may be sent to PostHog in the European Union region. This ID links events from the same installation; app code does not link it to an account or purchase. Events do not include names, emails, wage amounts, shift contents, notes or imported files. There is no session replay, screen recording, screenshots or advertising tracking. The provider also receives network information needed to receive requests, so this is not a guarantee of complete anonymity. You can disable measurement in settings without affecting tracking or calculations. Disabling it stops new events but does not automatically delete information already sent. There is no persistent measurement queue for later delivery when connectivity returns. Turning measurement off removes the ID from your device, but not automatically from the provider. For access or deletion requests, contact support with the measurement ID displayed while measurement is enabled. Keep it before turning measurement off if you need help with earlier events. Work records are excluded from measurement events.
Permissions and information outside the app
The app does not request GPS location, contacts, camera or microphone access. Your manually selected city is used for weekly rest calculations. Reminders need notification permission, but declining it does not prevent shift tracking. Notifications, widgets and Live Activities you enable may display information outside the app, including on the Lock Screen, depending on device settings. File selection and sharing use iOS system interfaces.
Importing a file
A file you choose to import is read and processed on your device and is not sent to the other service. The file itself is not uploaded to Supabase, but imported work records synchronize to your account when account sync is active. Importing does not require a password for another service. Import only information you are entitled to use, check the preview and warnings, and verify field mapping before confirming. Wage estimates are recalculated using Sakhir rules and may differ from amounts in the original file. Selecting a file does not delete the source; a working copy may remain in the cache according to iOS behavior.
Backups, exports and sharing
You can export reports and backups and choose where to save or share them. These files may contain wages and work details and are not password-protected by the app. Your selected recipient and service have their own policies. iPhone backups and transfers to a new device may also include app data, depending on Apple and device settings. Exporting or selecting a file for restoration may create cached files. Closing the share sheet does not guarantee their immediate deletion.
Email support
Opening a support email is your choice and does not send it automatically. If you send a message, the operator and email provider receive your email address, message and attachments to handle and document your request. Do not attach passwords, government ID numbers, payment card details or a full backup. Hide unnecessary wage and work details in screenshots. Messages are retained for handling, documentation and applicable legal duties. You may request deletion, subject to the circumstances and applicable obligations.
Providers and processing locations
Apple and RevenueCat handle purchases and entitlements; Supabase handles accounts and synchronized work records in supported releases, using the Tokyo region selected for this project; Brevo handles authentication emails when configured; Zoho handles messages sent to the support mailbox. PostHog is used only under the conditions described above. Providers may process information outside Israel. Selecting a European measurement region does not guarantee that all provider activities occur only there. Information may also be disclosed when required by law, a binding order or to handle a security incident, to the extent needed. The public website processes browsing information separately; its privacy policy identifies the hosting and accessibility providers.
Retention and deletion
Local work records are retained for your use and can be managed within the app. Removing the app removes its local data according to iOS behavior, but does not necessarily delete system backups, exported files, support messages or purchase and measurement records already sent to providers. Manage these copies where they are stored. Provider retention depends on the service, configuration and applicable duties; we do not promise deletion of all copies within a fixed number of days. Deleting the app does not cancel a purchase or request a refund.
Access, correction and privacy requests
Israeli law provides rights to request access to personal information held about you and correction of information that is incorrect, incomplete, unclear or outdated. Send access, correction or deletion requests to support@sakhir.app. We use proportionate identity checks based on the request. Changes to synchronized records are sent to your account when connected. Records stored only on your device are not available to us on a server. Removing the app does not delete a cloud account. Contacting us does not automatically change files, backups or information held by Apple. Do not send passwords or identification documents without first agreeing on a need and an appropriate channel.
Security and intended users
Security measures reduce risk but cannot guarantee complete protection. Protect your device and exported files. The app is intended for workers in Israel and is not directed at children under 13. Being able to use it does not establish that an estimate covers youth employment rules or every employment arrangement.
Policy updates
The current policy and revision date are available in the app and on the website. Material changes to processing purposes or information sent will be accompanied by appropriate notice and consent where required, before the new use begins. A document update does not enable measurement or sync in a build where that capability is absent or unconfigured.
Visiting this website
Cloudflare Pages hosts the website. It has no collection form, payment flow, ads or additional product measurement tool. The hosting provider processes requests and technical information such as IP addresses and browser details to deliver pages and provide security. Information may be processed outside Israel. Retention depends on the service and applicable obligations; no uniform number of days is promised here.
Negishot widget and fonts
The site loads the external Negishot accessibility widget. Its policy describes possible processing of IP addresses, abbreviated browser details, usage times and menu actions. It stores preferences and a local usage identifier called negishot_sid. The provider states that usage data is retained for up to 24 months before deletion or aggregation. The widget may load fonts through Google Fonts, jsDelivr and getmood.io, exposing network and technical information to providers that may process it outside Israel. Clearing browser site data removes local information but does not automatically request provider deletion. Contact us with questions or requests.
Cloudflare - Provider privacy policyNegishot - Provider privacy policy
Contact
For questions and requests, contact support@sakhir.app.