Privacy Policy

Last updated: August 17, 2026

1. Data Controller

Olivier Bellity — Lebanim
Israeli sole trader (עוסק פטור) — registration no. 341111854
64 rehov Hapisga, 9638227 Jerusalem, Israel
Contact: contact@lebanim.com

2. Legal Framework

This Privacy Policy complies with:

• The Israeli Protection of Privacy Law, 5741-1981 (including Amendment No. 13)
• The Israeli Protection of Privacy Regulations (Data Security), 5777-2017
• The Israeli Protection of Privacy Regulations (Transfer of Data Outside State Borders), 5761-2001
• The European General Data Protection Regulation (GDPR) — applicable to users residing in the European Union

Where these frameworks conflict, the provisions most protective of the user apply.

3. Data Collected

3.1 Identification data

Email address, first and last name, encrypted password (not recoverable).

3.2 Optional profile data

Hebrew name, tradition (Ashkenazi, Sephardi, mixed, undetermined), family geographic origin, preferred form of address.

3.3 Content you produce

Answers to the biographical questionnaire, photographs, family tree data. Family member data concerns third parties who have not directly consented — enter only what you consider appropriate to share.

3.4 Technical data

IP address (request limiting and abuse prevention) and anonymous browsing data via Vercel Web Analytics (no cookie, no individual tracking).

4. Purposes and Legal Bases

• Providing the Service (account, stories, PDF): performance of contract
• AI assistance (transmitting content to Anthropic): performance of contract
• Security (abuse prevention, IP limiting): legitimate interest
• Audience measurement (Vercel Analytics): legitimate interest
• Responding to messages: performance of contract / legitimate interest

5. Data Storage and Hosting

Data stored securely with Supabase Inc., Frankfurt, Germany, EU (region eu-central-1).

Local cache (localStorage) used in browser for responsiveness — complementary only.

6. Data Transfers to Third Parties

6.1 AI provider

Lebanim assistant features transmit texts to:

• Anthropic PBC (United States) — Claude service. Texts processed temporarily (generally 7 days) then deleted. Not used to train AI models. Policy: www.anthropic.com/legal/privacy

Transfer governed by contractual safeguards and Israeli Transfer Regulations 5761-2001. No other AI provider is used.

6.2 Hosting

Vercel Inc. — Europe region (Frankfurt, Germany).

6.3 User database

Supabase Inc. — Frankfurt, Germany, EU. Policy: supabase.com/privacy

6.4 Administrator access

Limited authorized persons may access profiles for administration and technical support only.

6.5 No sale of your data

Your personal data and your life stories are never sold or rented to any third party. Separately, the Meta Pixel advertising measurement tool shares browsing data with Meta for advertising measurement and targeting purposes, solely with your consent (see §6.6 and §7); you may refuse it at any time.

6.6 Advertising tool (Meta Pixel)

Subject to your consent (collected via the cookie banner), the Service uses the Meta Pixel, provided by Meta Platforms Ireland Ltd (4 Grand Canal Square, Dublin, Ireland). This tool measures the effectiveness of our advertising campaigns and enables the delivery of advertisements on Facebook and Instagram. It collects browsing data (pages viewed, interactions) associated with an advertising identifier. This processing involves a transfer of data to Meta, which may include the United States, governed by the European Commission's standard contractual clauses. Policy: facebook.com/privacy/policy. You may withdraw your consent at any time (see §7).

7. Cookies and Trackers

• Essential (always active): session, security, cookie consent preference
• Preferences: localStorage — stores your content and preferences
• Analytics: Vercel Web Analytics — privacy-friendly, no cookie, no individual data
• Marketing: Meta Pixel (Meta Platforms Ireland Ltd) — the _fbp advertising cookie and associated trackers, used to measure the effectiveness of our campaigns and to deliver advertisements on Meta's platforms (Facebook, Instagram). Legal basis: your consent (Art. 6(1)(a) GDPR). This tracker is set only after you accept via the consent banner, and involves a transfer of data to Meta (see §6.6). You may withdraw your consent at any time by resetting your cookie preferences, or object via the advertising settings of your Meta account.

Non-essential cookies are placed only after your consent via our cookie banner. The Service uses no other advertising tracking cookie and no other third-party cookie for commercial purposes.

8. Data Retention

• Active account: for as long as you use the Service
• Deleted account: permanent deletion within 30 days. No restoration possible.
• Analytics: aggregate and anonymous only
• Technical logs: a few weeks

9. Your Rights

Under the GDPR and Israeli Protection of Privacy Law 5741-1981:

• Right of access
• Right of rectification
• Right to erasure (directly from your account — immediate and irreversible)
• Right to restriction
• Right to portability (JSON export from your account)
• Right to object
• Right to withdraw consent
• Right to lodge a complaint:
  • France: CNIL — www.cnil.fr
  • Israel: Privacy Protection Authority — www.gov.il/en/departments/the_privacy_protection_authority

Contact: contact@lebanim.com — response within 30 days.

10. Security

Measures in accordance with Israeli Data Security Regulations 5777-2017:

• Password encryption (PBKDF2)
• HTTPS
• IP-based request limiting
• Restricted administration access

11. Minors

Service accessible to users aged 15+. Under-16s in the EU require parental consent. Purchasing reserved for users aged 18+.

12. Policy Changes

Substantial changes communicated by notice on the Service or by email.

13. Contact

Olivier Bellity — Lebanim
Email: contact@lebanim.com

Voir la version française →