Privacy Policy
Last updated: June 18, 2026
Summary: Lebanim handles your personal data with the utmost care. Your stories and personal data are stored securely on servers located in Europe (European Union). When you use the AI assistant (Lebanim assistant), your texts are temporarily transmitted to our provider Anthropic to generate or translate a passage — they are not retained beyond a few days and are not used to train models. You may exercise your rights of access, rectification, and deletion at any time, including directly from your personal account.
1. Data Controller
Olivier Bellity — Lebanim
Israeli sole trader (עוסק פטור) — registration no. 341111854
64 rehov Hapisga, 9638227 Jerusalem, Israel
Contact: contact@lebanim.com
2. Legal Framework
This Privacy Policy complies with:
- The Israeli Protection of Privacy Law, 5741-1981 (including Amendment No. 13)
- The Israeli Protection of Privacy Regulations (Data Security), 5777-2017
- The Israeli Protection of Privacy Regulations (Transfer of Data Outside State Borders), 5761-2001
- The European General Data Protection Regulation (GDPR) — applicable to users residing in the European Union
Where these frameworks conflict, the provisions most protective of the user apply.
3. Data Collected
3.1 Identification data
Email address, first and last name, encrypted password (not recoverable).
3.2 Optional profile data
Hebrew name, tradition (Ashkenazi, Sephardi, mixed, undetermined), family geographic origin, preferred form of address.
3.3 Content you produce
Answers to the biographical questionnaire, photographs, family tree data. Family member data concerns third parties who have not directly consented — enter only what you consider appropriate to share.
3.4 Technical data
IP address (request limiting and abuse prevention) and anonymous browsing data via Vercel Web Analytics (no cookie, no individual tracking).
4. Purposes and Legal Bases
- Providing the Service (account, stories, PDF): performance of contract
- AI assistance (transmitting content to Anthropic): performance of contract
- Security (abuse prevention, IP limiting): legitimate interest
- Audience measurement (Vercel Analytics): legitimate interest
- Responding to messages: performance of contract / legitimate interest
5. Data Storage and Hosting
Data stored securely with Supabase Inc., Frankfurt, Germany, EU (region eu-central-1).
Local cache (localStorage) used in browser for responsiveness — complementary only.
6. Data Transfers to Third Parties
6.1 AI provider
Lebanim assistant features transmit texts to:
- Anthropic PBC (United States) — Claude service. Texts processed temporarily (generally 7 days) then deleted. Not used to train AI models. Policy: www.anthropic.com/legal/privacy
Transfer governed by contractual safeguards and Israeli Transfer Regulations 5761-2001. No other AI provider is used.
6.2 Hosting
Vercel Inc. — Europe region (Frankfurt, Germany).
6.3 User database
Supabase Inc. — Frankfurt, Germany, EU. Policy: supabase.com/privacy
6.4 Administrator access
Limited authorized persons may access profiles for administration and technical support only.
6.5 No sale or commercial transfer
Your data is never sold, rented, or transferred to third parties for commercial or advertising purposes.
7. Cookies and Trackers
- Essential (always active): session, security, cookie consent preference
- Preferences: localStorage — stores your content and preferences
- Analytics: Vercel Web Analytics — privacy-friendly, no cookie, no individual data
- Marketing: not used
Non-essential cookies placed only after your consent via our cookie banner.
8. Data Retention
- Active account: for as long as you use the Service
- Deleted account: permanent deletion within 30 days. No restoration possible.
- Analytics: aggregate and anonymous only
- Technical logs: a few weeks
9. Your Rights
Under the GDPR and Israeli Protection of Privacy Law 5741-1981:
- Right of access
- Right of rectification
- Right to erasure (directly from your account — immediate and irreversible)
- Right to restriction
- Right to portability (JSON export from your account)
- Right to object
- Right to withdraw consent
- Right to lodge a complaint:
- France: CNIL — www.cnil.fr
- Israel: Privacy Protection Authority — www.gov.il/en/departments/the_privacy_protection_authority
Contact: contact@lebanim.com — response within 30 days.
10. Security
Measures in accordance with Israeli Data Security Regulations 5777-2017:
- Password encryption (PBKDF2)
- HTTPS
- IP-based request limiting
- Restricted administration access
11. Minors
Service accessible to users aged 15+. Under-16s in the EU require parental consent. Purchasing reserved for users aged 18+.
12. Policy Changes
Substantial changes communicated by notice on the Service or by email.
13. Contact
Olivier Bellity — Lebanim
Email: contact@lebanim.com