Privacy Policy

Last updated: August 2026

Company details: [complete from the admin — registered company name, company number, postal address]

Privacy contact: nevotap1234@gmail.com

1. Who we are

Sababa is a cashback app connecting customers with participating businesses. This policy explains what we collect about you, why, who it is shared with, and what rights you have.

2. What we collect

- Identity: your name, profile picture and email address, received from the sign-in provider you chose (Google or Facebook). We never receive or store your password with that provider.

- Phone number, if you choose to enter one.

- Transaction history: the business, the purchase amount, the cashback earned and the time.

- Coin balance, loyalty tier, Sababa tickets and bank withdrawal requests.

- Location: read on your device to show nearby businesses on the map and to alert you when you are near one. Your location is not stored on our servers.

- Notifications: if you allow them, a technical identifier for your browser is stored so we can send them.

- Basic technical information needed to run and secure the service.

3. Why we use it

To provide the service itself — to identify you, credit your cashback, show you relevant businesses and process withdrawals; to prevent fraud and abuse; and to improve the product. We do not sell personal information to third parties.

4. Who it is shared with

- The business where you transact sees your name and profile picture when confirming the sale, and the details of that sale.

- Infrastructure providers acting for us: Supabase (database and storage), Vercel (hosting), Google (sign-in and maps) and Facebook (sign-in), under their own terms.

- Competent authorities, where the law requires it.

Note that some of these providers store data outside Israel, including in countries whose privacy laws differ.

5. How long we keep it

For as long as your account is active. When an account is deleted, identifying details are removed; transaction and withdrawal records may be retained for the period accounting and tax law requires.

6. Your rights

To see the information held about you, correct anything inaccurate, ask for it to be deleted, and withdraw consent to notifications at any time. Contact: nevotap1234@gmail.com. We will respond within the period set by law.

7. Security

Data is encrypted in transit, protected by row-level access rules in the database, and separated between user and administrative privileges. No system is perfectly secure, and we cannot promise absolute security.

8. Children

The service is not intended for children under 16. If we learn that we hold information about a child under that age, we will delete it.

9. Changes

We will update this document from time to time. Material changes will be announced in the app before they take effect.