Privacy Policy

Updated 15.09.2026. The Smoh app is run by KidmaTech, Israel. Questions: support@smoh.app.

We collect only what the service cannot work without, and we say plainly what that is.

What we collect

• First and last name — seen by the other side of a request.
• Email address — the account login.
• Phone number — contact between the two sides, and trusted contacts for the emergency message.
• City and address — finding nearby places and volunteers. The open feed shows only the district; the exact address is revealed only to the chosen volunteer.
• Precise location — nearby places and the emergency message to your trusted contacts. Requested only when you use those features.
• Photos — the profile photo and the pictures of documents during verification.
• Sensitive information — identity document, police clearance certificate, and the type of disability.
• Messages — the chat between the two sides of a request.
• User ID — links requests and responses together.

Why we collect it

Only to make the app work: to connect a person who needs help with a volunteer nearby and to make that meeting safe. We do not use the data for advertising and do not track you across other apps or websites. There are no ad networks in the app.

Do you have to give us this data

The law requires us to say it plainly: you are not obliged to give us anything, it is your free choice. But without a name, an email, a phone number and a district the service cannot work — there is nobody to pass the request to and nobody to connect you with. Without location, photos and the microphone the app still works, simply without those features. You cannot become a volunteer without the document check: the safety of people who invite a stranger into their home rests on it.

How the data is stored

• Personal data and documents are stored encrypted on the server.
• Chat is encrypted on the phones: the server passes messages on but cannot read them and does not keep them after delivery.
• Verification documents are seen only by the administrator who performs the check.
• Location metadata is stripped from photos before they are sent.

Where the data physically sits

The database and the files of the app sit on our own server, and that server is rented in the Oracle Cloud, in the Frankfurt region of Germany. That means your data leaves Israel and is stored in the European Union. We say so directly, because Israeli law requires the transfer of data abroad to be disclosed. EU countries are recognised as providing an adequate level of data protection. Oracle supplies the machine and the disks; it has no access to the contents of the database and may not use them. The data is ours to handle and nobody else’s.

Who we share it with

We do not sell personal data and do not pass it to third parties for their own purposes. Apart from the providers the service cannot exist without, nothing leaves us, except where the law directly requires it (a court, the police, a supervisory authority).

• Oracle Cloud — the server our database and files run on (Frankfurt, EU).
• Apple — Sign in with Apple, payments for the “Friend of the project” status and delivery of notifications.
• Google — Sign in with Google, if you choose that way in. All we receive from it is your name and email address; your Google password never reaches us. Sign in with Apple works the same way.
• The type of disability and the exact address are visible only to the side that the request connected you with.

How long we keep it

• Profile and account — for as long as the account exists. Delete the account and it is erased at once.
• Verification documents (ID, selfie, police clearance certificate) — until the check is finished and then 12 months, so that a complaint about a volunteer can still be examined. Delete your account earlier and the documents go with it; they can outlive it in one case only: if a complaint about you is already being examined, they are kept until that examination ends — and by our own rules an examination takes no more than a day.
• Closed requests — 30 days, then erased.
• Messages — not kept on the server after delivery; they remain on the phones of the two sides.
• Backups — up to 30 days. Deleted data lives that long before it disappears from there too.
• The record of a paid status — while the status is active and for 7 years afterwards, as accounting rules require.

Payments

Purchases are handled by the App Store. We never see or store your card details. Our server only keeps a note that the “Friend of the project” status is active and until what date.

Your rights

• Delete everything — in the app: “Settings” → “Delete account”. The profile, documents, requests and undelivered messages are erased. This cannot be undone. One thing can outlive the account: the verification documents, if a complaint about you is being examined — they are kept until that ends, and nothing else is.
• Find out what is stored about you (the right of access under the Protection of Privacy Law), correct what is wrong or restrict processing — write to support@smoh.app, we answer within two business days.
• Withdraw access to location, microphone and photos — in iPhone settings; the app keeps working without those features.
• Complain about us — to the Israeli Privacy Protection Authority (הרשות להגנת הפרטיות), at gov.il. But write to us first: almost everything is settled by email within a couple of days.

Children and teenagers

Help can be requested from the age of 13. If you are under 18, you may use the app only with the knowledge and consent of a parent or guardian. The app does not serve children under 13: such accounts are deleted as soon as we learn of them. Volunteers must be 18 or older.

Changes

If this policy changes, the updated version appears on this page and the date at the top changes.