Privacy Policy

Version 1.0 · Updated 13 October 2026. This is a translation of the Hebrew policy at /privacy; if they differ, the Hebrew version applies.

In short: we keep only what two parents need to coordinate. What is saved in a family is visible only to that family's two parents. No ads, no trackers, and we never sell data. The AI assistant (Shiko) sends data to OpenAI only after you agree. You can delete your account inside the app.

1. Who is responsible

The Together app (ביחד ולחוד) and this website are operated by Ben Levy, a licensed dealer (Osek Murshe) trading as BH Projects, 20 Yechia Adhan St., Jerusalem 9510314, Israel ("we"). We are the database controller under the Israeli Privacy Protection Law, 5741-1981. Privacy questions and requests: bhpro26@gmail.com.

This policy is the notice under section 11 of that law. It covers the iPhone and Android apps and this website.

2. Who the app is for

Parents aged 18 and over who raise children in two homes. Children have no account and do not use the app. The little that is stored about children is entered by their parents, as their guardians.

3. Do you have to give us data?

There is no legal duty to give us data. Without an email address (or Sign in with Apple or Google) and a username an account cannot be opened. Everything else is optional; if you leave it out, only the part that depends on it will not work.

4. What we store

• Account: email address, username and password (stored by the identity provider as a one-way hash; we never see it). With Apple or Google sign-in we receive an identifier, an email address (Apple's hidden relay address is fine) and sometimes a name. A phone number is stored only if you turn on SMS two-step verification, where offered.
• Parents: name and, if you choose, phone, email, photo, colour, relationship to the children and a short note. Gender is stored only to address you correctly in Hebrew. A parent can enter basic details of the other parent before they join (name, phone, email); the other parent then sees and can correct them.
• Children (the minimum): first name, day and month of birth (no year), and optionally a photo, the name of the school or kindergarten, and an emergency contact (name and phone). There is no free-text notes field for a child. We never ask for, and the app has no fields for, ID or passport numbers, surname, grade, gender, diagnoses, medications, vaccinations or medical information.
• Child reminders: a title the parent writes, times, and who marked it done.
• Content you write: titles of reminders and events, notes and messages are written by the parents; you decide what to write in them and are responsible for that content. The app does not ask for medical or sensitive information and does not classify or analyse what you write; it is stored only to show it to you and the other parent. Do not write anything you do not want the other parent to see.
• Calendar: the regular custody plan, handover and pickup times, holidays, family vacations, events, weekly activities, day notes, swap requests and their reasons, approvals and declines, and the change log.
• Chat: messages, urgent messages and photos between the parents, with delivery and read times. Location metadata is removed from a photo before it is sent. Blocks and reports to support (with the reason and note you wrote) are kept for handling.
• Money: child support, the expense split, fixed expenses, expenses you enter with a receipt photo if you attach one, "paid" marks, allowances and the monthly balance. The app does not move money and stores no bank or card details.
• Subscription: plan, status, renewal and offer dates, and the Apple or Google transaction identifier. We never see card details.
• Settings: language, quiet hours for notifications, home-screen layout, the city chosen for weather, app lock, and your answer to the AI-assistant consent and its date.
• Technical: the device's notification token, platform (iOS or Android) and language. Server logs keep IP addresses and technical request details for a short time (section 9).

What we do not collect: GPS location (you pick a city from a list), contacts, the phone's calendar, browsing history, advertising ID, health or biometric data. Face ID or fingerprint unlock is checked on the device and never reaches us. The app has no ads, trackers, usage analytics or third-party crash reporting. Agreements, court decisions and legal documents are not uploaded and are not read by AI.

5. What stays on your phone

• Dictation: the phone's speech service turns speech into text. On iPhone this happens on the device only. On Android the app asks for on-device recognition, but if the phone has no Hebrew model, Google's speech service on the phone may process the audio under your own settings and agreements with Google. We never receive or keep the recording, only the text you confirm.
• Reading an amount from a receipt: done on the phone only: on iPhone with Apple Vision and Tesseract (open source), on Android with Google ML Kit and Tesseract. The recognised text is not sent to us. Google ML Kit may send Google technical usage and performance metrics, without the receipt's content.
• PDF reports, app lock and a temporary copy of your data for offline use.

6. Why we use data

• To run the app and share between the two parents of a family what concerns both.
• To send notifications, reminders and approval requests, respecting the quiet hours you set. A message marked urgent can arrive during quiet hours.
• To keep the conversation respectful and safe: a filter of offensive phrases on our own server, blocking, and review of reports to support.
• To run the AI assistant, only if you agreed (section 7).
• To manage subscriptions, answer requests, prevent abuse, secure the service and comply with the law.

We do not sell data, use it for advertising or profiling, send marketing messages, or use it to train AI models. Service messages (email verification, password reset, notifications you turned on) are not marketing. If we ever want to send marketing updates, we will do so only after your explicit consent, and you can withdraw it at any time (section 30A of the Israeli Communications Law).

7. The AI assistant (Shiko)

• Before the first use the app explains what is sent and asks for your consent. Without it nothing is sent and the rest of the app works. You can withdraw at any time: Family › App settings › Use the AI assistant.
• After consent, what you type or say to the assistant is sent to OpenAI (United States) to understand the request, together with: first names only of the parents and children, the parents' gender for Hebrew wording, the date and time, a few earlier requests in the same conversation, and, when the request is about it, the upcoming custody times. Before sending we remove email addresses, phone numbers and identifying numbers. Please do not tell the assistant medical or identifying information.
• The assistant shows what it understood, and nothing is saved until you confirm. A change that needs the other parent's approval waits for it.
• We do not store the request text on our server and we ask OpenAI not to store it. We keep only a technical usage record (when, which kind of request, how much processing) for usage limits. Under OpenAI's API terms, OpenAI does not use the data to train models and may keep it for up to 30 days for abuse monitoring.
• Answers are suggestions. They can be wrong and are not legal, medical or financial advice.

8. Who sees the data

The other parent of the family sees what is saved in the family space: calendar, messages, money and the children's details. That is the purpose of the app. Your settings, drafts and private items are visible only to you.

Service providers process data for us, on our instructions and under data-processing agreements:

A notification can contain a first name (for example a child's name in a reminder), so it passes through Apple or Google. You can hide notification content on the lock screen in your phone's settings.

We disclose data to an authority only when the law requires it, for example under a court order, and only as much as required. If the business is sold or transferred, data will pass only to someone who commits to this policy, and we will tell you in advance.

9. Transfers abroad, retention and deletion

Transfers: our servers are in the European Union, to which data may be transferred under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. Transfers to providers in the United States (OpenAI, Apple, Google, RevenueCat) rely on the providers' contractual undertakings to protect the data, use it only to provide the service and not pass it on, and for the AI assistant also on your consent.

How long: data is kept while the account and the family exist. Reports to support are kept up to 12 months after they are handled, and support emails up to 24 months. Server logs and backups roll over within 30 days at most.

Deleting your account (in the app: Family › My account › Delete account, or by email): the account is locked at once, and the deletion usually runs immediately and in any case within 7 days. Your sign-in details, profile, photo, devices, settings, AI consent and private items are deleted. What is shared with the other parent (calendar, swaps, approved money records, chat and change log) stays for them, showing "Former parent" instead of your name, with no photo or contact details. Chat text stays as written. If you are the last parent in the family, all of the family's data is deleted. Copies in backups are gone within 30 days. Details: account deletion.

10. Security

Data is encrypted in transit (HTTPS) and at rest at the provider. Server access rules (Row Level Security) make sure only the parents of a family can read its data. Photos and receipts are kept in private storage and opened through short-lived links. Administrative access to the server is limited to the operator. We follow the Privacy Protection (Data Security) Regulations, 5777-2017. If a serious security incident happens, we will report it to the Privacy Protection Authority as required and tell you when there is a real risk to you. No system is perfectly secure, so please use a strong password and a screen lock.

11. Your rights

• Access: see the data kept about you. Most of it is shown in the app; you can ask for a copy by email.
• Correction: correct wrong data, in the app or by email.
• Deletion: as in section 9.
• Withdrawing consent: for the AI assistant, notifications and phone permissions, at any time.

We answer within 30 days. We check that the request comes from the account holder, without asking for an ID number or password. If we cannot comply, we explain why. You may also contact the Israeli Privacy Protection Authority (gov.il).

12. Data about other people

When you enter details about someone else (the other parent before they join, a child's emergency contact, names in messages), enter only what is needed and only if you are entitled to. The other parent sees and can correct what was written about them when they join.

13. This website

The website uses no cookies, analytics or trackers. The hosting provider (Google Firebase Hosting) keeps technical access logs for a short time for security and operation.

14. Changes and new features

New features (for example a home-screen widget, copying to the phone's calendar, or a watch app) will use the kinds of data described here. If a new feature needs a new kind of data, a new phone permission or a new provider, we will update this policy before turning it on and ask for consent where needed. We announce material changes in the app. The version and date are at the top of this page.

15. Contact

Ben Levy (BH Projects), privacy contact: bhpro26@gmail.com.