Privacy policy

Last updated: 14 October 2026

Bayito ("the app") helps you plan and run a move to a new home in Israel. This page explains in plain words what is stored, why, who sees it and what you can do with it. Questions: bardamri1702@gmail.com.

What is stored

• Account: email, name, profile picture (if any), how you signed up (email, Google, Apple or Facebook), language and sign-in dates. A password is stored only as a hash and cannot be read.
• Sign in with Facebook: we receive your ID, name, profile picture and email (if you allow sharing it). We use it only to create your account, sign you in and personalise the app. We do not post on your behalf, read your friends or access other Facebook data. We do not send marketing email to an address that came from Facebook, and we do not pass it, your name or your picture to partners or advertisers. The same principle applies to Google and Apple for sign-in.
• What you told us about your home: property type, rooms, kids, pets, balcony and garden, interests, and shopping requirements you chose to save.
• What you enter in the app: tasks you ticked, contacts, call and message log, guides you started, budget and funding sources, shopping basket, mortgage scenarios and the mortgage application form. Files and documents you keep in the app stay on your device or browser and are not sent to us, unless you choose to keep them with us too (see "Documents kept with us" below). Apart from that, when you choose to attach files to a request to a bank, a temporary encrypted copy is kept for it (see below).
• Usage statistics: events such as "opened a shop offer" or "opened a screen". Stored only if you agreed to "Anonymous usage analytics", and never with content (no names, texts or personal amounts).
• Requests to professionals and reviews: when you tap call, WhatsApp, e-mail or website on a professional, the professional sees that someone made contact, without knowing who. When you send a "request", the message and the details you typed (name, phone, e-mail) are kept and passed to that professional only, after you approved. A review you wrote is kept with the scores, the text and the date, and shown to all users with your first name.
• If you registered as a professional: business name, topic and services, service areas, contact details, years of experience, business type, dealer or company number, licence number and a few words about you (shown publicly, except the business number, which only the team sees). For verification: the ID number (kept encrypted), photos of the ID, the dealer or company certificate and the licence (encrypted), and the results of the checks against public registers. Also the requests you received, the reviews about you and your replies, and the verification decisions with their note.
• Acceptance of the terms: we keep the version of the terms you accepted and the date.
• Early-access sign-up: if you left an email to get updates before launch, we keep the email and the home-type answers you gave.

Structured data instead of files

By default files and documents are not stored by us. Instead the server keeps only small structured data the app needs, and not the content of a file:

• Home profile and progress: property type, rooms, children, pets, balcony and garden, interests, which tasks you ticked and when.
• Money and mortgage: budget and funding sources, mortgage scenarios, the mortgage application form, and the amounts, tracks and rates from an approval you uploaded to be read.
• Only if you agreed to "Share structured anonymous data": amounts, tracks and rates, without a name or identifying details, are added to an anonymous pool used for comparison between users. A figure from the pool is shown only when enough similar offers exist that no one can be identified.
• Only if you agreed to "Anonymous usage analytics": usage events, without content.

Why: to run the app; to improve it and understand what is needed through aggregated statistics; and to offer services from banks, providers and partners in the future. Today the information reaches partners only as aggregated counts (for example how many users with a certain type of home agreed to receive offers), with no identity. Sharing information that identifies you, for example a request to a particular bank, happens only after your explicit approval at that moment, and you can see afterwards exactly what was sent. If we add other kinds of sharing we will ask for consent and update this document.

Sharing with banks, service providers and marketing parties

• Aggregated statistics: numbers about groups of at least 10 users, with no identity (for example how many users with a certain type of home agreed to receive offers). Conditional on the consent to "Sharing the home details with selected partners". The system does not show a group smaller than 10.
• Structured anonymous data: only with the consent to "Share structured anonymous data". Numbers without a name or identifier, used for comparison and statistics, and passed to partners only in aggregated form.
• A personal request: information that identifies you reaches a bank or another party only with your explicit approval in every request, and you can see afterwards what was sent.
• An agreement with every partner: information is passed only to a party that has undertaken, in an agreement, to use it for that purpose only, to protect it, to delete it when the need ends, and not to try to identify people from aggregated data.
• Withdrawing consent: stops the use from then on. An anonymous figure already added to the pool is not linked to you, so it cannot be identified and removed. Statistics already calculated do not change.

At any moment you can see in the app, under Account and security → Full details: which data, to whom and why, what each consent covers and what is held about you.

Documents kept with us (only if you turn it on)

In the privacy settings and on the documents screen you can choose to keep your documents with us too. It is off until you turn it on, and you can turn it off at any time.

• What is kept: the files and documents you keep in the app, with their names, folders and tags, up to a free quota (150 MB today). If the quota changes, we will tell you in the app in advance.
• How: the files are stored encrypted on our server. So that you can search inside your documents, the text of PDF and Word files is also kept, in our database, which is part of the system's encrypted backups. A copy of every document stays on your device, so it opens even with no connection.
• Who sees them: only you, from any device you sign in on. We don't share your documents with anyone. The smart assistant reads a document only when you ask, and only if you turned on "AI processing" (see below).
• Turning it off: the documents are moved from the server to your device, and each one is deleted from our server, with its text, only after it arrived safely. Copies in the database that are part of backups are deleted as the backups are replaced, within 14 days.
• Deleting the account deletes them at once too.

Keeping documents with us is a free convenience. Keep your own copy of important documents.

Why we use it

• To run the app: build your list, keep what you entered and sync between devices.
• To improve the service with aggregate statistics (with consent only).
• To send updates and offers by email, only if you agreed. You can stop at any time.
• To pass information to partners (for example advertisers or service companies), only if you agreed to "Share home details with selected partners". A request to a bank is sent only after your explicit approval, and you can see exactly what was sent.

Consents are in the app under People & help → Account & security → Privacy & consents. You can change them at any time and the change applies immediately.

Who sees it

• We do, on a server we operate in Oracle's cloud, in its Jerusalem region in Israel. Oracle provides the server and its storage (encrypted on its side) and does not use the data. Files and documents you keep in the app stay on your device, except documents you chose to keep with us too (encrypted, for your use only) and a temporary copy of files you chose to send to a bank (see below).
• Cloudflare (Cloudflare Inc., USA) – all communication between the app and the server goes through Cloudflare's network, which protects the server from attacks and passes the requests to it. Like any such network provider, it carries the content on the way and does not keep or use it for its own purposes. Backups of the database and of the documents you chose to keep with us (themselves encrypted) are also kept in its storage in the European Union. This site is served through it too.
• A bank or party you chose to send a request to – receives the request details you approved and, if you attached files, a signed link to download a temporary encrypted copy of them. The copy is deleted automatically after 14 days (the default; shown in the app), and also when you delete it in the app, withdraw the sharing consent or delete your account. If the bank has already downloaded the files, its copy remains and is governed by its own policy.
• An AI provider (Groq, USA) – only if you turned on "AI processing of documents and messages". Then the text you send to the smart assistant is sent to the provider to get an answer. Do not put passwords or card numbers into the assistant.
• Reading a quote or an upgrades appendix – only if AI processing is on and you choose to upload a document. As with a mortgage approval, the text is sent to one of the free AI providers after names, ID numbers, phone numbers, e-mails, account numbers and addresses have been removed. The file itself is not stored; only the business name, the items, the amounts and the terms are kept, and you can delete them at any time.
• Reading a mortgage approval – only if AI processing is on and you choose to upload a document. The text is sent to one of several free AI providers (for example Groq, Google, OpenRouter) after ID numbers, phone numbers, e-mails, account numbers and addresses have been removed. The file itself is not stored; only the amounts, tracks and rates are kept, and you can delete them at any time. Adding those figures, anonymously, to the comparison between users happens only if you separately turn on "Share structured anonymous data". Figures added that way are not linked to your account, so they cannot be found or deleted afterwards.
• A professional you contacted – receives only the message and the details you typed in the request, after you approved. Tapping call or WhatsApp does not give them your name or your account. The professional undertakes in the terms of service to use the details only to answer the request.
• Other users – see the review you wrote with your first name (or "Bayito user"), the scores and the date, and the professional's reply. The professional sees the review the same way.
• Our verification team – sees a professional's ID number and documents only while checking the application, and every such view is written to an audit log. The government open-data portal (data.gov.il) – receives only the licence or company number being checked, with no name and no other details.
• The Expo notification service (Expo Inc., USA) – only if you turned on "Push notice on your phone" in your account. It receives the device identifier and the generic text of the notice (for example "there is a new update about your mortgage request", or for professionals "you have a new request"), with no bank name, no customer name and no details. You can turn it off at any time.
• The site's mail provider – only if you turned on "E-mail" (and the address is verified). It delivers a generic message to you in the same way, with no request details.
• Google, Apple and Facebook – only to verify the sign-in you chose.
• Shops – when you tap "Open on the shop's site" you go to their website and their privacy policy applies there. We read public prices from them and send them no information about you.
• Your information is confidential. Identifying information is passed to a third party only with a consent that covers it, or where the law requires. We may add services in the future in which you are offered to share information (for example with banks or suppliers); we will not turn such sharing on without your consent, and we will update this document.

How long we keep it

• As long as the account exists. A device stays signed in while it is used, and is signed out after 90 days without use (or when you sign out).
• Deleting an account immediately deletes the account and everything in it on the server, including usage events. Documents kept with us are deleted too. Documents kept on your device stay there until you delete them in the app, uninstall the app or clear the site data in your browser. A temporary copy of files sent to a bank is deleted automatically after 14 days, and with the account. Instructions are on the data deletion page.
• Technical logs: the server keeps a technical log (requests without content, warnings and errors, including the IP address) for up to 14 days, to find faults. The app keeps a short rolling log on the device (a few hundred technical lines, without e-mail addresses, phone numbers or ids) and sends it only when it crashes or meets an unexpected error, with the error, the version and the screen. Such reports are kept 30 days and deleted with the account.
• Verification of professionals: the encrypted ID number and the documents are kept only until the verification decision and deleted right after it (what remains: the decision, the date and the note). Reviews are kept until you delete them or your account; requests stay with the professional until either side deletes the account or the profile.
• Backups: the database is backed up continuously to Cloudflare's storage in the European Union (kept there for up to a day), and the documents you chose to keep with us are backed up once a day. In addition, up to 14 daily copies are kept on the server, and up to 14 encrypted copies in a separate place, taken when the system is updated. Deleted data may remain in backups until these copies are replaced, then it is overwritten.
• An email left for early-access updates is kept until you ask us to remove it (write to us).

Security

Files and documents stay on your device and are not stored on a server, unless you choose to keep them with us too (they are then stored encrypted). A temporary copy of files you choose to send to a bank, and professionals' verification documents until the decision, are kept encrypted; passwords are hashed, sign-in is protected by attempt limits, and you can sign out other devices and turn on an app lock. No method is perfect, so choose a long password and do not reuse it elsewhere.

Your rights

• Access and download: Account & security → Export all my data downloads a copy of everything.
• Correction: you can edit most details in the app, or ask us.
• Deletion: Delete my account and data, or ask by email.
• Withdraw consent: at any time, as described above.

The app is not intended for children under 18.

Changes

We will update this page when the app changes and show the date at the top. If we change how we use information in a significant way, we will ask for your consent again.