Privacy Policy
Last updated: 5 October 2026
This Privacy Policy explains how your personal data is collected, used and protected when you use the ISefer mobile application (the "App") and the website at isefer.info (the "Website"). Please read it carefully.
1. Who is responsible for your data
The data controller responsible for your personal data is:
Ekaterina KozelskaiaBar Yehuda 29, Bat Yam, Israel
Email: ea.kozelski@gmail.com
If you have any questions about this policy or about how your data is handled, you can contact us at the email address above.
2. What data we collect and why
We collect only the data we need to provide the service. This includes:
| Data | Why we collect it | Legal basis (GDPR) |
|---|---|---|
| Your email address | To create your account and sign you in | Performance of a contract |
| One-time sign-in codes | To verify it is you when you log in | Performance of a contract |
| Words you save to your dictionary | To provide your personal dictionary | Performance of a contract |
| Books you save and your reading progress | To keep your library and progress in sync | Performance of a contract |
| Your reading activity: when you open a book, how far you read, the words you look up, the grammar explanations you open and the words you add to or remove from your dictionary | To show your reading statistics in the App | Performance of a contract |
| App settings and preferences | To remember how you like to use the App | Performance of a contract |
| Your subscription and purchase status | To give you access to paid features | Performance of a contract |
| Words or phrases you tap to translate or hear | To return a translation or pronunciation | Performance of a contract |
We do not use analytics or crash-reporting tools that collect personal data, and we do not build advertising profiles about you.
3. Who we share data with
To run the service we rely on a small number of providers. Each receives only the data needed for its specific task:
- Google Cloud (Israel) — hosting and database.
- Google Cloud Translation and Text-to-Speech — to translate and pronounce a word or phrase you tap.
- Microsoft Translator — to provide alternative translations.
- Brevo — to email you your sign-in code.
- Apple — to verify your subscription purchase.
- Keycloak — authentication, self-hosted on our own infrastructure.
- OpenAI — used in advance to prepare translation and grammar content for the books in our catalogue; no personal data is sent.
When you tap a word or phrase, only that word or phrase is sent to the translation and text-to-speech providers so they can return the result.
We do not sell your personal data, and we do not share it for advertising.
4. Where your data is stored and international transfers
Your data is stored on Google Cloud infrastructure located in Israel. The European Commission has recognised Israel as providing an adequate level of protection for personal data, so no additional safeguards are required for transfers from the European Economic Area.
Some of the providers listed above (for example the translation services, Brevo, Apple and OpenAI) may process data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as the European Standard Contractual Clauses or the EU–US Data Privacy Framework.
5. How long we keep your data
- Your saved words, books, reading progress, reading activity and settings are kept until you delete them.
- Your email address and account are kept until you ask us to delete them (see section 6).
- One-time sign-in codes are short-lived and expire shortly after they are issued.
We do not keep separate copies of deleted content.
6. Deleting your data
You can delete your saved data from within the App at any time.
Deleting your data removes the books you have saved, your reading activity, the words in your dictionary and your settings. Your account and the email address linked to it remain, so you can sign in again at any time.
If you would like us to delete your account and email address as well — removing your data completely — please contact us at ea.kozelski@gmail.com and we will do so.
7. Your rights
If you are in the European Economic Area, you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent where processing is based on consent; and
- lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, contact us at ea.kozelski@gmail.com.
We do not make automated decisions that produce legal or similarly significant effects about you.
8. Children
The service is not directed to children under the age of 16, and we do not knowingly collect personal data from them.
9. The Website (isefer.info)
If you sign up for TestFlight access through the form on isefer.info, the email address you enter is sent using EmailJS so that we can contact you. The Website also loads scripts from content delivery networks, which can see your IP address as part of delivering those scripts. This processing is based on your consent and on our legitimate interest in operating a secure website.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page.