Privacy Policy for Otot

Introduction

This Privacy Policy describes how Otot ("the App") handles information in connection with your use of the App. Otot is developed and operated by Dan Arlowski, an individual developer based in Israel ("Developer", "I", "my").

Otot is an application designed to support Jewish religious practice. I respect your privacy and have intentionally designed the App to minimize data collection. This policy explains what information the App accesses, how it is used, and your rights.

Contact: info@otot-siddur.com

Summary (Plain Language)

• I do not collect, store, or transmit data about you in the background.
• All app data, including your location, stays on your device.
• The only time information leaves your device is if you choose to send a message through the in-app support form (see "Support Messages" below).
• There are no user accounts.
• I do not sell or share your data with anyone.
• I do not use analytics, advertising, or tracking of any kind.

Information the App Accesses

Support Messages (In-App Contact Form)

The App includes an opt-in support form. No information is sent until you tap "send" on that form. When you submit a support message, the App sends the following to a server I operate:

• Your name
• Your subject line and message text
• An email address, only if you choose to provide one (used so I can reply to you)
• The category you selected (bug, feature request, halachic question, or other)
• The App version and your interface language

To deliver these messages, I use the following sub-processors strictly for that purpose:

• Cloudflare, Inc. hosts the receiving endpoint and may process your IP address and standard request metadata as part of providing that service.
• Resend (resend.com) delivers the message to me by email; processed in the United States.
• The mailbox provider that hosts info@otot-siddur.com.

I may decide, at my sole discretion, to delete your message or to keep it, but in no case longer than 24 months from when it was received. I use the contents only to respond to you. Submitting a message is voluntary; please do not include sensitive information you would not want to share by email.

Information the App Does NOT Collect

• I do not require or create user accounts.
• I do not collect names, email addresses, or phone numbers automatically. The only personal data I receive is what you voluntarily include in a support message (see above).
• I do not collect payment or financial information. If in-app purchases are offered in the future, they will be processed exclusively through Apple's or Google's in-app purchase systems, and I will not have access to your payment details.
• I do not collect content you create in the siddur, tehillim, or other features. The only user-provided content I receive is the text you type into a support message.
• I do not track you across other apps or websites.
• I do not use analytics, advertising, or crash reporting services at this time.

Children's Privacy

The App is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). I do not knowingly collect personal information from children.

Third-Party Services

Outside of the support form described above, the App does not integrate with any third-party services, analytics providers, advertising networks, or crash reporting tools. If this changes in the future, this Privacy Policy will be updated before any such integration is activated, and where legally required, consent will be requested through an in-app prompt.

Website Analytics (otot-app.co.il)

This section applies only to the website otot-app.co.il, not to the App. The App itself continues to operate without data collection, as described above.

On the website we use Umami, a privacy-friendly analytics service hosted in the EU region. Umami:

• Does not use cookies or localStorage.
• Does not collect personal data, does not fingerprint, and does not track you across other sites.
• Your IP address is hashed with a daily-rotating salt for the sole purpose of de-duplicating unique visitors, then discarded. The raw IP is never stored.
• The data we see is aggregate: how many visits, which pages, from which country and browser, and how you arrived (for example, a Google search, a direct link, or utm_source parameters in the URL).
• We also count clicks on the "Get the app" buttons so we can see which pages lead to downloads. No personal data is attached.

Because of how Umami works (no cookies, no personal data), using it does not require a consent banner under GDPR / ePrivacy or Israel's Privacy Protection Law. If you do not want your visit to be counted, you can enable "Do Not Track" in your browser (Umami honors it), or use any network blocker or browser that blocks analytics scripts.

The site is hosted on Cloudflare Pages (US/EU), which sees standard network traffic (IP addresses, request headers) as part of providing that service, as described in the "Support Messages" section above.

Your Rights

For data that stays on your device (your settings, location, and app content), there is no server-side copy, so you keep full control. You can:

• Revoke any permission at any time through your device settings.
• Uninstall the App, which will remove all App-related data from your device.

For support messages you have sent through the in-app form, those emails sit in my mailbox until I choose to delete them, and in any case no longer than 24 months. While I still have your message, you can write to me at the email address below to request a copy, or to have it deleted sooner.

Depending on where you live (for example, the European Economic Area, the United Kingdom, California, or Israel), you may have additional rights under applicable laws, including the GDPR, UK GDPR, CCPA/CPRA, and Israel's Privacy Protection Law, 5741-1981. To exercise any such rights or ask questions, contact me at the email address above.

Data Security

Because your data remains on your device, its security depends on the security of your device. I recommend keeping your device locked with a passcode or biometric lock and keeping your operating system up to date.

International Users

The Developer is located in Israel. In normal operation the App does not transfer your data internationally, because your data does not leave your device. The exception is the in-app support form: if you use it, your message is processed by Cloudflare's global edge network and by Resend in the United States before reaching my mailbox.

Changes to This Policy

I may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date above. If the App begins collecting or transmitting any data, I will update this policy and notify users within the App before such collection begins.

Governing Law

This Privacy Policy is governed by the laws of the State of Israel, without prejudice to any mandatory consumer protection or data protection rights you may have under the laws of your country of residence.

Contact

For questions about this Privacy Policy, contact:

Dan Arlowski
Email: info@otot-siddur.com
Location: Israel