Privacy Policy

This policy covers the three HAVIT apps — HAVIT for customers, HAVIT Merchant for the shops that sell on it, and HAVIT Driver for the drivers who deliver — and this website.

Sections 2 to 7 describe the customer app. If you run a shop on HAVIT Merchant, section 8 describes what is different for you; if you deliver with HAVIT Driver, section 9 does. Everything else — who we are, who processes data for us, your rights, security — applies to all three.

1. Who we are

HAVIT is a marketplace operated by Mazaya, company number 315869958, at A-Kurum 11, Reina, Israel.

Mazaya is the controller of the personal data described here, for the purposes of the Protection of Privacy Law, 5741-1981.

For anything in this policy — a question, a request to see or correct your data, or a complaint — contact support@havit-app.com, or write to us at the address above.

2. What we collect, and why

This section is written from the application's actual behaviour. Where it says "we do not", that is a property of the system, not an intention.

To identify you

To take an order

We do not store card details. Payment at launch is cash on delivery. If card payment is enabled later, card data is handled by the payment provider and does not reach our systems.

To make the app work

To handle a problem you report

If you report a problem with a delivered order, we keep the reason, the items it concerns, the note you write (up to 1,000 characters) and up to three photos you choose to add. Only HAVIT staff see them; the photos are stored privately, never published.

To understand what people look for

We record what is searched for, and whether the search found anything. This is how we learn what to stock. A search is recorded against either your account or an anonymous session identifier — never both, and the anonymous one is not linked back to you.

With each search, the app also tells us which products the results showed you, which of them you opened and which you added to your cart, each with its place in the results; we record and keep these the same way as the search itself (section 5), to learn how well search finds what people look for.

We do not build advertising profiles, and we do not sell any of this.

How products are ordered on HAVIT

The Products tab and some rows on Home show products in an order. Unless you turn it off, the order is also built for you from what you looked at on your phone (below). It is built from:

• what customers buy on HAVIT. When an order is placed, we count the products it contained — each product at most once per customer in any 30 days. The count records only the day: not who ordered, the shop or the time; the order it comes from stays with your order record. A product's count is not shown or used until at least three different customers have bought it. We count the products bought together in the same order — without your name, your phone number or your order number — to suggest products that go well together.
• what is new and what is on offer;
• variety — some places in the list deliberately show categories and shops that are shown less often;
• what you looked at, kept on your phone — the products and categories you opened recently, those you told us you are not interested in, the shops you opened and your favourite shops (so that we do not suggest them as new), the products you added to your cart, and how often you open the varied picks. These lists stay on your phone. The app sends them with the request that orders your products; we use them to work out your order and **do not keep them**. They change only what you are shown. The order worked out for you is stored on our server, locked with a key that only your phone holds, for at most 30 minutes from the first page, without your account or these lists, so that the next pages continue it. Once your phone forgets the key — after 30 minutes, or when you sign out — no one, HAVIT included, can read it again, including in our database's logs and backups. The unreadable copy is then deleted in batches, oldest first, as people use the Products grid (up to 200 each time a new order is stored and up to 50 each time a page is read), so when traffic is low its deletion can take longer.

While ordering for you is on, the app also sends, with the same requests, the city in your account (only when you are signed in), to show seasonal selections that run only in some cities; and the products now in your cart, to suggest products that go with them. Both are sent without your account; we use them for that one request only and do not keep them, and they are not saved with the order stored for 30 minutes.

Under your cart, while ordering for you is on, the app also sends the products now in your cart on their own, to suggest products that arrive in the same delivery; they are sent without your account, and we use them for that one request only and do not keep them.

While a season is running, some places in the Products grid, and in the lists that continue its order, show HAVIT's seasonal selections, which no shop pays for: most customers see one in every 20 products, a customer who opens or adds seasonal products sees up to the number HAVIT sets for the season (never more than 3 in 20), and a customer who passes many by without opening any, or sets them aside, sees fewer or none — worked out from a count your phone keeps of the seasonal products it showed you and of those you opened, added or set aside, which is sent with the same requests and not kept, like the lists above.

Apart from what is bought, nothing done in the app — opening a product, looking at it or scrolling past it — changes what anyone else is shown.

To check that the app works, it also tells us which products it showed and which were opened, with a random code it makes when you start using it and replaces when you sign in or out, after 30 minutes without use, and each day. The app sends these records without your account, and we store them without your phone number, address, device or the time — only the day. We delete them after 90 days and keep only daily totals for each product.

You can see why a product is shown («لماذا أرى هذا؟») and turn ordering for you off in Settings → «الاقتراحات». With it off, you see the same order as everyone, and we stop using what you browse to suggest things to you. The list of products you recently viewed keeps working on your phone.

The counts of what was bought, and the record each order leaves for them, are kept like our order records (section 5). We do not collect or guess your gender or age, and we do not build advertising profiles.

Paid products and banners (“Sponsored”)

Some cards in the Products grid show products a shop has paid HAVIT to promote; each one is marked “Sponsored”. A paid card is chosen the same way as the rest of your grid — from what your phone sends with your request, while «الاقتراحات» is on — and is kept with your grid's order for up to 30 minutes, like the order itself. Nothing we record about what you see marks a card as paid, and shops receive nothing about you. Products in sensitive categories, or in categories we have not yet reviewed, are never promoted.

Some banners on the Home, Stores and Products tabs are also paid for by a shop and are marked “Sponsored”. Paid banners are not chosen for you: they rotate the same way for everyone, so you may see them even with «الاقتراحات» off.

At the end of a product's page and a shop's page

A product's page and a shop's page end with a list of more products from across HAVIT (“Suggested for you”). Unless you turn it off, this list is ordered for you in the same way as the Products grid (above): it continues the same order worked out for you, from the same lists your phone sends, kept and deleted the same way. With it off, the list follows the same order as everyone's. The app also sends the products the page already shows — and, on a product's page, that product — so that the list does not repeat them; we use them for that request only and do not keep them. While «الاقتراحات» is on, the app also sends with this list's requests, as described above, the city in your account (only when you are signed in) and the products now in your cart, so that the list can include seasonal selections that run only in some cities and products that go with your cart; both are sent without your account, we use them for that request only and do not keep them, and they are not saved with the order stored for 30 minutes.

This list can also show a paid card marked “Sponsored”, chosen and kept the same way as a paid card in the Products grid (above), and only while «الاقتراحات» is on. It can be any shop's product: on a shop's page, it may be that shop's or another shop's.

3. What we do NOT collect

Stated because absence is easy to assume and hard to verify:

• No card numbers. There is no card data in our systems.
• No location tracking. We store the addresses you type. We do not follow your device — none of the three HAVIT apps reads your device's location.
• No contacts or microphone in the customer app. The customer app uses the camera or the photo gallery **only when you choose to add a photo to a problem report**, and only the photos you pick are uploaded (section 2). (HAVIT Merchant uses the camera and photo gallery for shop photos, and HAVIT Driver uses the camera to scan package codes — see sections 8 and 9.)
• No third-party advertising trackers, and no analytics or crash-reporting kits, in any of the three apps.

Cookies

Our public website sets no cookies. It is plain HTML — no analytics, no advertising pixels, no embedded third-party content, and nothing that loads from another domain. There is no cookie banner because there is nothing to consent to.

The apps do not use cookies either. They keep a session token on your device so you stay signed in, and you can end it from the app by signing out.

Marketing

We do not send marketing messages. The notifications you get are about your own orders — collected, on the way, delivered, a problem — and you can turn them off in your device settings. We do not build advertising profiles, we do not sell your data, and we do not share it with anyone for advertising.

4. Who sees your data

We do not sell your data. We do not share it for advertising.

Where your data is

Our servers and databases are in Frankfurt, Germany, and push notifications go through Google Firebase, which operates globally. So your data is stored and processed outside Israel. We use providers that are contractually bound to process it only on our instructions, and we do not move it anywhere else for our own convenience.

5. How long we keep it

When an order is under complaint, dispute or police inquiry. If you complain about an order, a dispute about it starts, or the police make an inquiry about it, our staff may put a hold on that order. While the hold stands, we keep that order's problem-report photos and its handover and payment codes beyond the 180 days above, and if you delete your account in the meantime, we keep that order's problem-report photos until the hold is lifted. Once the hold is lifted, the photos of a deleted account are erased at once, and everything else goes back to the usual schedule above: anything already past its 180 days is erased in the next daily clean-up. Each hold records who placed it and why.

6. Your rights

You can:

• See what we hold about you
• Correct it
• Delete your account — there is a button for this in the customer app (for a merchant or driver account, see sections 8 and 9)
• Object to a particular use
• Complain to the Privacy Protection Authority

Account deletion cannot remove records we are legally required to keep, such as completed orders as financial records.

What deleting your account actually does

Stated table by table, because "we delete your data" is a sentence anybody can write.

Erased:

• Your name, city, language preference and phone number are cleared from your account, and the account is marked deleted.
• Your whole address book — every saved address, including ones you had already deleted. The recipient name, phone, street, building, apartment, floor, driver notes and map coordinates are all overwritten. The database itself then refuses to let any of them be written back.
• Your favourites — every product and every store you saved.
• The basket you were in the middle of.
• Your searches, where they were recorded against your account.
• Your notification settings. The record of the messages sent to you stays, separated from your account and linked only to the order it was sent about.
• Your problem-report notes and photos. The photos are deleted from storage, **except those of an order under a hold (section 5), which are kept until the hold is lifted and erased then.**

Kept, and why:

• Your orders, with the items, the prices and what was paid. These are financial records and there are legal minimums.
• The delivery address of each order. Not from your address book — a separate copy, frozen at the moment you ordered, which is what makes the record of where a delivered order actually went. It cannot be edited and it is kept with the order.
• Your record of accepting this policy and the terms, so we can show what you agreed to and when.
• Your session records (device type and IP address). Your sessions are ended, but the records are not deleted.
• Sign-in protection records (phone digits and IP address). They are not erased when you delete your account; they are deleted on their own after 7 to 90 days (section 5).

Everything kept is separated from your profile: the account it points at no longer holds your name or your phone number.

Signing up again with the same phone number creates a new, empty account. It is not a restore — none of the above comes back, and your old orders are not visible from it.

About the consent record, stated separately because it is not a financial record. We keep your record of accepting this policy and the terms after you delete your account. It is not kept under the legal-minimum rule that covers your orders — it is kept because it is the only evidence of what you agreed to and when, and we would rather say that outright than fold it into "records we must keep". It holds the document version and the date, and the account it points at no longer carries your name or your phone number.

Write to support@havit-app.com.

7. Security

Data is encrypted in transit. Access is limited by role and staff actions are audited. One-time codes are hashed.

Stated plainly because it is true: push tokens are stored unencrypted. A push token is an address for a handset — it cannot be replayed to read anything about you, and it is deleted when the session it belongs to ends.

If something goes wrong. If we discover a security incident affecting your personal data, we will notify you and the Privacy Protection Authority where the law requires it, and we will say what happened rather than that "an issue occurred". If you believe your data has been mishandled, or you see someone trying to reach it, write to support@havit-app.com.

8. If you run a shop on HAVIT Merchant

Merchant accounts are opened by HAVIT staff; there is no sign-up inside the app.

What we hold about you

What we hold about your shop

• The shop's details: its name, contact phone, pickup address, city and the map location of the pickup point — a business address, not your home, and not read from your device.
• Photos: product photos and the shop's logo and cover. HAVIT Merchant asks for the camera or the photo gallery only when you choose to add a photo, and only the photo you pick is uploaded. These photos are published to customers.
• What you sell: products, descriptions, prices and stock.
• The orders your shop receives, without the customer's name, phone number or address (section 4).
• Money: your sales, what HAVIT owes you, each settlement, and whether you confirmed or disputed it. We keep the reference of a bank transfer; **we do not store your bank account number**.
• What you do in the app: preparing orders, stock changes and problem reports are each recorded with the time and who did it.

Who sees it

Customers see what the app publishes about your shop — its name, photos, products and prices — and not your phone number, the pickup address or your sign-in details. Drivers see the pickup address and the shop's contact phone, for the pickups they are assigned. HAVIT staff see what their role permits, and every staff action on your shop's data is recorded.

Closing the account

There is no delete button in HAVIT Merchant, because the account was not opened there. Write to support@havit-app.com to close it. Orders, settlements and the records of what was done with them are financial records: they are kept after the account is closed, and we do not delete them.

9. If you deliver with HAVIT Driver

Driver accounts are opened by HAVIT operations staff; there is no public sign-up.

What we hold about you

What we record while you work

• Every scan, pickup, handover and delivery, and every problem you report, with its time. Together this is the record of who held each package and when; it protects you as much as the customer and the shop. A problem report can carry an optional note you write.
• Cash: what you collected on delivery, what you handed in at the end of the day, and the cash you carry to shops on HAVIT's behalf.

Camera and location

• The camera is used only to scan package codes. The app reads the code and sends the code; no photo is stored or uploaded. Proof of delivery is never a photo or a signature: usually it is a code the customer gives you; where HAVIT does not use a handover code, your own confirmation in the app is the proof.
• HAVIT Driver never reads your location. Your route shows the addresses of the shops and customers; to navigate, the app hands an address to your phone's own maps app. Your position is not sent to us.

What you see, and who sees your record

For each delivery you see the customer's name, delivery address and phone number, and the shop's pickup address and phone — for that delivery only. HAVIT staff who run deliveries see your work record and cash records, according to their role, and every staff action is recorded.

Closing the account

There is no delete button in HAVIT Driver. Write to support@havit-app.com, or ask HAVIT operations, and the account is disabled. The delivery and cash records described above are custody and financial records: they are kept after the account is closed, and we do not delete them.

10. Children

HAVIT is not intended for anyone under 18.

11. Changes

If this policy changes materially we will tell you in the app and ask you to accept the new version. Your acceptance is recorded against the version string at the top of this document.