Privacy Notice
Last updated: 29 September 2026
1. Who handles the information
Uriya Saada, operator of Bniya Plus in Israel, handles service-account information. Contact: uriyasaa150@gmail.com. Employers determine the purposes for which they enter their workers' records; the service processes those records to provide its tools. An employer's own notice and responsibilities also apply.
2. Information and purposes
Account information includes name, email and authentication data managed by Base44; registration adds an account/business name and optional contact name and phone. Work records include worker names, access codes, optional phone numbers, rates, attendance times, site names and addresses, shifts, report messages and payment entries. These support account access, attendance administration, reports and pay estimates. Subscription identifiers, status and billing/report email addresses support billing and requested operational communications. Registration acknowledgements retain account ID, version and timestamp, not an extra copy of your identity document or IP address.
3. Choice and the consequences of not providing data
Providing information to this service is voluntary, not a general statutory duty imposed by us. An account name is necessary to register; contact name and phone are optional. Work-record fields marked required are necessary for that feature. Your employer may have separate legal recordkeeping duties. Do not include unrelated sensitive information in notes. Registration is not consent to marketing, and declining optional communications must not be treated as acceptance.
4. Recipients and external services
Base44 provides hosting, accounts, database and operational email/push infrastructure. Relevant records are made available through the manager and worker interfaces for the service's purposes. When you choose to load the web payment service, Paddle receives connection information and, when supplied for checkout, billing email, business identifier and selected plan; payment details are entered into its checkout. WhatsApp sharing opens only on user action and passes the report content selected by the user to WhatsApp. External app-store links open their providers' sites. Notifications can show work details on a device's lock screen. Share reports only with authorised recipients.
5. Device storage and tracking
The app uses browser storage for account continuity, worker sessions, device-unlock settings, theme, walkthrough/rating preferences and acknowledgement of the storage notice. The current app client disables its optional analytics and no advertising pixel was found in the reviewed app source. This does not switch off hosting/access logs, platform login/page events or settings managed outside the app, including session recordings; those require separate operator review. See the Cookie and Storage Policy. Device biometrics are handled by the browser/device authenticator; the app stores a credential identifier and preferences, not fingerprint images or facial scans.
6. Other integrations and international processing
Legacy Stripe and RevenueCat subscription integrations remain in the service and may process existing billing events; this does not mean they load on every visit. Twilio credentials are configured, but a phone-code messaging flow was not active in the app source reviewed for this notice. Providers and their subprocessors may process information outside Israel. This notice is not a guarantee about a particular storage country or a substitute for the operator's obligation to verify lawful transfer arrangements and provider agreements.
7. Retention and closing an account
Service records are stored in the database; no automatic record-deletion schedule has yet been implemented. The current close-account action deactivates a profile rather than erasing all attendance, payment, report or subscription records. Ask the operator about retention or deletion; some records may need to be retained for a specific legal duty or dispute, and employers may hold their own copies. Local persistent storage remains until removed by the app or cleared in the browser; backups and providers have separate retention periods that require confirmation.
8. Access, correction and deletion requests
You may request access and correction under sections 13 and 14 of the Israeli Protection of Privacy Law, subject to its conditions. Contact uriyasaa150@gmail.com; include only enough information to locate your account, not passwords or payment-card data. Identity may need to be verified before disclosure. Deletion requests are considered according to the applicable law and retention duties; there is no unconditional promise to erase every record. Workers may also contact their employer about records the employer supplied.
9. Security, young workers and changes
No system guarantees absolute protection. Do not share access codes or use a shared device for persistent sign-in. Account registration is for adults; employers entering information about younger workers must comply with employment and privacy requirements. Material changes will carry a new version date; any new optional use requiring consent must be presented separately.
Operator: Uriya Saada · Israel
Contact / send a cancellation request by email: uriyasaa150@gmail.comCancellation and refunds