L Lmalim

Privacy Policy

How Lmalim handles your data · Last updated 11 November 2026

In short: we collect what the app needs to match you with someone nearby, let you talk to them, and take a booking. We do not sell your data, we do not use advertising trackers, and we never see your card number.

1 Who we are

Lmalim is operated by MAWJIX, a company registered in Israel, which is the owner of the database holding the personal data described here. This policy covers the Lmalim app and website. Our privacy officer oversees our ongoing compliance with the Protection of Privacy Law, 5741–1981, including Amendment 13, and can be reached at the address below.

privacy@lmalim.comPrivacy requests and our privacy officer support@lmalim.comEverything else

2 Why we ask, and whether you have to answer

Israeli law requires us to tell you three things whenever we ask for personal data, so here they are plainly:

  • Whether you are obliged to give it: you are not under any legal duty to give us anything. But the app cannot do certain things without certain details — without a phone number we cannot verify you or let a provider reach you, and without a city we cannot run a search. Where a field is needed for a feature, not giving it means that feature will not work.
  • Why we ask for it: to run the service — sign you in, search, bookings, chat, ratings, notifications — to keep it safe from abuse, and to meet legal obligations.
  • Who receives it: the other side of a booking you make, other users where you chose to publish it, and the processors listed in section 5. Nobody else.

Notice under s.11 of the Protection of Privacy Law, 5741–1981.

3 What we collect

Nothing here is optional decoration: each item exists because a part of the app stops working without it.

  • Your account: name, username, phone number, country, and your password — stored hashed, never in plain text.
  • Phone verification: when it is switched on we send a one-time code by SMS. Codes are short-lived; we keep the fact that a number was verified and whether delivery succeeded.
  • Provider profile: skills, cities served, provider type, availability and contact preferences.
  • Photos you upload: portfolio images and photos attached to reviews, including your profile picture.
  • Approximate location — only if you allow it: used to pre-select your city when searching. We ask for coarse, roughly city-level accuracy, never precise location. You can decline and pick a city by hand, and change it at any time.
  • Bookings: dates, status and notes.
  • Messages: in-app chat, notifications, support requests and abuse reports.
  • Ratings: scores for timing, price and quality, plus any written review and photos.
  • Push token: an identifier issued by Apple or Google so a notification can reach your device. It belongs to the session that registered it and is removed when you sign out.
  • Membership records (providers only): a record that a payment happened — amount, currency, method, reference, and whether it was confirmed. Card numbers and bank credentials never reach Lmalim's systems.
  • Technical logs: what is needed to run and secure the service. No advertising identifier is collected or used.
  • Counts: how often a profile is opened or shown in search, and how often things happen across the app in a day — visits to the site and app, sign-ins, searches, bookings, messages, registrations. Totals only. A count has a date, a name, a platform and a number attached to it; it carries no name, no account, no device identifier, no address and no search term, and there is no way to work backwards from one to a person. We also count how many accounts were active on a day, each counted once however often they signed in. These totals are kept for about a year so seasons can be compared. On the website we also count how many visits and registrations began on one of our ads — a yes or no per visit, with no click identifier and nothing about which ad or who.

4 How we use it

  • Sign you in, run search, bookings, chat and ratings.
  • Tell you when something happens on a booking or a message.
  • Prevent abuse — for example limiting repeated failed sign-ins.
  • Meet legal obligations and enforce our terms.
  • Reviewing reported content: chat between users is private. But if someone reports a message, a rating or a user's behaviour, you agree that a Lmalim moderator may open, read and retain the relevant conversation and account records in order to investigate, and that a strike and the block described in our Terms may follow.

We do not sell personal data, and there are no third-party advertising trackers in the mobile app. The only automated decision we make about you is the temporary block that follows the strike threshold in our Terms — and each strike behind it is added by a moderator, not by software. You can contest a block by writing to us.

5 Who sees it

When a booking is made, the customer and the provider can see each other's name and phone number — that is how the job gets done. Lmalim passes those details on only so that this booking can happen; once they are shared, how the other person stores, uses or passes on your name and number is outside our control and, to the extent the law permits, outside our responsibility. Your profile, your ratings and any photos you publish are visible to other people using the app.

A small number of processors act only on our instructions:

  • Hosting — the server and database holding the data above.
  • SMS delivery (Twilio) — receives your phone number to deliver a verification code, when SMS verification is enabled.
  • Push delivery (Expo, Apple, Google) — receives a device token and the notification text in order to deliver it.
  • Payment processing — the payment provider handles card details directly. We receive confirmation, not the card number.

We do not share personal data with advertising networks or data brokers. We disclose data to an authority only where the law requires it.

6 Where your data goes

Some of the processors above operate outside Israel. Where data leaves Israel we rely on the transfer conditions permitted by the Privacy Protection Regulations (Transfer of Data Abroad), 5761–2001 — in practice, countries or organisations subject to a comparable standard of protection, or a contract imposing one.

7 Keeping and deleting data

We keep personal data only as long as the purpose it was collected for still applies, or as long as the law requires.

You can delete your account from inside the app: Edit Profile → Delete account. That removes your account and the personal data attached to it — bookings, chat, ratings, notifications — from our primary systems, except where the law requires us to keep a limited record (for example accounting records, which tax law requires us to keep for seven years).

8 Security

Passwords are hashed (a client-side salt plus server-side PBKDF2). Traffic uses HTTPS. Access to admin tools is restricted to administrator accounts. We apply the organisational and technical controls required by the Privacy Protection (Data Security) Regulations, 5777–2017, at the level appropriate to this database, and we will notify the Privacy Protection Authority and affected users of a severe security incident as those regulations require.

9 Your rights

Under Israeli law you may:

  • See the data we hold about you (s.13 of the Protection of Privacy Law).
  • Ask us to correct or delete it if it is inaccurate, incomplete or out of date (s.14).
  • Ask us to stop using it for direct marketing at any time.

Use in-app deletion, or write to privacy@lmalim.com and we will answer within the period the law allows. If you are in the EU/EEA or the UK, you additionally have the rights of access, rectification, erasure, restriction, portability and objection, and may complain to your local supervisory authority.

10 Messages we send

Service messages — a verification code, a booking update, a new chat message — are part of the service and are sent because you use it. We will only send you marketing messages if you have agreed in advance, and every such message carries a free and simple way to opt out, as required by s.30A of the Communications (Telecommunications and Broadcasts) Law, 5742–1982.

11 Children

Lmalim is for adults. It is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has an account, write to us and we will remove it.

12 Cookies

The website uses only what is needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies.

13 Changes and complaints

If we change this policy we update the date at the top of this page, and announce material changes in the app.

If you are unhappy with how we handled your data, please write to us first. You also have the right to complain to the Privacy Protection Authority (הרשות להגנת הפרטיות) at the Ministry of Justice.

This policy is published in English, Hebrew, Arabic and Russian. If the versions differ, the Hebrew version prevails.