Privacy Policy

NannyLy respects the privacy of families, babysitters, and other individuals who use our Platform.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we retain it, and how individuals may exercise applicable privacy rights.

We process personal information in accordance with applicable Israeli law, including the Protection of Privacy Law, 5741–1981, and applicable regulations.

The database owner and data controller is Shani Arbiv. Privacy questions can be sent to arbiv.shani@gmail.com.

Depending on your account type and the features you use, we may collect the following categories.

Account Information

• Name.
• Email address.
• Account role.
• Authentication and account-security information.
• Account creation and activity records, including your acceptance of our policies and your marketing choice.

Family Profile Information

• Parent or guardian profile details, including name and photo.
• Neighborhood and city. We do not ask for an exact home address.
• Childcare preferences and care needs.
• Home details, such as home type, home features, pets, and languages.
• Other information voluntarily included in a family profile.

Babysitter and Nanny Profile Information

• Name, birth date, gender, and profile photographs.
• Neighborhood and city.
• Hourly rate, experience, and relevant qualifications.
• Languages spoken.
• Availability information.
• References and credentials voluntarily submitted, including any uploaded documents.
• Profile descriptions and preferences.

Identity Verification Information

Families and babysitters who choose to verify their identity submit an Israeli ID number and a photo of their ID document. See section 8.

Bookings, Messages, Job Posts, and Reviews

• Booking requests, dates, times, notes, and status.
• Messages exchanged between users on the Platform.
• Job posts published by families and applications from babysitters.
• Reviews, ratings, and replies, including the optional email address of a person submitting a review through a referral link.

Information About Children

Parents or guardians may provide information about children to describe childcare requirements. A family account asks for each child's name and birth date, and may include gender, interests, and private notes.

We seek to limit the collection of children's personal information to what is reasonably necessary for the relevant Platform features.

Users should avoid uploading children's full names, photographs, medical details, precise locations, or other sensitive information unless specifically necessary for a feature and appropriately protected.

Children's information will not be displayed publicly merely because it has been entered into a family account.

Technical and Usage Information

We may collect technical information necessary to operate and secure the Platform, including:

• IP address.
• Device and browser information.
• Authentication events.
• Error and diagnostic information.
• Security logs.
• Cookies or similar technologies, as described in section 7.

NannyLy does not currently use third-party analytics, advertising, or cross-site tracking technologies.

Support and Safety Information

If you contact support or submit a report, we may collect:

• The contents of your request or complaint.
• Relevant account identifiers.
• Supporting documents or screenshots.
• Communications concerning the issue.
• Information necessary to investigate and respond.

We use personal information for purposes including:

• Creating and managing user accounts.
• Displaying appropriate profile information.
• Helping families and candidates discover potential connections.
• Providing search and filtering features.
• Operating bookings, messaging, job posts, and reviews.
• Operating and improving the Platform.
• Responding to support requests.
• Detecting fraud, abuse, or security threats.
• Reviewing reported policy violations.
• Complying with applicable legal obligations.
• Establishing, exercising, or defending legal claims.
• Sending service-related communications.

Marketing communications will be handled separately where consent or another lawful basis is required.

The information visible to another user depends on their account role, the Platform's access controls, and the features available.

Family information visible to babysitters

• After a family contacts a babysitter: the family's display name, photo, neighborhood, city, about text, care needs, preferred experience, values, home type and features, pets, and languages, plus each child's first name and approximate age.
• Job posts: the details a family chooses to publish in a job post are visible to signed-in babysitters.
• Reviews about the family, its ID-verified status, and messages the family sends.
• Confirmed bookings: the date, time, note, and the children included in the booking.

Babysitter information visible to families

• Signed-in users can see a babysitter's first name and last initial, approximate age, gender, profile and gallery photos, neighborhood, city, languages, headline, about text, hourly rate, experience, age groups, care types, skills, values, special experience, open availability, reviews, and ID-verified status.
• Credentials: type, issuing organization, year obtained, expiry date, and verification status, but not the uploaded document.
• References: masked name, relationship, period worked, children's age range, written reference, and verification status, but not contact details.
• Confirmed bookings: the babysitter's full name is shared with the family.
• Visitors who are not signed in may see a limited homepage preview of a babysitter: masked name, city, headline, hourly rate, experience level, and rating.

Information visible only to the account owner

Your email address and exact birth date, credential documents, reference contact details, and your children's birth dates, gender, interests, and private notes are not shown to other users. Authorized administrators may access some of this information as described below.

Information accessible to authorized administrators

• Account and profile information, to provide support, correct records, and suspend or delete accounts.
• ID verification submissions, to review identity verification requests.
• Reports and the reported content, to investigate policy violations.
• Support conversations, to respond to users.
• Active bookings, when needed to handle a suspension or deletion.

We will not intentionally make private identity documents, private reference contact information, or children's sensitive details publicly accessible through ordinary discovery features.

Users should not assume that information shared directly with another user can be withdrawn from that person's independent possession.

We may share information with service providers acting on our behalf to provide hosting, authentication, storage, communications, analytics, customer support, or security services.

Our service providers may process information only as permitted by their applicable agreements and the relevant legal requirements.

We currently use the following providers:

• Supabase: database, user authentication, account emails, and file storage.
• Vercel: website hosting and delivery.
• Google Fonts: website fonts. Your browser requests them from Google, which receives your IP address.

Some service providers may process or store information outside Israel.

Our database, files, and account sign-in run on Supabase and are hosted in Singapore. Our website runs on Vercel, which generates pages on servers in the United States and delivers them through a global network, so website requests, including your IP address, may be processed in the United States and in other countries.

Where applicable, international transfers will be handled in accordance with Israeli legal requirements, including appropriate contractual and security arrangements where required.

We use essential cookies or similar technologies for authentication, security, and operation of the Platform:

• A language cookie and browser-storage setting that remember your language for up to one year.
• Browser storage that keeps you signed in until you log out.
• Browser storage that remembers notices you dismissed.
• A cookie that remembers the administrator panel layout, for administrators only.
• A service worker that lets the site work as an installable app and show an offline page.

We do not currently use analytics or marketing cookies. Additional analytics or marketing technologies, if enabled, will be described in the applicable notices and managed in accordance with legal requirements.

NannyLy offers optional identity verification for families and babysitters. We process the ID number and ID photo you submit to perform this check, as described in our Verification & Screening Policy.

The ID photo can be seen only by you and our review team and is deleted once it has been reviewed. We keep the ID number and the verification result. Other users see only whether you are ID-verified.

We will not collect or process criminal-record information except through a legally permitted process.

References and credentials will be processed for the stated purpose and protected by appropriate access controls.

We implement technical and organizational safeguards appropriate to the nature of the information processed and the risks involved.

Such safeguards may include authentication controls, authorization rules, restricted access, secure transmission, monitoring, and backup procedures.

No system can guarantee absolute security.

Users should promptly report suspected account compromise to arbiv.shani@gmail.com.

We retain personal information only as long as reasonably necessary for the purposes described in this policy, subject to applicable law.

Retention periods or criteria vary by category and may reflect account operation, security, fraud prevention, legal obligations, and dispute resolution.

• Accounts and profiles: kept while the account is active. After an account is deleted, its data is kept for about 12 months and then permanently removed.
• ID photos: deleted once the verification has been reviewed.
• ID numbers and verification results: kept for as long as the account's data is kept, including to prevent duplicate or fraudulent verification.
• Support conversations and reports: kept for as long as the account's data is kept, or longer where needed for safety investigations or legal claims.
• Logs and backups: kept for limited periods under our service providers' standard settings.

Users may request account closure through in-app Support or by email at arbiv.shani@gmail.com.

We may take reasonable steps to verify identity before acting on a request.

Upon closure, information will be deleted, anonymized, or retained as appropriate under applicable law and the retention practices described in section 10.

Certain records may be retained where required or reasonably necessary for legal compliance, safety investigations, security, or legal claims.

Individuals may exercise applicable rights concerning personal information, including rights of access and correction where provided by Israeli law.

Requests may be submitted to arbiv.shani@gmail.com.

We may verify identity and assess requests according to applicable legal requirements and exceptions.

NannyLy accounts are intended for eligible adult users.

Information about children may be supplied by parents or guardians for legitimate childcare-related purposes.

We aim to minimize unnecessary collection and disclosure of children's information and apply appropriate protections to the information we process.

Users must not submit information about a child without appropriate authority or another lawful basis.

We may disclose information where required by law, valid legal process, or a competent authority, or where otherwise lawful and necessary to address serious safety concerns, fraud, security incidents, or legal claims.

Any such disclosure will be assessed according to applicable law.

We may update this Privacy Policy as our Platform and practices evolve.

The current version will be published on the Platform, and material changes will be communicated where required or appropriate.

Legal operator:

Shani Arbiv

Privacy inquiries:

arbiv.shani@gmail.com