Privacy Policy – Meeba

Last updated: 16 August 2026

This Privacy Policy (the "Policy") applies to your use of the Meeba iOS application and its accompanying website (together, the "Service"), operated by Aran Belson, a sole proprietor registered in Israel as an osek patur (exempt dealer) ("the Operator", "we", "us"). It explains what information we collect, how we use it, who we share it with, and what rights are available to you.

Using the Service constitutes acceptance of this Policy. If you do not agree to it, please do not use the Service.

Who We Are and What the Service Does

Meeba is a platform connecting hospitality businesses (bars, restaurants and similar venues – "Businesses") with workers seeking jobs in the sector ("Workers"). Businesses can post jobs and browse candidate profiles; Workers can browse jobs and submit applications.

"Meeba" is a trading name. The Service is operated by Aran Belson, who is the owner of the database and the party responsible for its processing for the purposes of the Protection of Privacy Law, 5741-1981. Contact details appear under Contact Us below.

Information We Collect

Information You Provide Directly

When you register we collect basic account details: your full name, email address, phone number, date of birth and profile photo. Date of birth is a required field at registration, used to verify that you meet the minimum age requirement (see Minors below). Your password is stored only as a one-way hash; we do not retain the password itself.

Workers additionally provide a professional headline, a personal bio and selected strengths; work experience, including roles, workplaces, employment dates and descriptions; certificates and qualifications, including uploaded files; availability status; saved jobs and businesses you follow; and connections and endorsements between users.

Businesses provide their business details, photos, posted jobs and responses to candidates, as well as a business address and contact phone number.

In addition, we collect content and answers provided during the application process, including responses to screening questions.

Information Received from External Sources

When you register or sign in using Google Sign-In or Sign in with Apple, we receive basic information from the identity provider — such as name, email address and profile photo — according to the permissions you approved with that provider.

Information Collected Automatically

• IP address and operational logs – collected on our servers for information security, rate limiting, abuse prevention and troubleshooting.
• Push notification identifier (FCM Token) – a technical device identifier generated by Firebase Cloud Messaging and stored by us to deliver push notifications. Notifications can be disabled in your account or device settings.
• Error and performance data – when a fault occurs, technical information about the error event is collected via Sentry for diagnosis and repair.
• Location data – device location, used to show relevant jobs by proximity ("jobs near me") and to search by city or area. Location is collected only during active use of the app and only after your approval. You may revoke this permission at any time in your device settings, though doing so may limit certain features.
• Cookies – on the website we use technical cookies (HttpOnly, secure) solely to manage your login session: an access token and a refresh token. We do not use cookies for advertising or marketing tracking.
• Applicant view log – each time a Worker's identity is revealed to a Business (see Sharing Between Platform Users below), we record the fact of the disclosure, the Business, the job and the time. This log exists so that we can tell you who your details were disclosed to, and to enforce the limits of the unlock mechanism.

We do not use advertising or marketing tracking tools, and we do not build behavioural profiles of you for marketing purposes. We do record technical usage events for key actions in the Service — such as registration, login, or submitting an application — alongside an internal account identifier, in order to operate, secure and troubleshoot the Service. These records do not include your name or email address.

How We Use Information

We use information to create and manage your user account and verify identity; to match Workers with Businesses and display relevant jobs, including by location; and to display Worker profiles to relevant Businesses on the Service (see Sharing Between Platform Users below). We also use it to send push notifications regarding jobs and account updates, to send transactional emails (email verification, password reset, system updates), and to prevent repeat abuse of introductory allowances. In addition, information is used to improve the Service, diagnose faults and secure the system, and to comply with legal requirements and respond to competent authorities.

Automated Processing and Artificial Intelligence

We use artificial intelligence tools, including tools provided by third parties, to help match workers with jobs. It is important that you are aware that the following information is processed using these tools:

• Candidate–job matching – your profile content (headline, bio, experience, certificates) is processed to generate a mathematical representation (embedding) used to rank the fit between candidates and jobs.
• Initial application screening – as part of submitting an application, the answers you provide to screening questions are processed to produce an initial assessment of your fit for the role.
• Classification and tagging of businesses and jobs – job descriptions and business details are processed to derive tags and automatic categorisation.
• Free-text search – when you search for jobs by typing a free-text query, the text of that query is processed by a third-party AI service to produce a mathematical representation (embedding) used to find matching jobs. Queries are held briefly in a temporary cache so that repeat searches are faster.

Important: Automated processing may affect the order in which you are shown to Businesses, or the progress of your application. This processing does not constitute a final decision — hiring decisions are always made by the Business itself, as a human decision-maker. If you would like us to manually review the outcome of automated processing concerning you, please contact us at the address under Contact Us below.

Sharing Information with Third Parties

Sharing Between Platform Users

This is a material disclosure you should understand: the core purpose of the Service is to expose Worker profiles to hiring Businesses. Your profile details — including name, photo, work experience and certificates — may be displayed to Businesses searching for workers on the Service.

Direct contact details (phone and email) are not shown to Businesses by default, and are revealed to a specific Business only through the Service's profile unlock mechanism, or when you have submitted an application to that Business's job.

Workers are advised to ensure that the details they upload to their profile are details they are willing to share with prospective employers.

Responsibility of the receiving Business: once your details have been disclosed to a Business, that Business holds the information as an independent controller in its own right, and not as a processor acting on our behalf. That Business's use of the information — including retaining it, contacting you, or passing it on — is governed by that Business's own privacy policy and its own obligations under law, and is outside our control. We are not responsible for a Business's use of information after it has been disclosed. Requests to delete information held by a particular Business should be directed to that Business, and we will assist in forwarding such a request where we can.

Service Providers and Sub-Processors

We rely on external service providers to operate the Service. These providers process information on our behalf and according to our instructions:

Google's privacy policy is available at policies.google.com/privacy, and Apple's at apple.com/legal/privacy.

Disclosure Required by Law

We may disclose information to the extent required by law, court order, or the demand of a competent authority, as well as to protect our rights or the safety of other users.

We do not sell personal information to third parties for advertising purposes.

Transfer of Information Outside Israel

Storage in Israel: files you upload to the Service — including profile photos and certificates — as well as the Service's primary database, are stored on Amazon Web Services servers in the Israel (il-central-1) region.

Processing outside Israel: that said, some of the service providers listed under Service Providers and Sub-Processors process information on servers located outside Israel, including in the United States and the European Union. This applies in particular to the artificial intelligence services that process profile content and screening answers, as described under Automated Processing and Artificial Intelligence; to Firebase services for authentication and push notifications; to Resend, for transactional email; and to Sentry, for error monitoring.

By using the Service you consent to this transfer. We seek to engage providers that maintain accepted safeguards for the protection of information, in accordance with applicable law.

Data Retention and Deletion

We retain your information for as long as your account is active. Specific categories are retained as follows:

Account deletion: you may delete your account at any time directly within the app, from the Settings screen. Deletion is immediate and permanent — it removes your profile details, experience, certificates, connections, saved jobs and applications from our database, together with the files you uploaded (profile photo and certificates) and your identity record with the identity provider. You may also submit a deletion request to the address under Contact Us below.

What is retained after deletion. In the interests of transparency, please note one exception:

• Anti-abuse record (Businesses). Where a Business has received an introductory allowance, we retain after deletion a limited record containing the contact phone number and a one-way fingerprint of the business address, for the sole purpose of preventing the same business from repeatedly claiming the allowance by opening a new account. This record contains no other details and is not used for any other purpose.

Beyond this, we may retain information where required to comply with a legal obligation, to resolve a dispute that has already arisen, or to enforce our terms.

Your Rights

Under the Protection of Privacy Law, 5741-1981, including Amendment 13 thereto, and subject to any other applicable law, you have the right to access the personal information held about you, to correct information that is inaccurate, incomplete or out of date, to delete personal information (subject to exceptions under law), to object to certain uses of the information, and to receive information about the identity of recipients of the information and the purposes of processing.

You may also withdraw your consent to the processing of your information at any time by deleting your account, as described under Data Retention and Deletion. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Important: providing some of the information listed under Information You Provide Directly is a necessary condition for using the Service, and we cannot provide the Service without it. However, providing certain information is entirely optional — including access to device location, receiving push notifications, and completing non-mandatory profile fields. You may decline or disable these at any time without losing access to the Service, even if doing so limits certain features.

To exercise these rights, please contact us at the address under Contact Us below.

Users Outside Israel

The Service is offered in Israel and the United States only, and is not directed at residents of the European Union or the United Kingdom.

Users in the United States may have additional privacy rights under their state law (such as the CCPA/CPRA in California) — including the right to know what personal information we hold about them, to request its deletion, and not to be treated differently for exercising those rights. We do not sell or share personal information, as those terms are defined under US state privacy law. To exercise these rights, contact us at the address under Contact Us below.

Minors

The Service is intended for persons aged 16 and over, and is not directed at anyone under that age. Date of birth is a required field at registration, and registration is refused where the date given indicates an age under 16.

We do not knowingly collect personal information from persons under 16. If we become aware that such information has been collected, we will act to delete it and close the account. If you believe that a person under 16 has provided us with information, please contact us at the address under Contact Us below.

Note that where a user is a minor, employment through the Service remains subject to the youth labour laws applicable to them, and responsibility for compliance with those laws rests with the employing Business.

Information Security

We take reasonable security measures to protect your information against unauthorised access, use or disclosure. Information is transmitted over encrypted connections (HTTPS/TLS), passwords are stored using one-way hashing only, and the session token is held in a secure HttpOnly cookie in the browser and in the secure Keychain within the app. We also operate rate limiting and anomalous-usage detection mechanisms.

Nevertheless, we cannot guarantee absolute security, and we cannot undertake that information will not be exposed as a result of unauthorised intrusion.

Contact Us

For any question regarding this Policy or to exercise your rights, please contact:

Aran Belson – database owner Email: aran@meeba.co

We aim to respond to requests concerning the exercise of rights within 30 days of receipt.

Changes to This Policy

We may update this Policy from time to time. Material changes will be brought to your attention via a notice in the Service or by email. Continued use of the Service after the Policy is updated constitutes acceptance of the updated terms.

For users in Israel, in the event of any inconsistency between this English version and the Hebrew version of this Policy, the Hebrew version shall prevail. For users outside Israel, the English version governs.