MY TEXTA LTD (hereinafter: the "Developer" and/or "Company") respects the privacy of the users (hereinafter: "User" and/or "you") of the messaging applications MyTexta, TextaKids and MyTexta Pro (hereinafter: the "Application"). This Privacy Policy (hereinafter: the "Privacy Policy") explains and details the manner of collection, use, processing, retention and protection of the information arising from your use of the Application and its ancillary services.
This Policy constitutes an integral part of the Application's Terms of Use Agreement. By the very act of installing the Application, registering for it and actively approving the terms (Click-wrap), you grant your express and informed consent to the collection and processing of the information about you in accordance with the provisions of this document. If you do not agree to the terms of this Policy, in whole or in part, you must immediately cease all use of the Application and remove it from your device.
The Developer operates under a principle of "Data Minimization," with the aim of collecting only the essential and minimal information required for the proper technical operation, security and optimization of the Service.
a. Information provided directly by the User:
Registration and account details: For the purpose of creating an account and verifying identity, the User may be required to provide a mobile telephone number, an email address, or a unique digital identifier.
User profile: A username (nickname) and a profile picture, insofar as the User has chosen to upload them on a configurable basis.
Correspondence with support: Information, questions or bug reports that the User voluntarily sends to the Developer's customer service center or technical support.
b. Information collected automatically during use:
Metadata and operational analytics (Metadata): Technical information relating to the times of sending and receiving messages (timestamps), message volume, delivery data (sent/received), and unique conversation identifiers created for the purpose of digital routing. This metadata does not in any way include the content of the messages.
Device and communication data: The type of end device, hardware model, operating system version (Android / iOS), unique device identifiers (such as an advertising identifier or an application identifier), IP address, cellular network data, and system languages.
Usage and system data: History of actions within the Application (excluding conversation content), system crashes (Crash logs), and application performance, for the purpose of detecting hardware and software faults.
c. Message content and media – Zero-Knowledge architecture:
The content of conversations, texts, images, video files and media transmitted in the Application are fully encrypted End-to-End (End-to-End Encryption - E2EE).
The legal and technological meaning of this is that the content of the messages is decrypted solely on the end devices of the Users participating in the conversation.
The Developer has no access, no ability to view, no decryption key, and no technical means to read, listen to or disclose the content of your messages and media.
Messages transmitted in the Service are deleted from the Company's servers immediately upon their successful delivery to the destination device, or upon the expiry of the time period set in the automatic deletion mechanism, or at the time determined by the Developer.
The Developer uses the minimal information collected solely for the following legitimate purposes:
Provision and operation of the Service: Routing messages, managing encrypted connections between devices, and verifying user accounts.
Information security and fraud prevention: Protecting the Application against cyber attacks, misuse, breaches, reverse engineering, or criminal activity and spam.
Improvement and maintenance of the Application: Analysis of system crashes, monitoring of technological performance metrics, and fixing critical bugs.
Compliance with the requirements of applicable law: Compliance with judicial orders and express laws applicable to the Developer (subject to the limitations of the technological architecture, which prevents the delivery of message content).
The Application incorporates automated mechanisms based on artificial intelligence (Safe-Gate AI) for the purpose of detecting, filtering and blocking offensive, unlawful or infringing content (such as in the KIDS versions or in accordance with the account settings).
The AI privacy-protection mechanism: The processing of data for the purpose of content filtering is performed, to the extent technologically possible, locally on the User's end device (On-Device Processing), or alternatively by applying one-way mathematical functions (Hashing) and analyzing anonymous metadata signals, in a manner that does not compromise the privacy of the end-to-end encryption and does not expose the visible content of the conversations to the Developer's employees or to third parties.
Data processed by the Safe-Gate AI component for the purpose of threat detection is not stored on the Company's servers as an identifying personal profile, and is used solely as pointwise and momentary indicators for the purpose of making an automatic blocking or filtering decision.
The Developer categorically undertakes: We do not sell, do not rent, do not trade and do not transfer the personal information or metadata of Users to third parties for marketing, advertising or commercial purposes.
The Developer may transfer or make available minimal information to third parties solely in these exceptional cases:
Authorized service providers (Sub-processors): International infrastructure and server companies (such as AWS, Google Cloud and the like) that host the Application's encrypted technological infrastructure, and this under stringent confidentiality and data processing agreements (DPA).
Judicial orders and law enforcement authorities: In the event of receipt of a competent, express and valid judicial order under law directing the Developer to disclose information. In such a case, the Developer will disclose solely the minimal information actually in its possession (such as account registration details or operational metadata), and will clarify that it has no technical ability to disclose the content of the messages due to the encryption.
Legal protection: For the purpose of protecting the Developer's legal rights, preventing claims, or enforcing the Terms of Use Agreement in the event of a fundamental breach by the User.
Messages and media: As stated, as a rule, messages passing through are deleted from the system servers immediately upon their delivery to the destination. Messages that were not delivered due to a powered-off device or lack of reception will be retained on the servers in an encrypted and secured manner for a limited period of up to 30 days, and thereafter will be automatically deleted from the server.
Account deletion (Right to be Forgotten): The User is entitled at any time to permanently delete their account from the settings menu within the Application. Upon performing the deletion action, the Developer will delete or fully anonymize (delete associated identifiers) all identifying information and metadata associated with the account on its active servers, except for information required to be retained under law or for the purpose of legitimate legal protection.
The Developer implements advanced technological, organizational and physical protective measures accepted in the industry (including stringent encryption protocols, firewalls, and restricted access controls) in order to protect the metadata and registration details of Users against loss, theft, unauthorized access or alteration. However, the User understands that no digital system or server is absolutely 100% immune, and the Developer cannot guarantee full immunity against malicious cyber breaches.
In accordance with the law applicable in the User's place of residence (including the Israeli Protection of Privacy Law and its regulations, or the GDPR regulation insofar as relevant), the User is entitled to request to review the information collected about them, to request to correct information that is inaccurate, or to request the full deletion of the identifying information as detailed in Section 5.2 above. Such requests should be directed in writing to the email address of the official support.
The Developer reserves the exclusive right to update, change or adapt this Privacy Policy from time to time. In the event of a material change affecting your rights or the manner of handling your identifying information, the Developer will present a prominent notice within the Application or will request your renewed active approval of the updated terms. Continued use of the Application after an update of the Policy constitutes full and binding consent to the new terms.
This Privacy Policy, its interpretation and its enforcement shall be governed exclusively by the laws of the State of Israel, without giving effect to its international conflict-of-law rules.
Exclusive local jurisdiction: Any dispute, demand, claim or legal proceeding arising from this Privacy Policy or relating to the Developer's information-processing activities shall be brought for exclusive and conclusive adjudication solely before the competent courts in the city of Ashkelon (Magistrate) and/or the District Court in Beer Sheva, as the case may be and according to subject-matter jurisdiction, to the exclusion of the jurisdiction of any other forum or judicial district.
By using the Application and approving the Terms of Service, you confirm that you have read, understood and agreed to this Privacy Policy in its entirety.