PREZLO Privacy Policy
Version 2026-10-30
Effective date: 30 October 2026
עברית
1. Responsibility and scope
PREZLO TECHNOLOGIES LTD, Israeli company no. 517356127, Israel, is responsible for deciding how personal information described here is used. This Policy covers the PREZLO app, getprezlo.com, our legal and support pages, and communications with us. Privacy requests: legal@getprezlo.com. General support: support@getprezlo.com. Service address: 21 Homa U'Migdal Street, Holon, Israel.
The app is intended for people aged 13 or older in Israel and the United States, subject to the Terms' rules for users under 18. Section 9 explains how we handle information about minors. No conventional PREZLO account, email login or password is required, but persistent identifiers and activity associated with them are not necessarily anonymous. This Policy is a notice of our practices, not blanket consent to tracking.
2. Information and sources
We receive information from your device, your use of the Service, app stores, subscription and measurement providers, referral and Friend Gift links and messages you send us.
| Category | Information processed | Main purposes |
|---|---|---|
| Device and installation | Persistent device/installation identifiers, app version, operating system, device characteristics, language, timestamps and network metadata, including IP addresses where collected | Operation, compatibility, preferences, support and security |
| Subscriptions | RevenueCat/app-user identifiers, product, entitlement, store transaction references, purchase, trial, renewal, cancellation and expiry events, amounts and currency where reported | Paid access, restoration, billing support and campaign measurement |
| Notifications | Push token, device association, language and notification preferences, related delivery/open events and counters | Sending, controlling and measuring notifications |
| Use of the app | Screen visits, app opens, onboarding and payment-screen activity, feature interactions, submitted votes and comments linked to the device identifier, sharing and link events | Service operation, moderation, product analytics and improvement |
| Advertising and attribution | Meta app-scoped identifier, device or advertising identifiers where available, technical signals, campaign/link identifiers, installation and subscription events | Measuring campaign effectiveness and attributing installations and subscriptions |
| Diagnostics | Crash/error reports, logs, request metadata and action context, which can include a device/subscription identifier or push token | Diagnosing failures, security and preventing abuse |
| Terms acceptance records | Device identifier, the document accepted, acceptance time and IP address; where a parent or guardian contacts us, their contact details and the details of their request | Recording the agreement and handling requests and disputes |
| Communications | Your email address, message, attachments and response history | Support, privacy requests and legal matters |
| Friend Gift | For the sender: the first name entered, RevenueCat app-user identifier and device identifier, gift status and dates, and the app the gift was shared through (the iOS share activity type, for example WhatsApp or Messages). For the friend, once a gift is claimed: app-user identifier and device identifier. When the gift web page's claim button is tapped: a record that the gift was opened and a salted hash of the request's IP address. Subscription events from RevenueCat and Apple showing whether the gift was redeemed and whether a first payment or refund occurred | Running the programme, confirming a gift when the app first opens, enforcing one gift per person and per device, granting or withdrawing the sender's free month, and preventing misuse |
| Partner offer | Whether the partner-offer screen was opened and its button tapped, and where in the app it was opened from; limited referral-commission information received from the brokerage firm | Measuring the offer, and calculating and verifying our commission |
| Historical information, where retained in records or backups | Previous votes linked to a device identifier; earlier usernames/profile information, simulated positions, predictions, league participation and related records | Handling historical matters, integrity, security, requests and applicable retention obligations |
The table describes information across the Service. Because we do not currently verify age, the same processing applies to all users. Information that a parent or guardian gives us about a minor is not used for advertising.
Apple or Google handles payment credentials. PREZLO does not receive your complete payment-card number through the store purchase flow. An IP address can be used by an analytics provider to infer an approximate location; this is different from GPS access.
Please do not send passwords, full card numbers, brokerage credentials or identity documents unless a specific, justified request and appropriate secure channel are provided. Comments submitted to a public feature can be visible to other users. Sharing through another app sends the content you choose to that destination and its recipients.
Friend Gift. When a friend taps “Claim my gift” on the gift web page, we record that the gift was opened and keep a salted hash of the request's IP address. We use that hash only to recognise the same network when the app first opens within 20 minutes. The app then asks for iOS permission to paste the copied gift link from the clipboard, to confirm the gift; iOS shows its own paste prompt, and you can decline. The sender's first name is shown to the friend who opens the gift. Because a free month depends on a friend's first payment, an earned month can show the sender that a friend who claimed the gift has paid. We may send the sender a push notification when a free month is earned. Friend Gift events sent to our analytics provider are linked to your app-user identifier and include the gift identifier, how the gift was claimed, the sharing channel and the environment, but not the sender's first name. Trials started with a Friend Gift are not reported to Meta. The programme terms are in the Friend Gift Terms. The Friend Gift programme is for users aged 18 and over only, and its push notification is not intended for anyone under 18.
3. Necessary information and choices
You are not generally legally obliged to provide information to PREZLO. Some technical, access and transaction information is needed to provide the app, recognise a subscription, protect the Service or respond to you. Without it, the corresponding function may not work. Sending a support message or submitting content is voluntary.
Device settings control notification permission. In-app preferences control supported notification categories when you can access those settings. Refusing notifications does not itself cancel paid access. A device advertising setting may limit certain identifiers but does not necessarily stop every analytics or server-side event.
The app does not currently show a tracking-permission prompt. On iOS, without that permission the device advertising identifier is not available to us or to Meta; on Android, the Meta SDK in our app is configured not to collect the advertising identifier. Where applicable law requires consent for particular processing, we will obtain it before that processing, and honour refusal and withdrawal in server-side disclosures as well. Accepting the Terms is not consent to tracking. Contact legal@getprezlo.com to exercise privacy choices; email does not replace a particular opt-out control or preference signal required by law.
We do not use these data to tailor securities recommendations or make automated decisions about credit, employment, insurance or similar eligibility.
4. Providers and recipients
The following providers support the Service or retain information from earlier activity. Their role and information depend on the function; a supplier is not necessarily a processor acting only on our instructions for all its activities. Mixpanel, PostHog and Meta receive events for all users, as described in sections 3 and 5. Requests about information concerning minors are addressed in section 9.
| Recipient | Function and principal information involved |
|---|---|
| Apple / Google Play | App distribution, purchasing and store-account subscription management, including subscription offer codes and promotional offers in the Friend Gift programme; store transaction and entitlement information |
| RevenueCat | Subscription administration, identifiers and purchase events, including Friend Gift redemption, first-payment and refund events; trial and purchase events are also sent to Meta through a server-to-server integration, including for iOS users who have not been asked for tracking permission |
| Expo / Google Firebase Cloud Messaging | App delivery/update infrastructure and push delivery; tokens, technical metadata and relevant message payloads |
| Mixpanel | Product analytics associated with device/subscription identifiers, usage and technical/location signals |
| PostHog | Product analytics associated with identifiers and usage; our project is configured for European hosting |
| Meta | App events and advertising/conversion measurement through its SDK and the RevenueCat integration |
| Detour by Software Mansion | Share-link redirection: when someone opens a PREZLO share link, Detour's servers receive standard request information such as IP address and browser details. App versions before 1.2.5 also included Detour's install-attribution component (see section 5); later versions do not |
| Sentry | Client/server error diagnostics and related identifiers or request context |
| Railway | Backend and database hosting, including the records maintained by the Service |
| Cloudflare | Website delivery, email routing and database-backup storage; relevant traffic metadata, routed messages and backup contents |
| GitHub Pages | Legal-page hosting and request metadata, including visitor IP addresses |
| Google/Gmail | Receiving and retaining support, privacy and business correspondence |
| Resend | Sending our email replies from support@getprezlo.com and legal@getprezlo.com; recipient address, message content and delivery metadata |
| Telegram | Internal operational alerts, and handling of comment reports where that workflow is used: the author's name, the first characters of the reported text and the reporter's device identifier |
Discord is used for internal market-operation messages. It is not a public support channel. Massive, formerly Polygon.io, supplies market data; our app-user identifiers and contact information are not sent to it as part of the documented market-data integration.
We may also disclose relevant information to advisers bound by appropriate duties, to a buyer or successor in a corporate transaction, to competent authorities where legally justified, or at your direction. Such disclosure is limited to its lawful purpose.
5. Advertising, measurement and websites
Meta receives app, trial and purchase events through its SDK in the app and through a server-to-server integration, for all users. Its app-scoped identifier is not your name, but may support association with other information held by Meta. Privacy choices that apply to this transfer are also applied to the server integration.
Earlier attribution may associate a link with an installation or subscription. App versions before 1.2.5 included Detour's install-attribution component: on first launch it could read the clipboard once on iOS and send device characteristics (such as device model, operating system, screen, language and time zone) and IP address to match an installation with an earlier link click. From version 1.2.5 the app no longer includes this component. We do not read the clipboard for attribution, except that the Friend Gift flow described in section 2 reads a copied gift link, with your iOS paste permission, to confirm a gift. We do not derive a device fingerprint for attribution. Earlier attribution is not itself proof of your identity or entitlement to a benefit.
Partner offers. If you tap the partner offer in the app, you leave the app for the brokerage firm's website, currently Colmex Pro Ltd, which collects and processes the information you give it under its own privacy policy. The link carries only our partner reference. We do not send the brokerage firm your name, contact details, device identifiers or app activity. Our analytics provider records, linked to your app-user identifier, that the offer screen was opened and that its button was tapped, and from where in the app, to measure the offer. To calculate and verify our commission, the firm may provide us with limited information about accounts opened through our link, such as an account reference, relevant dates and the deposit and activity information needed to calculate the commission. We use it only for that purpose and for our accounting and legal obligations.
We do not trade personal information for cash as a separate data product. Certain disclosures for advertising or attribution may nevertheless be “sale”, “sharing” or “targeted advertising” under a law's definitions. Where that law applies, the corresponding opt-out rights apply. We do not ask users for their age. App usage, trial and purchase events are sent to Meta and to our analytics providers for measurement and improvement for all users, including users aged 13–17.
The getprezlo.com redirect site uses aggregate click measurements rather than a PREZLO advertising pixel. Friend Gift pages on getprezlo.com record that a gift was opened and keep a salted IP hash, as described in section 2. Hosting and security providers still process request metadata. Other linked sites may collect their own data. We do not currently implement a response to browser Do Not Track signals; this is distinct from legally recognised opt-out preference signals, which we will honour where required by applicable law. Contact legal@getprezlo.com for privacy requests.
We do not enable session replay. Any introduction of recording or materially different collection requires updated disclosures and permissions where required.
6. International processing and protection
PREZLO operates from Israel. Providers may process or access information in Israel, the United States, Europe and other locations where they operate. A European project location does not mean all related support and processing stays in Europe.
We are responsible for ensuring that our transfers meet applicable requirements and for selecting appropriate contractual and operational protections. This Policy does not itself establish those protections or treat your use as a blanket transfer waiver.
We use technical and organisational safeguards appropriate to our activities, but no service is completely secure. We do not promise absolute security or conceal a known material incident behind this qualification. Any required incident communication will be handled under applicable law.
7. Retention
Retention depends on purpose, record type, legal requirements and the need to address transactions, security or disputes. We do not promise immediate deletion on uninstall or one universal retention period.
We keep the main record types for the following periods:
| Records | Retention |
|---|---|
| Records of accepting the Terms and acknowledging risk: device identifier, documents and versions shown, screen, language, platform, app version, time and IP address | Seven years after the last activity on the device |
| Subscription and transaction records | Seven years after the subscription ends |
| Device and installation identifiers, votes and in-app preferences | Not deleted automatically; deleted on request, subject to the records listed above |
| Push tokens | Removed when the push service reports them invalid |
| Support, privacy and legal correspondence | Three years after the last message; seven years where it concerns a claim, a refund dispute or a privacy request |
| Server logs | Up to 90 days, under our hosting provider's settings |
| Error reports | Up to 90 days, under our error-monitoring provider's settings |
| Product analytics held by Mixpanel and PostHog | The period set by the provider's plan, currently between one and five years; we shorten it where the provider allows |
| Referral-commission information received from a brokerage firm | Seven years after the commission is settled |
| Friend Gift records: sender first name, identifiers, gift status and dates | Not deleted automatically; deleted on request, subject to the records listed above. A gift cancelled before it is shared is deleted at once |
| Salted IP hash kept when a gift web page is opened | Erased when the gift is claimed; otherwise removed after the 20-minute matching window, the next time the Friend Gift service runs |
| Backups | Rotating; the newest 30 copies |
A period may be extended where the law requires it, or while a claim, dispute or request concerning the record is pending. Backups rotate by number of copies rather than days, so a copy can remain longer than 30 days if backup creation stops.
Our retention decisions must be limited to justified purposes. Where a request is granted, we will remove or restrict the applicable active records and address relevant provider copies. Information that must lawfully remain will be restricted to that purpose. Residual backups will not be used to restore deleted information to ordinary service use without reapplying the relevant deletion/restriction.
8. Requests and regional rights
Email legal@getprezlo.com and describe the request. We will ask only for information reasonably needed to locate records and verify your authority. Since a PREZLO login is not required, your email address alone may not identify the app records. Do not publish your identifiers or assume possession of an identifier proves ownership.
Depending on applicable law and its scope, rights may include access, correction, deletion, a copy of information, withdrawal of consent, objection or restriction, and opting out of sale, sharing or targeted advertising. We will respond within applicable deadlines, explain any permitted extension or refusal, and provide any required appeal route. We will not unlawfully discriminate because you exercise a right.
Israel: You may request access to personal information about you and, where the legal conditions apply, correction or deletion of information that is not correct, complete, clear or current. This is not a promise of an unconditional right to erase every record.
United States: State-law rights depend on the law's applicability. Where applicable, an authorised agent may submit a request subject to proportionate verification; you may appeal a denial by replying to legal@getprezlo.com with “Privacy appeal”. We will provide the applicable regulator/contact route with the appeal response. We do not determine eligibility solely from the language you use.
Information concerning advertising opt-outs, sources, recipients and our response to browser signals appears above. We will assess any additional California or other state disclosure/request right applicable to your circumstances rather than reject it because PREZLO is based abroad.
You may contact a competent privacy regulator, including Israel's Privacy Protection Authority, or a state attorney general, without first contacting us. See the privacy request guide for practical instructions.
9. Deletion, billing and children
Uninstalling the app does not automatically erase server records or cancel a subscription. A privacy request is not automatically a store cancellation. If you want both, say so and use the cancellation guide; we will help route the requests.
The Service is not offered to children under 13. We do not currently run an age check, and a store rating is not age verification. If we learn that information was collected from a child under 13, we stop impermissible use and address deletion with our providers, except for limited retention permitted by law.
Users aged 13–17 may use the Service under the Terms' rules for minors. Because we do not currently verify age, the processing described in this Policy, including analytics and advertising measurement subject to required permissions, may apply to them as it does to other users.
A minor, parent or guardian may ask us to stop optional processing of a minor's information, or to delete or restrict it. We will handle the request, including with relevant providers and recipients, within applicable deadlines. Backups will not return that information to ordinary use without reapplying the restriction.
Contact legal@getprezlo.com for these requests. We verify authority proportionately and respect the minor’s independent statutory rights. A government ID is not required by default.
10. Changes and contact
We will show the version and effective date of this Policy. Material changes will be communicated prominently before taking effect, with renewed permission where required. We will not retroactively expand use of previously collected information without a lawful basis.
Privacy: legal@getprezlo.com. Support: support@getprezlo.com. PREZLO TECHNOLOGIES LTD, company no. 517356127, Israel. Service address: 21 Homa U'Migdal Street, Holon, Israel.