Welcome to the Privacy Policy of 'מה נשמע' (What's Up). This policy explains how we collect, use, and protect your information when you use our platform.

1.1. YouTube API Services. Our platform uses YouTube API Services to enable you to search for and access information about songs from YouTube. By using our platform, you also agree to the YouTube Terms of Service.

1.2. Google Privacy Policy. Our use of YouTube services is also subject to the Google Privacy Policy. We recommend you read this policy to understand how Google handles your information.

2.1. Information We Collect. We collect the following types of information:

• Search queries - keywords you enter in the platform
• Song information - songs you add or tag
• Tags and votes - tags you create and votes you cast
• User preferences - display and language preferences
• Technical information - a one-way hash of your IP address (not the address itself), browser type, and operating system, for security and abuse prevention only
• Guest identifier - a cookie with a random ID, valid for 30 days, for users who haven't signed in, to allow basic use of the platform
• Account data - if you signed in: your subscription tier (free / lite / pro) and AI feature quota usage

2.2. Information We Don't Collect. We do not collect:

• Personal name or identity details (except if you choose to log in via Google OAuth)
• Credit card or financial information — payments are processed securely via authorized third-party providers (Morning/Grow). Financial information is never passed through or stored on the platform's servers.
• Medical or other sensitive information

2.3. YouTube API Data. When you use YouTube-related functions (song search, displaying song information), we query the YouTube API. This information is used solely to display relevant results on the platform and is not stored or transferred to third parties.

3.1. Purposes of Use. We use collected information for the following purposes:

• To provide and improve platform services
• To display relevant search results
• To enable community tagging and voting on tags
• To maintain platform security and prevent misuse
• To improve user experience and perform statistical analysis

3.2. Information Processing. Information is processed automatically by platform systems and is not exposed to third parties, except in cases detailed in this policy.

4.1. No Sharing with Third Parties. We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes.

4.2. Third-Party Services. We may use the following services:

• YouTube API Services - YouTube API Services - for searching and displaying song information
• Google OAuth - Google OAuth - for user authentication (optional)
• Google Sheets API - Google Sheets API - for storing song and tag data
• Supabase - Supabase - for storing account data, subscription tier, and quota usage logs

4.3. Legal Situations. We may be required to disclose information in the following cases:

• When required by law or court order
• To protect our rights and safety or that of other users
• In case of merger, acquisition, or asset sale

5.1. Use of localStorage. The platform uses localStorage (local browser storage) to save:

• User preferences (language, display mode)
• Terms of use acceptance status
• List of songs added to queue
• Tutorial and onboarding status

5.2. Cookies. We use only essential cookies: a guest identifier cookie (30 days) and a session cookie if you choose to sign in. These cookies are not used for marketing tracking. Third-party services (such as Google) may use their own cookies according to their privacy policies.

5.3. Managing Local Storage. You can delete localStorage at any time through your browser settings. Deleting local storage will reset your preferences.

6.1. Security Measures. We take reasonable measures to protect your information, including:

• Traffic encryption using HTTPS
• Secure storage of song and tag data in Google Sheets, and account data in Supabase, with limited permissions
• Restricted access to sensitive information

6.2. Security Limitations. Despite our efforts, no method of transmission or storage over the internet is 100% secure. We cannot guarantee absolute security of information.

7.1. Right to Access. You are entitled to request access to information we hold about you.

7.2. Right to Deletion. You can request deletion of your information. Note that deleting information may limit your ability to use the platform.

7.3. Right to Correction. You can request correction of incorrect or inaccurate information.

7.4. Exercising Rights. To exercise your rights, please contact us at: info@manishma.app

The platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under this age. If you discover that a child under 13 has provided us with personal information, please contact us and we will delete the information as soon as possible.

We reserve the right to update this privacy policy from time to time. Material changes will be posted on the platform with the update date. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions or concerns about our privacy policy, please contact us:

• Email: info@manishma.app
• For legal matters: legal@manishma.app