Privacy Policy — Siduron

Last updated: July 29, 2026 · Applies to the Siduron apps for Android and iOS and to siduron.com · See also our Terms of Use

Siduron is a digital siddur (Jewish prayer book) with daily halachic times, shared Tehilim readings, and community services. We respect your privacy: the app is usable without an account, we never sell personal information, and we collect only what the service needs.

What we collect

Using Siduron without an account

• Reading the siddur, daily times, and Humash works without an account and without sending identifying data to our servers.
• Joining a shared Tehilim reading as a guest (including quick joins through the iOS App Clip) creates a random, anonymous guest identifier stored on your device, used only to track the chapters you take. A display name is optional and, if given, is shown to the reading's creator only.

If you create an account

• Email address, name, and avatar URL — via email registration, Sign in with Google, or Sign in with Apple. Passwords (email accounts) are stored as one-way hashes.
• Content you create: Tehilim readings and dedications, synagogues, minyanim, mikvaot, events, prayer requests, ads, and messages — visible according to the visibility you choose (public / link / invite).
• Contact details you opt to share through reveal requests — released only after your explicit approval.

Technical data

• Notifications: if you enable them, a device token (Firebase Cloud Messaging) is stored to deliver them. On iOS notifications are off by default; the token is created only after you consent and is removed when you sign out.
• Location: with your permission, device location is used for daily times, weather (Android), the Jerusalem compass, the community map, and nearby places. "Near me" searches send coordinates to our server solely to answer the query.
• Camera and sensors: the "Jerusalem compass" screen's augmented-reality mode uses the camera, with your permission, to overlay the direction on your surroundings. The image is processed on-device only — it is never recorded, stored, or sent to our servers. Orientation and motion sensors are used on-device to compute the heading.
• Sponsored ads: ad impressions and taps are counted for statistics and advertiser billing; this counting is not used to build a personal profile of you.
• Usage data: the Android app uses Firebase Analytics (device identifiers and usage events) to improve the app. The current iOS build ships no analytics.
• Server logs: IP addresses and request metadata are kept briefly for security, abuse prevention, and operations.
• Cookies (website): HttpOnly session cookies for sign-in only. No advertising cookies.

Payments

Purchases and subscriptions are processed by Google Play, the Apple App Store, or the PayPlus payment processor. Card details never reach or persist on our servers.

Third-party services

We rely on these services, each governed by its own privacy policy: Google Firebase (notifications, remote configuration, and analytics on Android), Google Sign-In, Sign in with Apple, Google Maps (Android), a weather provider (Android), the Sefaria content library, and PayPlus (payments).

How information is used

• Operating the service: syncing shared readings, showing community content, delivering the notifications you asked for.
• Security: detecting break-in attempts, rate limiting, abuse prevention.
• We do not sell or rent personal information, and we do not share it with advertisers.

Retention and deletion

• Public content remains until you remove it; inactive Tehilim readings are automatically archived.
• You may delete your account directly in the app (Settings → Delete account, with a typed confirmation). Deletion removes your account details and detaches your name from shared content.
• You may also request access, correction, or full deletion of your account and data by contacting us (below) — we respond within 30 days.
• Uninstalling the app deletes the local guest identifier; accounts are deleted in-app or on request.

Security

All traffic is encrypted (HTTPS/TLS). Sign-in tokens are stored in the platform's secure storage (Keychain on iOS, Keystore on Android). Database access is restricted and audited.

Children

The service is not directed at children under 13, and we do not knowingly collect their information.

Changes

We will update this page for any material change; the date at the top reflects the latest revision.

Contact

Questions, access or deletion requests: siduron10@gmail.com