Introduction
At Heartman Books ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our interactive digital reading platform, in accordance with the Israeli Privacy Protection Law, 5741-1981 and Amendment 13 (2024).
Legal Basis for Processing
We collect and process your information based on the following legal grounds:
- Consent: When you register for our service and agree to this policy
- Contract Performance: To provide the service you requested
- Legitimate Interest: To improve our service and ensure platform security
- Legal Obligation: When required by law
Information We Collect
Personal Information
- Name and email address when you create an account
- Profile information you choose to provide
- Communication preferences
- Age or age range (for content appropriateness)
Usage Information
- Reading progress and completion data
- Interactive activity responses
- Time spent on stories and activities
- Device and browser information
How We Use Your Information
- Provide and maintain our reading platform
- Track reading progress and personalize learning experiences
- Communicate with you about your account and our services
- Improve our platform and develop new features
- Ensure the safety and security of our platform
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations
- To protect our rights and safety
- With trusted service providers who assist in operating our platform
Third-Party Service Providers:
- Clerk: Authentication services (United States)
- Vercel: Hosting and analytics (United States)
- Azure: File storage and cloud services (United States/Europe)
International Data Transfers
Some of our service providers are located outside of Israel. Your information may be transferred to and processed in the following countries:
- United States: Authentication services (Clerk), analytics and hosting (Vercel)
- Europe: Cloud services (Azure)
We ensure these providers meet adequate data protection standards, including appropriate data processing agreements.
Data Retention
We retain your information for the following periods:
- Account information: As long as your account is active, and up to 3 years after deletion
- Reading progress data: As long as your account is active
- Analytics data: Up to 24 months in anonymized form
- Security logs: Up to 12 months
Cookies and Online Tracking
We use cookies and similar technologies to enhance your experience on our platform. You can manage your cookie preferences at any time.
Essential Cookies
These cookies are necessary for the platform to function properly. They enable core features like user authentication and session management.
Analytics Cookies
We use Vercel Analytics to understand how visitors interact with our platform. This helps us improve our services and content. Analytics data is anonymized and does not identify individual users.
Children's Privacy
Our platform is designed for educational use by children. We take special care to protect children's privacy:
- We only collect information necessary for educational purposes
- Children under 13 require parental or guardian consent
- We do not display targeted advertising to children
- Parents can request to review, correct, or delete their children's information
Data Security
We implement appropriate security measures in accordance with the Privacy Protection Regulations (Data Security), 5777-2017:
- Encryption of data in transit and at rest
- Access controls and permissions management
- Security event monitoring and logging
- Regular backups
- Employee training on data security
Your Rights
Under the Israeli Privacy Protection Law, you have the following rights:
- Right of Access: Receive a copy of the information we hold about you
- Right to Rectification: Correct inaccurate or outdated information
- Right to Erasure: Request deletion of your information (subject to legal obligations)
- Right to Restrict Processing: Limit how we use your information
- Right to Object: Object to processing for direct marketing purposes
- Right to Data Portability: Receive your data in a structured format
How to Exercise Your Rights:
You can contact us using the privacy request form or by email. We will respond to your request within 30 days.
Marketing Communications
We only send marketing communications with your explicit consent. Every message includes an option to unsubscribe immediately. You can also contact us at any time to request removal from our mailing list.
Changes to This Policy
We may update this policy from time to time. Material changes will be published on the website and you will receive an email notification. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact Us
For questions, requests, or complaints regarding privacy, please contact our Data Protection Officer:
Data Protection Officer - Heartman Books
Email: heartman.academy@gmail.com
You may also file a complaint with the Israeli Privacy Protection Authority:
Privacy Protection Authority