מדיניות פרטיות

ManoMix is an Israeli service for listening to DJ Ran Mano sets, available at manomix.com, as iOS / Android apps and as an app for smart TVs (Samsung, LG and Google TV). ManoMix is operated by Ran Moshe (DJ Ran Mano), a registered sole proprietor in Israel (business no. 021661715), 55 Vardia St., Haifa, Israel (“we”). “ManoMix” and “DJ Ran Mano” are trade names of that business, not a separate legal entity. Contact for any matter, including requests under the Israeli Consumer Protection Law and the Privacy Protection Law: user@manomix.com.

This policy explains how we collect, store and use personal data, in compliance with the Israeli Privacy Protection Law 5741-1981 (including Amendment 13, effective August 14, 2025), GDPR (for EU residents), and CCPA (for California residents).

• Account details: name, email, profile picture (from Google/Apple), login method.
• Listening data: which sets you played, when, how long, which you skipped or completed; play/pause/skip events.
• Digital identifiers (Amendment 13): IP address, device IDs (Device ID, push token), app version, OS type.
• Country only: to know which country you listen from, we read the time zone set on your device (e.g. “Europe/Bucharest”) and convert it to a country name; when no time zone is available, the country is derived from the IP address. Only the country name is kept — not the time zone itself, not a city, and never GPS. We do not request location permission.
• Interactions: favorites, likes, shares, playlists you create, login history.
• No sensitive data: we do not collect financial, medical, biometric, sexual, political or religious data.
• The TV app: it has no sign-in and sends no identifier — no name, no email, no device ID. It sends only anonymous counters: that the app was opened or a set was played on a given day, week and month, and for how long, by type of TV. They cannot be linked to a person.

• Service operation (essential): user identification, security, fraud prevention, access control.
• Analytics (optional): understanding which sets are popular, where users drop off, how to improve the app. All data stored only on our servers — no Google Analytics, Mixpanel, or any third party.
• Marketing (optional, from Phase 2): showing relevant ads on Instagram and Facebook (Meta Pixel + Conversions API). Active only with your consent.
• Personalization (optional): set recommendations based on your preferences.

• Contract performance (Art. 6(1)(b) GDPR / §11 Israeli Law) — to operate your account.
• Legitimate interest (Art. 6(1)(f)) — for security and fraud prevention.
• Consent (Art. 6(1)(a) / §1 Israeli Law) — for analytics, marketing, and personalization. Withdrawable any time in the privacy settings page and in the app.

The site uses 4 cookie categories. You can allow or block each category individually via the banner or in privacy preferences.

1. Essential — always on. Required for authentication (Google Firebase), CSRF protection, and storing your cookie choice itself. Without consent the site cannot work.
2. Analytics — optional. Our own cookies measuring listening behavior. No third parties.
3. Marketing — optional. Meta Pixel + Conversions API for Instagram / Facebook ads. Loaded only with consent.
4. Personalization — optional. Stores preferences for recommendations.

Retention: the cookie choice is valid for 12 months, after which the banner returns. If we add a new vendor sooner, the banner refreshes earlier.

We do not sell personal data. We use the following processors:

• Google (USA) — authentication (Firebase Authentication) and Android push delivery (FCM). Subject to Google’s DPA.
• Cloudflare (global) — storage, CDN, security. Primary storage in EEUR (Europe) and USA.
• Apple App Store + Google Play — app stores.
• Expo (USA) — push notification delivery.
• Meta (subject to marketing consent, from Phase 2) — Meta Conversions API for retargeting. Data sent is minimal: hashed email, event type (View / Lead / Purchase).

We will not share data with law enforcement except under a valid court order or binding legal request.

Israel holds an EU adequacy decision, allowing transfers from Israel to Europe. Transfers to the USA (Cloudflare, Google, Expo) are governed by EU Standard Contractual Clauses (SCCs). All processors sign a standard DPA.

• User account: as long as the account is active. Deleted on request.
• Raw listening events: up to 24 months, then auto-deleted.
• Login history: up to 24 months, then auto-deleted.
• Privacy choice logs: retained indefinitely (required by Amendment 13 + GDPR Art. 30) — but after account deletion the personal identifiers are stripped, leaving an anonymous audit trail.

Under Israeli law, GDPR and CCPA you have the following rights:

• Access (§13 / Art. 15) — download all data we hold on you as JSON. Via in-app settings or by emailing user@manomix.com.
• Correction (§14 / Art. 16) — update incorrect details.
• Erasure (Art. 17 / CCPA §1798.105) — full deletion via account settings. Effective immediately.
• Portability (Art. 20) — receive your data in a structured format (JSON).
• Objection (Art. 21) — stop processing for marketing purposes; achieved by withdrawing marketing consent.
• Withdraw consent (Art. 7(3) / Amendment 13 §8C) — as easy as granting it. Via the cookie banner, in-app privacy settings, or web privacy settings.
• Lodge a complaint — with the Israeli Privacy Protection Authority at gov.il, or your local EU regulator if you are an EU citizen.

We are classified as “Medium” security level under the Israeli Privacy (Information Security) Regulations 5777-2017. Controls: TLS 1.3 transit encryption, on-device token encryption (iOS Keychain / Android Keystore), Cloudflare WAF, database access controls, weekly database backups (with a documented restore drill), audit logging. In a breach we will notify the Privacy Authority “without delay” (Amendment 13) and affected users.

The service is for users aged 13 and above. If we discover a user under 13 opened an account we delete it immediately. Parents who notice their child opened an account without their consent are welcome to contact user@manomix.com and we will handle it within one business day.

If we materially update this policy (e.g. add a new vendor), the cookie version number is bumped and the banner returns to ask for fresh consent. Minor changes are published on this page with the updated date.

For any privacy question or request: user@manomix.com.

Database controller and operator: Ran Moshe (DJ Ran Mano), registered sole proprietor no. 021661715, 55 Vardia St., Haifa, Israel. Governing law: Israeli law. Jurisdiction: the courts of Tel Aviv.