Mazkir — Privacy Policy

Effective date: 17-09-2026 · Last updated: 16-10-2026 · Contact: [email protected]

Mazkir ("the app") is a household reminder app made by Samet Cohen Studio. It keeps track of the things you own — a car, an apartment, a credit card — and of the dates attached to them, such as a vehicle test, an insurance renewal or a licence that expires. This page explains exactly what data the app handles and why.

The app works without an account

You can use Mazkir with no sign-in at all. In that mode everything you enter stays in the app's database on your device, and our servers hold nothing about you. Signing in — with an e-mail code or with Google — is optional; it adds sync between your devices, the option to file documents in your own Google Drive, reminder e-mails and, on the web app, browser notifications.

What we hold when you are signed in

• Your e-mail address — held by our authentication provider (Supabase, EU region, Frankfurt) so we can recognise you and send you a sign-in code.
• The things you enter — the names you give your items, vehicle plates, addresses, card nicknames and the last four digits of a card, dates, amounts, mileage and your own notes. They are stored under row-level security: each row is readable and writable only by the account that created it.
• Attachment metadata — for each document you file, the kind of document, its date and its size. Never the file name, and never the file itself.
• Your Google Drive connection — if you connect Drive, the Google address of that account and an access token, kept encrypted and used only to put files into, and fetch files from, the folder the app created in your own Drive.
• Delivery details for reminders — the secret address of your calendar feed if you created one; your reminder settings (language, time zone, reminder time, quiet hours, and whether e-mails are on); your web push subscription if you enabled browser notifications; and a record of which reminders were sent and when, so the same reminder is never sent twice.

No card numbers, no national ID numbers and no bank credentials are stored. Mazkir never connects to a bank and asks for no financial permission of any kind; a credit card is tracked by a nickname and its last four digits only.

Your documents stay yours

A document you attach — a test certificate, an insurance policy, a receipt — is kept either on your device or, if you connect Google Drive, in your own Drive account. Mazkir's servers never receive document contents or filenames. The app asks Google only for the drive.file scope, which lets it see and manage the files it created itself in your Drive and nothing else in your Drive.

Mazkir's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Drive at any time in Settings; the files already there stay in your Drive, under your control.

Reminders

• E-mail — reminder e-mails are sent through Resend to the address of your own account, and to no one else. They are on by default for signed-in users and are switched off in Settings → Reminders → Reminders by e-mail. Resend also sends your sign-in code.
• Web push — on the web app, if you turn on Settings → Reminders → Notifications in this browser and allow notifications, your browser's subscription endpoint and keys are stored until you turn the switch off, sign out in that browser, the browser unsubscribes, or you delete your account.
• Calendar link — if you create a calendar (ICS) feed, its address contains a secret. Anyone holding that address can read the feed, so treat it as private; resetting it in Settings revokes the old address immediately.
• On-device reminders — notifications the app schedules on your phone need no account and never leave the device.

Usage statistics

Mazkir sends anonymous usage statistics to PostHog Cloud (EU region) — which screens were opened, which actions were used, on which screen a tap found nothing to press, and the app's language, tied to a random device id, never to your name or e-mail. They are on by default, are disclosed when you first open the app, and one switch turns them off: Settings → About → Share anonymous usage data. They never contain item names, vehicle plates, addresses, filenames or anything from a document.

Crash reports

When the app hits an error, technical error data — the error, where in the code it happened, the app version and the device model and system version — is sent to Sentry (EU region) so the bug can be fixed. Before a report leaves the device the app removes any user, request and breadcrumb data from it: it carries no e-mail address, no account id and no item content.

What we don't do

• No ads, and no selling or renting of data to anyone.
• No reading of your contacts, photos, messages or files; the app opens only the file you pick yourself.
• No bank connection, no card numbers, no national ID numbers.
• No document contents or filenames on our servers, ever.

Service providers

Data is processed by Supabase (accounts and the synced rows, EU region — Frankfurt), Resend (sign-in codes and reminder e-mails), Google Drive (only your own account, only the files the app created there), your browser's push service (web push notifications, only if you turned them on), PostHog Cloud EU (anonymous usage statistics) and Sentry EU (crash reports). Each receives only what is needed for its function, and all of it travels encrypted.

Retention

The rows you created are kept until you delete them or delete your account. A record of sent reminders is kept so a reminder is not repeated; push subscriptions are kept until you unsubscribe or sign out in that browser; a calendar feed's secret is kept until you reset it or delete your account. Everything on your device is kept until you remove it or uninstall the app.

Deleting your account

In the app: Settings → Account → Delete account — the same path exists in the web app at mazkir.pages.dev. Your account and every row it owns are deleted immediately, the app's data on the device is wiped, and the documents in your own Google Drive stay yours. Details, and what to do if you no longer have the app, are on the account deletion page.

Your rights, and who to contact

Mazkir is operated by Samet Cohen Studio. You can ask what we hold about you, ask for a correction, or ask us to delete it, at [email protected] — the same address is our contact for any privacy question and the address to which a data breach would be reported, and from which affected users would be notified, as required by Israel's Privacy Protection Law.

Children

The app is not directed at children under 13.

Changes

If this policy changes materially, the effective date above will be updated and the app will point to this page.