Mazkir — Privacy Policy

Effective date: 17-09-2026 · Last updated: 17-09-2026 · Contact: [email protected]

Pre-release note — 18-09-2026

Mazkir has not been released to the public yet. This page describes version 1.0 as it will ship. Until then, five things described below are not in the app yet: the in-app “Delete account” button, reminder e-mails, web push notifications, the analytics switch and PostHog itself (no analytics is collected at all today), and crash reporting through Sentry (no error data is sent today).

What is live today: sign-in (the sign-in code e-mail is sent through Resend), sync, the Google Drive connection and the calendar (ICS) link.

To delete your data today, write to [email protected] and it is done within 30 days. This note is removed when version 1.0 is released.

Mazkir ("the app") is a household reminder app made by Samet Cohen Studio. It keeps track of the things you own — a car, an apartment, a credit card — and of the dates attached to them, such as a vehicle test, an insurance renewal or a licence that expires. This page explains exactly what data the app handles and why.

The app works without an account

You can use Mazkir with no sign-in at all. In that mode everything you enter stays in the app's database on your device, and our servers hold nothing about you. Signing in — with an e-mail code or with Google — is optional; it adds sync between your devices, the option to file documents in your own Google Drive, and — from version 1.0 — reminder e-mails.

What we hold when you are signed in

• Your e-mail address — held by our authentication provider (Supabase, EU region, Frankfurt) so we can recognise you and send you a sign-in code.
• The things you enter — the names you give your items, vehicle plates, addresses, card nicknames and the last four digits of a card, dates, amounts, mileage and your own notes. They are stored under row-level security: each row is readable and writable only by the account that created it.
• Attachment metadata — for each document you file, the kind of document, its date and its size. Never the file name, and never the file itself.
• Your Google Drive connection — if you connect Drive, the Google address of that account and an access token, kept encrypted and used only to put files into, and fetch files from, the folder the app created in your own Drive.
• Delivery details for reminders — the secret address of your calendar feed if you created one and, from version 1.0, your web push subscription if you enabled browser notifications plus a record of which reminders were sent and when, so the same reminder is never sent twice.

No card numbers, no national ID numbers and no bank credentials are stored. Mazkir never connects to a bank and asks for no financial permission of any kind; a credit card is tracked by a nickname and its last four digits only.

Your documents stay yours

A document you attach — a test certificate, an insurance policy, a receipt — is kept either on your device or, if you connect Google Drive, in your own Drive account. Mazkir's servers never receive document contents or filenames. The app asks Google only for the drive.file scope, which lets it see and manage the files it created itself in your Drive and nothing else in your Drive.

Mazkir's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Drive at any time in Settings; the files already there stay in your Drive, under your control.

Reminders

• E-mail — from version 1.0, reminder e-mails will be sent through Resend to the address of your own account, and to no one else; they will be on by default for signed-in users and can be switched off in Settings → Reminders. Today Resend sends one kind of e-mail only: your sign-in code.
• Web push — in version 1.0, on the web app, if you allow notifications, your browser's subscription endpoint will be stored until you unsubscribe or turn the switch off. Web push is not in the app today.
• Calendar link — if you create a calendar (ICS) feed, its address contains a secret. Anyone holding that address can read the feed, so treat it as private; resetting it in Settings revokes the old address immediately.
• On-device reminders — notifications the app schedules on your phone need no account and never leave the device.

Usage statistics

From version 1.0, Mazkir will send anonymous usage statistics to PostHog Cloud (EU region) — which screens were opened and which actions were used, tied to a random device id, never to your name or e-mail. They will be on by default, will be disclosed when you first open the app, and one switch in Settings → Privacy will turn them off. They will never contain item names, vehicle plates, addresses, filenames or anything from a document. Today no usage statistics are collected at all.

Crash reports

From version 1.0, technical error data will be sent to Sentry so bugs can be fixed. Crash reports will carry no personal data by default: no e-mail address, no item content. Crash reporting is not in the app today, and no error data leaves your device.

What we don't do

• No ads, and no selling or renting of data to anyone.
• No reading of your contacts, photos, messages or files; the app opens only the file you pick yourself.
• No bank connection, no card numbers, no national ID numbers.
• No document contents or filenames on our servers, ever.

Service providers

Data is processed by Supabase (accounts and the synced rows, EU region — Frankfurt), Resend (sign-in code e-mails today; reminder e-mails from version 1.0), Google Drive (only your own account, only the files the app created there), PostHog Cloud EU (anonymous usage statistics — from version 1.0) and Sentry (crash reports — from version 1.0). Each receives only what is needed for its function, and all of it travels encrypted.

Retention

The rows you created are kept until you delete them or delete your account. The record of sent reminders is kept so a reminder is not repeated; push subscriptions, from version 1.0, are kept until you unsubscribe; a calendar feed's secret is kept until you reset it or delete your account. Everything on your device is kept until you remove it or uninstall the app.

Deleting your account

In the app: Settings → Account → Delete account — the same path exists in the web app at mazkir.pages.dev. Your account and every row it owns are deleted immediately, the app's data on the device is wiped, and the documents in your own Google Drive stay yours. Details, and what to do if you no longer have the app, are on the account deletion page.

Your rights, and who to contact

Mazkir is operated by Samet Cohen Studio. You can ask what we hold about you, ask for a correction, or ask us to delete it, at [email protected] — the same address is our contact for any privacy question and the address to which a data breach would be reported, and from which affected users would be notified, as required by Israel's Privacy Protection Law.

Children

The app is not directed at children under 13.

Changes

If this policy changes materially, the effective date above will be updated and the app will point to this page.