What we collect, and what we don’t.

Your plan answers stay on your device

When you answer the plan-builder questions, your answers are stored in your own browser (local storage) to personalise your plan. They are not sent to us, except when you choose a feature that needs them: deadline reminders, plan-builder emails, adding deadlines to your calendar and, if you are signed in, a private calendar link. Each sends only what it needs and is described below. Clear your browser data and the answers on your device are gone. If you sign in with Google to save your plan across devices, that is described below too. How adding deadlines to your calendar works.

Deadline reminders, only if you ask

If you turn on deadline reminders, and only then, you give us your email and we store a snapshot of your plan on our server so we can work out when each of your windows closes and email you before it does. That snapshot holds only what the reminder needs: your aliyah date and the situation fields that decide which deadlines apply. Every reminder email carries a one-tap unsubscribe that deletes your email and that snapshot on the spot. We never sell or share it, and if you do not turn reminders on, none of this happens and your plan stays on your device.

Adding deadlines to your calendar

When you press Add to calendar, your browser sends the deadlines on screen (their titles, dates and notes) to our server, which turns them into a calendar file and sends it straight back. We do not store them, log them or link them to you: they exist only for the moment it takes to build the file.

If you are signed in, you can instead subscribe your calendar to a private link, created only when you press Keep my calendar in sync. The link is a long random address that shows your current plan deadlines (their titles, dates and notes) and nothing else: no name and no email address. Your calendar app fetches it on its own schedule: Apple and Outlook a few times a day, Google can take a day or more. Like every web address, the link can appear briefly in our hosting provider’s request logs. Anyone who has the link can see those deadlines, so keep it to yourself. To revoke it, press Stop calendar sync on your plan page: the link stops working at once, and subscribing again creates a new one.

Plan-builder emails, only if you ask

If you ask the plan builder to email you a link to finish, or to email you your plan, and tick the box, we store: your email address, the language you were using, your household type if you gave it, the question to link you back to, which of the two emails you asked for, when you consented and which version of the consent wording you saw, and when you started and finished the plan. Nothing else from your answers. We send the email you asked for and, only if you asked for the link and have not finished after 48 hours, one reminder. Every email has a one-click unsubscribe that deletes this record at once; otherwise it is deleted 24 months after you last used the plan builder. So that the one-time reminder can never be sent to you twice, we keep a one-way keyed fingerprint of your address (never the address itself) with the date it was sent and whether you later finished or unsubscribed, for 24 months. Emails are delivered by Resend. We never sell your address or share it for marketing.

Signing in with Google

If you sign in with Google to save your plan, we receive your Google email address and basic profile, used only to identify your account. We do not post anything to your Google account, and we do not sell or share this. The sign-in is handled by Google’s own OAuth flow, so we never see your password. When you sign in with Google we keep your first name to greet you in our emails.

Analytics

We use Vercel Web Analytics to understand which pages help, so we can improve them. It uses no cookies and does not build a profile of you or track you across other sites: it records aggregate page views and rough, non-identifying signals like country and device type. The plan builder also keeps its own daily totals of how many times it is started, the core questions are finished, the plan is shown, an email is given and the optional questions are finished. Your browser remembers in local storage that it already counted today, and our server stores only the totals, with no identifier, cookie or IP address. Totals older than 400 days are deleted. We do not run advertising trackers.

If you email us or contribute

If you contact us or submit a correction, we keep what you send so we can act on it and reply. That is it.

Messages sent through the contact form are used only to reply to you. They are delivered to our inbox and kept there, not in the site’s database. To stop a message being sent twice in a row we keep only a short count of recent sends, which is cleared after a day.

Links out

Aliyahu points you to government sites, apps, organisations and news. Once you follow a link you are on their site under their privacy terms, not ours. We choose the most privacy-respecting route we can, but we do not control those destinations.

Your rights

Because your plan answers live on your device, you control them directly. For anything we do hold (a sign-in email, a message you sent), you can ask us to show it to you or delete it. EU and UK users have rights under the GDPR, and Israeli users under the Privacy Protection Law, including access, correction and erasure. To exercise any of these, reach us through the contact page.