In short: Bashlomo lets organizations such as parishes, choirs, church groups and community associations share publications, music scores and news with their members.
We collect only what is needed to make that work: your account details, the organizations you belong to, and a device identifier for notifications. We do not sell your data, we do not show ads, and we do not track you across other apps or websites.
1. Who we are
This Privacy Policy explains how Elie Tabet ("we", "us", "our"), the publisher of the Bashlomo mobile application (the "App"), collects, uses and protects personal data.
We act as the data controller for the operation of the App. Organizations that use Bashlomo to share content with their members (for example a parish or a choir) decide who receives an account and what content is published. For the member data they manage, they may also act as controllers.
Contact: roger@binader.com
2. Data we collect
| Category | What it includes | Why we need it |
|---|---|---|
| Account data | Email address, encrypted password, and the name your organization associates with your account | To let you sign in and to identify you within your organization |
| Organization membership | The organizations and groups you belong to | To show you the publications and news your organization shares with you |
| Device and notification data | Push notification token, device type and operating system version, app version | To send you notifications about new publications and announcements, and to keep sessions secure |
| Usage and technical data | Sign-in timestamps, last app launch, and basic error logs | To keep the service secure, reliable and working correctly |
| Messages you send us | Content of emails you send through "Contact us" | To answer your request |
Guest mode. You can browse the App without an account. In guest mode we do not collect account data. Only the technical data needed to run the App is processed.
We do not collect your precise location, contacts, photos, microphone, camera, health data or payment information.
3. How we use your data
- To create and manage your access to your organization's content
- To deliver publications, music scores and news to the right members
- To send push notifications, which you can turn off at any time in your device settings
- To secure accounts, prevent abuse and fix technical issues
- To reply to your support requests
We do not use your data for advertising or profiling, and we do not sell or rent it to anyone.
4. Legal bases (GDPR)
If you are in the European Union or the European Economic Area, we process your data on the following legal bases:
- Performance of a contract: providing the App and your account (Art. 6(1)(b) GDPR)
- Legitimate interests: keeping the service secure and working correctly (Art. 6(1)(f) GDPR)
- Consent: push notifications, which you can withdraw at any time in your device settings (Art. 6(1)(a) GDPR)
5. Content stored on your device
Publications and music scores you open may be stored on your device so you can read them offline. This content stays on your device and is removed when you delete it in the App, sign out, or uninstall the App.
6. Sharing your data
We share personal data only with:
- Your organization's administrators, who can see the members of their organization and manage access
- Service providers who host and run the App on our behalf, under contracts that require them to protect your data:
- Hosting and database: our hosting provider
- Push notifications: Google Firebase Cloud Messaging and Apple Push Notification service
- Authorities, when required by law
Some of these providers may process data outside the EU. When they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep your data
- Account data: while your account exists. If your organization deactivates your account, your data is kept until you or your organization ask us to delete it. When you ask us to delete it, we do so within one month of your request, unless the law requires us to keep part of it.
- Notification tokens: until you sign out, uninstall the App, or the token expires.
- Technical logs: up to 12 months.
- Support emails: up to 3 years after our last exchange.
8. Security
We protect your data with industry-standard measures:
- Encrypted connections (HTTPS/TLS)
- Hashed passwords
- Short-lived access tokens with secure rotation
- Restricted administrative access
No system is completely secure, but we work to protect your information and will notify you and the authorities of any breach as required by law.
9. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data and your account
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw your consent at any time
To exercise these rights, email roger@binader.com. We will respond within one month.
If you are in the EU, you can also lodge a complaint with your data protection authority. In France, this is the CNIL (www.cnil.fr).
Deleting your account
To delete your account and its associated data, either:
- Use Account → Contact us in the App, or
- Email roger@binader.com from the address linked to your account.
We will confirm once the deletion is complete. Your organization's administrator can also deactivate your account, which stops it from being used; to have its data erased, ask us as described above.
10. Children
Bashlomo is intended for members of organizations and is not directed at children under 15. Accounts for minors may only be created by an organization with the consent of a parent or legal guardian, as required by applicable law.
If you believe a child's data was collected without that consent, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. If the changes are significant, we will also notify you in the App.
12. Contact
For any question about this policy or your personal data, contact us:
- Email: roger@binader.com