1. Who we are
MeWatch is a brand of Uliver Tech Ltd (company no. 516935673), Yigal Alon 94, Tel Aviv, Israel. This policy covers the MeWatch store in English and Spanish, the Hebrew MeWatch site, and the services bought through them: devices, a mobile plan, a customer account, support, and email.
2. What we collect
What you give us
- Name, phone, email, and shipping address when you order or open an account.
- A password, if you create an account. It is stored as a one-way hash. It cannot be reversed back into your password, not even by us.
- The content of anything you send us: contact form, chat, or WhatsApp.
- A product review, if you write one. The display name you choose and the review text are published on the site after approval.
- The SIM number (ICCID) printed on the card, when you activate a line.
What the service generates
- Order history, amounts, payment status, and plan status.
- The phone number assigned to the line, and the line’s state.
- Browsing events: pages viewed, product viewed, add to cart, checkout started. Collected only after you accept cookies (Section 3).
- Your IP address is stored as a one-way hash only, never in full. Country and region are stored alongside it, without city.
- Browser type and interface language.
Signing in with Google
If you sign in with Google, we receive your name, email address, and profile picture from Google. We never receive or see your Google password.
What we do not receive
- Card number, expiry, or CVV. Those fields are shown inside the payment processor’s own secure window and go straight to them. They do not pass through our servers and are not stored with us.
- The child’s or the device’s location. See Section 8.
- The child’s name, age, or photo. There is no such field on the site.
3. Cookies, measurement, and advertising
A cookie banner appears on your first visit. Until you press “Accept”, no measurement or advertising tool loads, and our own internal measurement does not run either. That is the default, not a setting you have to find.
Accepting loads whichever of these are configured at that time:
- Google Tag Manager and Google Analytics 4, for site traffic and behaviour.
- Meta Pixel, for conversion measurement and advertising on Meta platforms.
- TikTok Pixel, for conversion measurement and advertising on TikTok.
- Microsoft Clarity, for heatmaps and usage patterns, when enabled.
Declining leaves all of them off and also stops our own event collection. Your choice is stored in your browser (the mewatch_cookie_consent key in local storage) and can be changed by clearing site data.
One cookie runs independently of the banner: mw_attr. It is written only if you arrive from an ad link, holds campaign identifiers (utm, gclid, fbclid) and the landing page for 30 days, and contains no name, email, or other identifier. Its purpose is to know which ad produced an enquiry you choose to send us.
If your browser sends the Global Privacy Control signal, our internal measurement and the mw_attr cookie are off for you, even if you pressed “Accept”.
4. Payments
Orders in the US store are charged in USD through Stripe. PayPal is available where offered. Israeli orders are cleared through GreenBox (Verifone).
In every case the card is entered in the processor’s own window, not ours. What our system stores is the transaction id, the amount, the currency, and the payment status.
For a monthly plan on standing order, the processor issues us a token that lets us charge the same card next month. The token is not the card number and the card details cannot be derived from it.
5. Your account
A customer account holds: name, email, phone, the password hash (if set), your Google identifier (if you sign in that way), when your email was verified, your last sign-in, your orders, plans and enquiries, and your marketing consent status.
6. Orders and receipts
US purchases are receipted by Stripe, which emails you the receipt directly. Order and payment records are kept in our system for accounting and support.
7. Activating a mobile line
To activate a line, the SIM number (ICCID) is sent to a third-party mobile network partner (MVNO). The partner assigns a phone number and switches the line on. Those same two values, the SIM number and the phone number, are also sent for later actions: suspending, cancelling, or swapping a card.
Your name, email, and address are not needed for those actions and are not sent.
8. The parent app and the device
Devices are managed from a third-party parent app (YQT Smart, and Me-Watch on some models). The app is not ours. It is provided by the device manufacturer, you register with them, and its privacy terms are theirs.
Device location, route history, approved contacts, and features such as remote listening or SOS are handled inside that app and on the manufacturer’s servers. They do not reach us and are not stored in our systems.
Read the app’s privacy policy before you set it up. We can help you install and pair it, but we have no access to your account there and cannot delete data from it on your behalf.
9. Children’s privacy
These are products for children, so this section is written plainly rather than buried.
- The account holder is the parent or guardian. The purchase, the account, the plan, and the payment are all in their name. We do not open accounts for children and we do not market to children directly.
- We do not collect a child’s name, date of birth, photo, or any other identifier on the site.
- Location tracking, safe zones, and SOS alerts run on the device and in the parent app, not on this site. Control over that data sits with the parent, with the app provider (Section 8).
- If information about a child reaches us when it should not have, for example inside a support message, write to us and we will delete it.
- We recommend going through with your child what the device does and who can see their location.
10. Chat on the site and WhatsApp
The site has an AI-assisted chat. Conversations are stored with us: message content, time, language, and a conversation id, plus a link to your account if you were signed in. A human agent can join the conversation and continue it.
Message content is sent to Google Gemini to generate the reply. WhatsApp conversations you start with us are stored the same way.
Do not type card numbers, passwords, or government ID numbers into the chat. They are not needed and we will never ask for them there.
11. Email
- Transactional email (order confirmation, shipping, failed payment, password reset, enquiry received) is part of the service and does not require marketing consent.
- Marketing email is sent only if you opted in. We record when you consented, from which screen, the policy version, and a hash of your IP address, as proof of consent.
- Every marketing email carries an unsubscribe link that works immediately, with no sign-in. You can also just write to us.
- Email is delivered through Resend.
12. Who receives your information
We do not sell or rent personal information. It goes only to those needed to run the service:
- Vercel: hosting and running the site.
- Supabase: the database.
- Stripe, PayPal, Verifone/GreenBox: payment processing.
- Our mobile network partner, which activates and runs the line.
- The shipping carrier, which gets your name, address, and phone in order to deliver the parcel.
- Resend: sending email.
- Google (Gemini): generating chat replies.
- Our accountant and invoicing system, for accounting and tax reporting on Israeli sales.
- Google, Meta, TikTok, Microsoft, for measurement and advertising, only after you accept cookies.
We also disclose information where the law or a lawful authority requires it.
13. Where your data is processed
Uliver Tech Ltd is an Israeli company and is subject to the Israeli Privacy Protection Law, 5741-1981, including Amendment 13. The site and database are hosted with Vercel and Supabase on servers outside Israel and outside the United States. Several of the providers in Section 12 operate in the United States. The same policy applies to both the US and the Israeli storefronts.
14. How long we keep it
- Orders, receipts, and plan records are kept for as long as accounting and tax law requires.
- An account is kept while it exists, until you ask for deletion.
- Enquiries and chat transcripts are kept to continue handling the case and to improve support.
- Browsing events are kept for aggregate analysis, without raw IPs.
15. Security
- Traffic is encrypted with HTTPS.
- Passwords are stored as one-way hashes.
- IP addresses are hashed with a secret key that exists only on the server.
- Email-verification and password-reset tokens are stored hashed. The original value only ever appears in the link we email you.
- Page URLs recorded by measurement are trimmed to the path, with query strings stripped, so a token or personal detail cannot land in the database by accident.
- Credentials for external systems live in environment variables, not in code.
- Access to admin systems is restricted to authorised staff.
No system is perfectly secure. We keep reducing risk and updating our defences.
16. Your rights
- Access and download: from your account area you can download a file containing the data we hold about you.
- Correction: update your name, phone, and email on your profile page, or contact us.
- Deletion: request deletion from your account area. The request is recorded and handled by a person. On deletion we remove your identifying details (name, email, phone, password, Google link) and keep the order and receipt records the law requires us to keep.
- Withdraw marketing consent: at any time, via the unsubscribe link or by contacting us.
- Opt out of measurement: decline in the cookie banner, or enable Global Privacy Control in your browser.
Requests go to the email address in Section 18 and are answered within the time the law allows.
17. Changes to this policy
We update this policy when the service changes or a new provider is added. The last-updated date is shown at the top of the page.
18. Contact
Uliver Tech Ltd, Yigal Alon 94, Tel Aviv, Israel, company no. 516935673.
Email: Service.MeWatch@gmail.com