Privacy

Last updated 31 July 2026

Draft pending legal review. This describes exactly what the software does today. It has not yet been reviewed by an Israeli privacy lawyer, and the DPO appointment and database registration required by Amendment 13 are not yet complete.

The short version

Your licence plate is personal data, and we treat it that way. A plate shows a profile only if its owner joined, proved the car is theirs, and switched discoverability on. Searching any other plate returns the same empty answer — you cannot tell from the outside whether someone is here at all.

What we collect

Photos

Location and camera metadata (EXIF, including GPS) are stripped on our servers before the file is written to disk. A photo tagged to your plate is visible only to the person who tagged it and to you until you approve it. Reporting it removes it from public reach at once.

Verification documents

Your vehicle licence and selfie are stored outside any public address, are readable only by a reviewer, and every view is logged. They are deleted the moment your claim is decided — approved, rejected, released or superseded. Only the decision and the audit entry survive.

What we never do

Your controls

Plates of people who never signed up

This is the part most services would not tell you, so we will.

A licence plate is personal data: through the Ministry of Transport registry it points at a named person. That means the moment someone searches a plate, or tags a photo to one, our system is handling data about a human being who may never have heard of Nomeragram and has agreed to nothing. Designing it so that nobody sees that person's details is necessary but not sufficient — not shown is not the same as not processed.

So a plate with no verified owner is never stored as itself. It is stored as a keyed pseudonym: an irreversible code computed from the plate and a secret that is kept outside the database. Waves and tags still work, duplicate-blocking still works, and abuse investigation still works — because the same plate always produces the same code. But nobody reading our database, including anyone who steals it, can turn those codes back into plate numbers.

Your plate becomes plaintext at one moment only: when you verify it is yours and ask us to hold it. If your claim is later revoked, it goes back to a pseudonym.

Search logging. Every plate lookup is recorded so we can investigate harassment. Those records contain the pseudonym, never the plate, and they are deleted after 90 days. There is also a ceiling on how many different plates one account can look up in a day, so that nobody can walk through the plate space collecting people.

Where it lives

On a server in the European Union, encrypted in transit. Nightly backups are retained for fourteen days. Speech-to-text and plate reading run on our own machine — audio and photos are never sent to a third-party service. Israeli law governs the service; the EU location is an infrastructure choice, not a change of governing law.

Children

Nomeragram is for licensed drivers. It is not intended for anyone under 17, and features involving romantic interest are limited to adults. You confirm your age when you sign up; we do not check it against a document, and we close accounts we learn are underage.

Ask us about your data

You do not need an account to use this. If your plate was searched or someone tagged a photo of your car, you are exactly the person this form is for — you can ask what we hold, ask us to delete it, or tell us something is wrong. It reaches the same queue as everything else, marked urgent, and we answer at the address you give us.

We keep this message and your reply address only for as long as it takes to answer you.

Prefer email? alex.sukhman@gmail.com. A named Data Protection Officer and a support address on this domain will be published here before public launch.