1. Introduction

TazOne ("the Company", "we") operates the TazOne platform for nutrition clinic management. This privacy policy explains how we collect, use, store, and protect your personal information, in accordance with the Israeli Privacy Protection Law, 5741-1981, and the Privacy Protection Regulations (Data Security), 5777-2017 (Amendment 13).

2. Information We Collect

2.1 Account Details

• Name, email address, encrypted password
• Profile: display name, preferred language, timezone

2.2 Client Data (Health Information)

• Identifying details: name, email, phone number
• Medical data: medical notes, allergies, weight, nutritional goals, meal plans, exercises
• Appointments: dates, type, notes

2.3 Usage Data & Analytics

• Page views, button clicks, session duration (PostHog, EU servers)
• Anonymous error logs (Sentry)

2.4 Payment Information

• Processed securely through Grow by Meshulam (Israeli payment provider)
• We do not store full credit card numbers; only encrypted tokens

3. How We Use Information

• Operating the service and providing requested features
• Improving user experience and the service
• Processing payments and sending invoices
• Sending transactional messages via email (Resend) and WhatsApp (Meta WhatsApp Business)
• Technical support and troubleshooting

4. Health Data Security

Medical data (medical notes, allergies) and the messages you exchange with your practitioner or clinic in the app — including the preview shown in the message list — are encrypted at rest using AES-256-GCM encryption, with a unique initialisation vector for every stored value. Encryption occurs server-side before storage and is decrypted only when displayed to the authorized user. The keys are held by the application server and are never sent to the database, so a database backup, replica or log contains ciphertext only and message text cannot be searched there. This is not end-to-end encryption: TazOne can decrypt message content in order to display it to you and your practitioner.

Additional security measures:

• Row-Level Security (RLS) at the database level
• Full data isolation: only the practitioner who created a client can access their data
• Encrypted communication only (HTTPS with HSTS)
• Immutable audit log for all operations on health data
• Attack protection: CSP, rate limiting, bot detection

5. WhatsApp Notifications

TazOne uses Meta's WhatsApp Business API to send messages to practitioners' clients. This usage is subject to the WhatsApp Business Policy.

5.1 Consent (Opt-in)

WhatsApp messages are sent only when the practitioner has enabled the feature for a specific client and entered the client's phone number. Enabling constitutes confirmation that the client has given explicit consent to receive messages via WhatsApp.

5.2 Message Types

Messages are transactional only and limited to:

• New client onboarding confirmation
• Appointment booking, update, or cancellation
• Appointment summary
• New or updated meal plan delivery
• Document sharing

We do not send marketing or promotional messages via WhatsApp.

5.3 Data Shared with Meta

When sending a WhatsApp message, the following data is transmitted to Meta's servers: the client's phone number and message content. Data is processed in accordance with WhatsApp's Privacy Policy.

5.4 Opt-out

Practitioners can disable WhatsApp messages for any client at any time through the client settings in the platform. Clients who wish to stop receiving messages can contact their practitioner directly.

5.5 Record-Keeping

Every WhatsApp message is logged internally including: recipient identifier, message template, delivery status, and timestamp. This data is retained for auditing and troubleshooting purposes.

Google Calendar

When you connect a Google account, TazOne accesses its primary calendar to synchronize appointments, check availability, and verify whether linked events are present. Data read includes event identifiers, titles, descriptions, start and end times, and event status. Synchronization can store this information in TazOne appointment records.

Creating or updating a Google Calendar event sends the appointment title, notes, and scheduled times to Google. Deleting a linked appointment can also delete its Google event. Personal information included in titles or notes is included in this transfer.

Google access and refresh tokens are stored encrypted on the server for API access and automatic access-token renewal. Disconnecting Google Calendar in Clinic Settings under Integrations deletes the stored connection credentials. You can also revoke access in your Google Account settings. Disconnecting does not delete existing Google events or appointments already imported into TazOne. Appointment records remain subject to the retention and deletion provisions in this policy.

6. Email

We use Resend for transactional emails: account verification, password reset, billing reminders, and system notifications. We do not send newsletters or marketing emails.

7. Third-Party Data Sharing

We do not sell or share personal information. Data is shared with third parties only for operating the service:

• Supabase — User authentication (AWS)
• Grow by Meshulam — Payment processing (Israel)
• Meta WhatsApp Business — Client messaging (Global)
• Resend — Transactional email (USA)
• PostHog — Anonymous analytics (EU servers)
• Sentry — Error monitoring (USA)
• Hostinger — Server hosting (Europe)

The full list is available on our Sub-Processors page. Where required by law, we will disclose information to competent authorities.

8. Your Rights

Under the Israeli Privacy Protection Law, 1981, and Amendment 13, you have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and all associated data
• Object to data processing
• Export your data in a machine-readable format (JSON)

To exercise any of these rights, use the account settings or contact privacy@tazone.co.

9. Data Retention

Client health information is retained for 7 years per the Israeli Patient Rights Law, 1996. Account data is retained while the account is active. After account deletion, all data is removed within 30 days, except information required to be retained by law.

10. Cookies

• Essential cookies: User authentication, language and preference storage (SameSite=Lax, Secure)
• Analytics cookies: PostHog (EU servers) — subject to your consent. Can be declined via the cookie banner.

We do not use marketing cookies or third-party tracking cookies.

11. Changes to This Policy

We reserve the right to update this policy from time to time. Material changes will be communicated via email or through the platform.

12. Contact

For privacy-related inquiries:

• Email: privacy@tazone.co
• Phone: +972-50-622-9888
• Website: tazone.co