Privacy Policy

Last updated: 29/06/2026

OLAMKAL attaches great importance to the protection of its users' personal data. This Privacy Policy describes the practices for collecting, using, and protecting personal data.

1.1. Data collected

We collect the following data:

• Identification information (name, first name, telephone, email, Teoudat Zeout, Diplomas)
• Location information (city, postal code)
• Data relating to reservations (services chosen, dates, times)
• Payment information (if applicable)

1.2. Purpose of collection

The data collected is used to:

• Allow the booking of services
• Manage user accounts
• Communicate with users
• Improve the services offered
• Ensure the security of the Site

1.3. Legal basis

The processing is based on the explicit consent of the user, or on the execution of a contract (e.g.: making an appointment or subscription).

1.4. Hosting and security

Data is hosted by Google (Firebase / Firestore) and Vercel, whose servers are located in Europe, the United States, and Israel. Transactional emails are sent through Postmark. OLAMKAL implements all reasonable technical and organizational measures to ensure data security.

1.5. Retention period

Data is retained for as long as necessary to provide the services, and for the legal duration necessary for tax, accounting and legal purposes.

1.6. User rights

In accordance with Israeli law and the GDPR, every user has the following rights:

• Right of access
• Right of rectification
• Right to erasure
• Right to object
• Right to data portability

To exercise these rights, you can contact us at: contact@olamkal.com

1.7. Google Calendar synchronization (optional)

Practitioners may optionally connect their Google account to automatically synchronize their Olamkal appointments to their calendar. This feature requires their explicit consent and can be disabled at any time.

When enabled, OLAMKAL creates a dedicated calendar ("Olamkal — Appointments") in the practitioner's Google account and writes their appointments to it (patient name, service, date, time, and location). OLAMKAL only accesses calendars created by the application ("calendar.app.created" scope) and never accesses the practitioner's personal calendar or other calendars.

An access token is stored in encrypted form to maintain the synchronization. Upon disconnection, the dedicated calendar is deleted and access is revoked.

OLAMKAL's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This data is never used for advertising purposes, is not sold, and is used solely to provide the calendar synchronization.