מדיניות פרטיות

Privacy Policy (English)

CoachBook (coachbook.co.il) is a personal-trainer management app: clients, training schedule, payments and expenses. This policy explains what we collect, why, who receives it and what your rights are, under Israel's Protection of Privacy Law, 5741-1981 and the Protection of Privacy Regulations (Data Security), 5777-2017. Last updated: September 13, 2026.

Who is responsible for your data

The service and its database are owned and operated by Ben Meirov, coachbook.co.il. Privacy questions or requests: benmeirov2002@gmail.com.

Who this policy covers

• Trainers - people who sign up to CoachBook and run their business in it.
• Clients - people whose details a trainer enters into the app, or who enter their own name and phone on a trainer's booking page. A client is not a CoachBook customer; the trainer is the owner of that data and CoachBook holds it on the trainer's behalf (see "Clients and the booking page").

What we collect and why

You are not legally required to provide any information. Providing it is your choice, but without sign-in details we cannot open an account, and without a phone number a client cannot book a slot.

• Google sign-in details: name, email address and profile picture, used to identify you and create your account. Sign-in is via Google only; CoachBook stores no passwords.
• Contact phone a trainer leaves at signup, for an onboarding call and support. Used by us only.
• Data the trainer enters: client names and contact details, session times, prices, packages, payments, balances and expenses.
• Signup source: if you arrived from a tagged link (e.g. an ad), the campaign name or referring site is stored once so we know which advertising works. No browsing history is kept.
• Notifications: if you enable them, a technical browser/device subscription address is stored, used only to deliver notifications.
• Local storage: the app keeps your sign-in, language choice and cookie choice in your browser. These are required to run the service and are not used for tracking.

Clients and the booking page

A trainer can publish a link to a page where clients grab open slots. A client who books enters a phone number and, the first time, a name. These details are stored only in that trainer's client list, so the trainer knows who booked and can manage sessions and payments. CoachBook does not use them for any other purpose, and no pixel or measurement tool runs on the booking page.

Use of Google Calendar data

If you choose to connect Google Calendar, CoachBook is authorized to create, update and delete training events in your calendar - only the events scheduled through CoachBook. The app does not read, store or process any other events in your calendar. The access credential is stored encrypted and is used solely for this synchronization. You can disconnect at any time from the app's settings screen or via your Google account settings.

The assistant and AI processing

Two features use language models from external providers. They run only when you use them, and no action is ever taken without your confirmation.

• The assistant (CoachBot): when you type a request, it is sent together with your client list (name, price and balance), your groups and your reminder template, so the assistant can tell who you mean. Processing goes through OpenRouter to Google (Gemini) or Anthropic (Claude) models.
• List import: when you paste free text (e.g. a client list from your notes) to turn it into records, the whole text - including any names and phone numbers in it - is sent for processing to Anthropic (Claude) or via OpenRouter.

These providers process the text only to return a response and may not use it for their own purposes, under their API terms. If you prefer that client details never reach them, simply do not use these two features; the rest of the app works without them.

Cookies and measurement

Beyond the essential local storage described above, the app uses one non-essential tool: the Meta pixel (Facebook and Instagram). It lets us know which ad brought a trainer who signed up, and it sets a browser cookie named _fbp. Meta may link this to your Meta account under Meta's privacy policy.

• The pixel does not load until you accept it in the cookie banner. Declining is remembered exactly like accepting, and the banner will not return.
• The pixel never runs on the client booking page.
• You can change your choice at any time via the "Cookie settings" link in the home page footer or in the settings screen. After declining, also clear the site's cookies in your browser to remove a cookie already set.

There are no other analytics, heat-map or advertising tools in the app.

Storage and security

• Data is stored in a managed database (Supabase) and served through secure hosting (Vercel). Servers may be located outside Israel, with providers committed to recognized security standards.
• All traffic is encrypted in transit (HTTPS) and data is encrypted at rest.
• Each account is isolated at the database level: a trainer can only access their own data.
• The service owner has administrative access to the trainer list (name, email, contact phone and account status) for support and operations only.

Who receives your data

Your data is never sold or shared for marketing. It is passed only to providers that operate part of the service, and only as far as needed:

WhatsApp messages to clients (debt reminders, booking link) open in the trainer's own WhatsApp app and are sent from the trainer's phone. CoachBook does not message clients itself and does not see the conversation.

Retention and deletion

Data is kept while your account is active. A trainer can delete clients, sessions and payments directly in the app. You may request full deletion of your account and all data by contacting the address below; deletion is completed within 30 days. You can revoke Google access at any time at myaccount.google.com/permissions.

Your rights

Under sections 13 and 14 of the Protection of Privacy Law you may access the data held about you and ask to correct or delete it if it is inaccurate, incomplete or out of date. Most of your data is visible and editable in the app; for anything else, contact us and we will respond within 30 days. Clients may contact their trainer or us, as described above.

Notifications

Notifications are sent only if you explicitly enable them, and can be turned off at any time from the settings screen or your browser settings. They pass through your browser's push service (Google, Apple or Mozilla, depending on the browser).

Changes

If this policy changes, the date at the top of the page will change. A material change will be announced in the app.

Contact

Privacy questions or requests: benmeirov2002@gmail.com