Legal

Privacy Policy

Last updated: August 10, 2026

Plus-it (the "App") is developed by Nadav Mark, a sole proprietor (עוסק מורשה) registered in Israel ("Developer," "we," "our"). This Privacy Policy explains how data is handled when you use the App and visit our website.

1. Zero-Server Architecture — The Core Principle

The App is built on a zero-server architecture. We do not operate external web servers, databases, or cloud storage systems that collect or store the data you enter into the App.

All client records, session logs, and financial data remain inside your device's local storage. We have no technical ability to view, retrieve, intercept, or delete any information you input into the App.

2. Data You Enter Into the App

The App allows you to input and organise information about your clients. This data is stored locally on your mobile device using an embedded database (Isar) and never transmitted to our servers:

Client metadata: Names, phone numbers, email addresses, and colour tags.
Session logs: Dates, session counts, price per session, and billing batch history.
Calendar integration data: Recurring device calendar event identifiers, if you enable calendar sync.
Morning invoicing data: Your Morning API key and, if you link a client to a Morning contact, that contact's Morning client ID — stored locally, used only to talk to Morning's API. See Section 4 for details.

Professional privacy recommendation: If you are bound by therapeutic privilege, professional secrecy obligations, or healthcare data regulations (such as GDPR or the Israeli Protection of Privacy Law), you may enter client initials, pseudonyms, or alphanumeric codes instead of full names. The App is designed to work fully with non-identifying identifiers.

3. Data We Collect Directly

We do not integrate analytics SDKs, crash-reporting tools, or advertising trackers in the App. The only personal data we receive is what you send us voluntarily:

Support correspondence: If you contact us by email for help, we retain your email address and any content you share for the purpose of resolving your issue. Legal basis: your explicit consent and the performance of a support contract (GDPR Article 6(1)(b) and 6(1)(a)).

4. Storage, Encryption, and Third-Party Services

Data managed within the App interacts only with local device services or external platforms you explicitly authorise:

Local storage (Isar database). All data is processed locally. Security relies on your device's native operating system protections and the App's biometric and PIN lock.

Google Drive backups (optional, Android). If you enable the backup feature, data is exported directly to your personal Google Drive account — not to our servers:

The backup is stored under the private appDataFolder scope, invisible in your Drive browser and inaccessible to other apps.
The file is encrypted on-device using AES-256-CBC with a key derived via PBKDF2-HMAC-SHA256 (100,000 iterations) from your private 24-word seed phrase.
We do not possess your seed phrase. If it is lost, the backup cannot be decrypted by anyone, including the Developer.
Your backup data is governed by Google's own Privacy Policy and data storage terms, including the geographic location of Google's infrastructure. Review Google's Privacy Policy at policies.google.com/privacy.

Message templates. The App formats billing message text locally using tokens drawn from your local database. When you choose to send a message, the App opens your device's native share sheet and passes the text to WhatsApp, Telegram, or your email client. The App does not connect to messaging APIs directly; you remain the sender.

Morning / Green Invoice (optional invoicing integration). If you choose to connect a Morning (Green Invoice) account by entering your own Morning API key in the App, the App communicates directly from your device to Morning's servers — never through ours — to search your existing Morning clients and to issue tax invoices, receipts, or payment requests on your behalf. When you issue a document, the relevant billing details (the client's name and, if you've linked a Morning client record, their contact information, plus the session amount, date, and payment method) are sent straight to Morning. Your Morning API key is stored only on your device; we never see or receive it. Morning is a separate, independent Israeli invoicing platform and acts as its own data controller for the documents it issues — review Morning's own privacy policy on their website for how they handle that data.

RevenueCat (subscription management). Premium features are gated via RevenueCat, which processes in-app purchases through the Apple App Store or Google Play. RevenueCat collects device identifiers, purchase history, app version, platform, and country to manage and verify your subscription status. We receive only an anonymised entitlement token confirming whether your subscription is active. Review RevenueCat's Privacy Policy at revenuecat.com/privacy.

Apple App Store / Google Play. All payment transactions are processed by Apple or Google. Their respective privacy policies govern any financial data you provide when purchasing a subscription.

This website (landing page). Our website loads fonts from Google Fonts (fonts.googleapis.com). This request transmits your browser's IP address to Google's servers, which may be located in the United States. This is the only third-party data transfer that occurs when you visit this website.

5. Controller and Processor Status

You are the data controller for all client information you enter into the App under the EU/UK GDPR, the Israeli Protection of Privacy Law (5741-1981), and equivalent frameworks. You bear full responsibility for obtaining any necessary consent from your clients and for complying with professional and statutory privacy obligations in your jurisdiction.

We are not a data processor for your client data. Because client data never leaves your device or your personal Google Drive account (which we cannot access), we do not store, process, or control it on your behalf. The App is a local tool under your direct custody.

If your clients are located in the EU or EEA, it is you — as the data controller — who bears GDPR obligations toward those clients, not us.

6. Data Transfers

Because we hold no client data on our own servers, there are no cross-border data transfers of client data by us.

When you use Google Drive backup, your encrypted backup file is stored within your Google account. Google's infrastructure may store this data in servers located outside your country, including in the United States. Google relies on Standard Contractual Clauses and other mechanisms for international transfers under GDPR. See Google's Privacy Policy for details.

Support emails you send us are processed on standard email infrastructure. If you are an EU resident and wish to understand our data transfer safeguards for support data, contact us at the address in Section 9.

7. Your Rights and Data Retention

Client data. Your input remains on your device until you modify it, uninstall the App, or wipe your device storage. Deleting your Google Drive backup removes the encrypted copy permanently. We cannot delete this data on your behalf because we do not possess it.

Support correspondence. Retained for up to 12 months following resolution of your issue, unless a longer period is required by law or an ongoing dispute.

Subscription status. RevenueCat retains entitlement records in accordance with its own privacy policy.

If you are a resident of the EU, UK, Israel, or California (CCPA), you have the right to access, rectify, or erase personal data we actually hold about you — which is limited to support emails and any direct communications. To exercise these rights, contact us at the address in Section 9.

8. Children's Privacy

The App is intended exclusively for use by adults aged 18 or older who are qualified professionals. Users may track sessions involving minor clients — for example, tutors, trainers, or therapists working with children; however, such data is entered by the professional, not the minor. The professional is solely responsible for obtaining any required parental or guardian consent for storing such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Non-material changes take effect on publication. For material changes affecting paid subscribers, we will provide at least 30 days' advance notice by publishing the revised policy within the App or through your registered contact channel.

Continued use of the App after the effective date of any change constitutes your acceptance of the revised policy.

10. Contact and Supervisory Authorities

For questions or data subject requests regarding this policy, contact us at: [INSERT SUPPORT EMAIL]

Residents of Israel may lodge inquiries with the Israeli Privacy Protection Authority (Reshut HaGanat HaPrivatiyut).

Residents of the EU or UK may lodge a complaint with their local Data Protection Authority.

Important notice regarding this document This Privacy Policy was drafted with AI assistance and has not been reviewed by a licensed attorney. It is provided as a starting point. Laws vary by jurisdiction and change frequently. We strongly recommend having this document reviewed by a qualified lawyer familiar with Israeli privacy law, GDPR, and digital health products before relying on it as final.