Privacy Policy

Last updated: 12.11.2026

The Hebrew version above is the binding original. This English translation is provided for convenience; in the event of any discrepancy, the Hebrew version prevails.

This Privacy Policy describes how Ping Digital Management Ltd. (company no. 517290961 — "Ping" or "we") handles personal information ("the Information") collected through its digital services ("the Services"), and in particular the Ping system for calendar management, appointment booking and client management.

This policy applies to the following people ("data subjects"):

a. Business owners registered with, or using, the Ping system.

b. End clients of those businesses (who book appointments with businesses through the system).

c. Visitors to Ping's websites and users of its associated apps and systems.

d. Employees, suppliers and business partners who come into contact with Ping's systems.

Use of the Services constitutes agreement to this policy and to Ping's terms of use. If you do not agree to this policy, please refrain from using the Services.

You are under no legal obligation to provide personal information, but without certain information we cannot give you full access to the Services or provide some of their functions.

1. What information do we collect?

a. Information about visitors (including those who have not registered)

• Browsing data from the browser (cookies, IP, device identifier, browser type, time zone, language preferences).
• Tracking of various actions on the site and their association with the visitor in the system, error and fault data collected automatically (log data), and identity verification details via email and password, a Google account or an Apple account (processed through Supabase Auth).

b. Information about users / end clients of the businesses

• Full name, phone, email address, appointments booked, services selected, notes, ratings, feedback forms, and device and token data for sending push notifications.

c. Information about the businesses in the system

• Business details: business name, business type, company number, phone, field of activity, business address, opening hours, employees, forms, services and prices.
• Data about the business's clients: appointments, forms, client list, reports and notes.
• Enquiries and support: the content of enquiries via chat, email or forms, including records of responses and support.

2. Purposes of use

Ping collects and processes information for the following purposes:

• Providing and operating the Services (calendar management, appointment booking, sending reminders).
• Managing the user account and verifying identity.
• Providing service and technical support.
• Improving and developing the Services, analysing usage data, fixing faults and adding new features.
• Partially automated processing of information for scheduling appointments, coordinating times or sending reminders.
• Marketing communications, updates and promotional information — subject to consent as required by law.
• Information security, protection against fraud and misuse of the system.
• Compliance with legal provisions, orders and regulatory obligations.
• Producing statistical and anonymised data in order to analyse trends and improve the system.

3. Where and for how long information is kept

Information is stored on our servers and protected by various information security measures, according to the type of data.

We retain information for as long as required to operate the Service and to comply with legal requirements, and we may delete old information in accordance with our internal policy.

4. To whom information is disclosed

• External service providers (hosting, payment processing, communications, CRM, analytics, message delivery, advertising, user identification, etc.).
• End clients and business owners: as needed to provide the Service (for example, a client's details to the business with which they booked an appointment).
• Competent authorities: in cases required by law (judicial order, investigation, prevention of an offence).
• Business partners: subject to consent and for the purpose of providing complementary services or integrations.
• Merger or acquisition events: in the event of a change in ownership or company structure — subject to notice and confidentiality obligations.
• Ping does not sell your personal information to anyone.

5. Use of cookies

Ping uses cookies and similar technologies in order to:

• Operate the website and the app correctly.
• Save user settings and preferences.
• Analyse usage data and improve the user experience.
• Display personalised advertising.

We also use an analytics tool (Firebase Analytics) in the Ping apps to measure usage and improve the user experience, as described in the service providers section. This website does not run tracking or analytics tools.

6. Communications and mailings

• Operational messages (appointments, reminders, passwords, etc.) are sent as an integral part of the Service via push notifications and email. Invitations a business sends to its customers may also be sent by SMS.
• Marketing messages are sent only after consent has been obtained. You can unsubscribe at any time by clicking an unsubscribe link or by contacting us through the website.
• Ping does not pass contact details to external parties for advertising purposes without explicit consent.
• Ping may contact you with important updates, system notices and changes to this policy.

7. Information security

Ping applies physical, technological and organisational security measures in accordance with privacy protection regulations:

• Encryption of sensitive data.
• Periodic backups and monitoring systems.
• Role-based access control.
• Password procedures and two-factor authentication where necessary.

However, no system is absolutely secure, and Ping cannot guarantee that intrusion will be entirely prevented.

8. User rights

Under privacy protection law, you have the following rights:

• To review the information held about you;
• To request its correction, deletion or updating;
• To object to the use of the information for mailing or marketing purposes.

Ping may require identity verification before disclosing or changing information, in order to protect your privacy.

Requests may be submitted by email: tomermazuz2014@gmail.com

8A. Third-party services and technologies in the apps

The Ping apps (Ping for customers and Ping for business) and "Ping in the browser" use the following services:

• Supabase: database hosting, user authentication (email and password, Google and Apple; verification codes are sent by email), file storage (such as business photos) and server functions. Account data, appointments, messages and reviews are stored there.
• Firebase Cloud Messaging (Google): push notifications. A device token linked to the account is stored and is removed when the account is deleted.
• Firebase Analytics (Google): usage measurement. Screens viewed and in-app actions (for example selecting a category, viewing a business, starting and completing a booking), the app version, operating system and language, and the Ping account identifier used as the analytics user ID are collected. Ping does not send your name, phone number or email to analytics, and does not send precise location. Analytics data is not automatically deleted when the account is deleted (see below).
• SMS delivery: invitations a business sends to its customers may be sent through an external SMS provider (TextMe), which receives the phone number and message content. The phone number is not used for sign-in.
• Google and Apple: sign-in with a Google or Apple account, at your choice. Ping receives the details needed to identify the account (such as email and name).
• Address search (Photon): in the business app, the address text typed in search is sent to an external address search service (photon.komoot.io).
• Location search (OpenStreetMap Nominatim): in the customer app, the location search text is sent to an external location search service (nominatim.openstreetmap.org).
• Invitation page (Vercel): business invitation links open a web page hosted on Vercel. The page shows only the business name, city and category, and does not show or store the invitee's personal details.
• Location: in the customer app, if you grant location permission, it is used to calculate distance from businesses. The permission is optional and can be revoked in the device settings.
• Contacts: in the business app, if you choose to import clients from your contacts, the contacts you select are added to the business's client list. The permission is optional.

8B. Account deletion and retained data

How to delete: a user of Ping for customers deletes their own account from the Profile tab, "Delete account", in the app or in "Ping in the browser": type DELETE and verify identity (password, or a fresh Google/Apple sign-in within 10 minutes). Deletion takes effect immediately and cannot be undone. Detailed instructions: account deletion page.

What is deleted: the account and profile, favorite businesses, waitlist entries, notification preferences, notification devices, conversations and messages, reviews and review reports you submitted, and a Google Calendar connection set up in the staff member's name, including the tokens stored on our servers (see section 9). A business-level calendar connection remains as long as the business exists. Future active appointments are cancelled.

What remains: past appointment records remain with the business for its own history, without a link to the deleted account. Details a business saved about its own customer (such as name and phone in the customer record) are held by the business. Administrative and security records (event log) are kept without a link to the account. Firebase Analytics data already collected is retained by Google under its retention settings and is not deleted automatically; you may request its deletion by email. Periodic backups may contain copies until they are replaced.

Business owners: an account on the team of an active business is deleted from Ping for business. A sole owner cannot delete the account while other customers have active future appointments at the business. When deletion proceeds, the business is hidden and removed from search and its phone and email are cleared. If the business has other owners, it continues to exist.

Request by email: anyone who cannot sign in may send a deletion request to tomermazuz2014@gmail.com. We will ask to verify your identity before deleting. Handling is manual with no guaranteed turnaround time.

9. Use of Google APIs and Google Calendar

Business owners may connect their Google Calendar to Ping. The connection is optional, is made with explicit consent on the Google permissions screen, and can be revoked at any time.

• Scope requested: the only permission Ping requests is https://www.googleapis.com/auth/calendar.events — access to calendar events.
• How we use it: reading existing events in order to mark those hours as busy in the business's Ping calendar; creating and updating events for appointments booked through Ping; and deleting those events when an appointment is cancelled. Ping creates, updates and deletes only events that Ping itself created.
• How we store it: Ping stores on its servers the Google event identifier, the event start and end times, the event title, together with a sync token and an OAuth refresh token used for ongoing access to the calendar. This information is retained for as long as the connection remains active.
• Deletion: when the connection is disconnected — whether from the app settings or by revoking access in your Google account — Ping immediately stops accessing the calendar and deletes all Google Calendar data it holds: the refresh token, the sync token, and every stored event identifier, event time and event title. No Google Calendar data is retained after disconnection.
• Ping does not sell information from Google Calendar, and does not transfer it to third parties other than as necessary to operate the Service, where required by law, or as part of a merger or acquisition.
• Ping does not use or transfer Google Calendar data for: targeted, personalised or retargeted advertising; sale to data brokers or information resellers; determining credit-worthiness or for lending purposes; or training generalised or non-personalised AI or machine learning models.
• Humans do not read Google Calendar data, except with your explicit consent, for security purposes, where required by law, or in aggregated and anonymised form for internal operations.
• Ping's use of information received from Google APIs, and the transfer of that information, adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• The connection can be disconnected at any time from the app settings, or on the Google account permissions page at myaccount.google.com/permissions.

10. General notices and contact

• Ping may update this policy from time to time; the update takes effect from the date of its publication.
• The Services may include links to external websites and services; Ping is not responsible for the privacy policies of third parties.
• Ping's Services are not intended for children under the age of 16, and we do not knowingly collect information about them.

Database controller:

Ping Digital Management Ltd., company no. 517290961

Privacy protection officer:

Information Security and Privacy Manager — Ping Digital Management Ltd.

You may contact them on any matter relating to this policy by email.

Contact: tomermazuz2014@gmail.com