Privacy Policy

Last updated: July 27, 2026

1. General

This Privacy Policy describes how ClubCal ("the System", "we") collects, uses, stores, and shares information about users of the landing page and the application. The Service is operated and managed personally by Elad Nulman ("the Operator"), who is responsible for the information collected. Use of the Service constitutes agreement to this Policy.

2. What Information Is Collected

2.1 On the landing page: The landing page does not include registration forms or direct collection of personal information. Clicking a contact link (WhatsApp, phone, email) opens an external application or service (such as WhatsApp), and any information you provide there (phone number, message content) is transferred directly to that channel and is not stored by us as part of the Service. The page uses external fonts (Google Fonts) loaded from Google's servers.

2.2 In the application (for registered users):

• Identifying details: first name, last name, mobile phone number.
• Password — stored in the System using one-way encryption (hash), and is not accessible in plain text even to the System's staff.
• Role in the System (admin / coach / player / parent) and team assignment.
• For parents: children's details (first name, last name, team assignment) entered by the parent.
• System activity data: trainings, games, meetings and tournaments, dates, locations, and notes entered by administrators/coaches.
• A one-time verification code (OTP) used to verify identity at registration and sign-in.
• A random technical identifier (token) for personal calendar sync, if the user chooses to enable this feature.

2.3 Technical information: The System uses the browser's localStorage to store a login token (JWT) in order to keep the user signed in. The System does not use tracking or advertising cookies.

3. Why the Information Is Collected (Purposes of Use)

• Managing the Club's activity schedule and displaying it only to relevant users, according to their role and team assignment.
• Sending automatic WhatsApp updates about a change or cancellation of an activity, and scheduled reminders ahead of an activity.
• Verifying the user's identity upon registration and/or password recovery.
• Enabling voluntary sync of the user's personal activity schedule with an external calendar, at the user's request only.
• Managing access permissions according to role, so that each user can access only the information relevant to them.

4. Sharing Information with Third Parties

Information is not sold and is not shared for marketing purposes. Information may be transferred to the following providers, solely for the purpose of operating the Service:

• Green API — a WhatsApp messaging interface provider; phone numbers and message content (which includes activity details and sometimes a child's name) are transferred to it solely for delivering the message.
• Cloud infrastructure and storage providers (the MongoDB database, hosting and running the application on Vercel) — for storing and running the System.
• Apple / Google (calendars) — only if and when the user chooses to enable personal calendar sync: the schedule relevant to the user (excluding phone number or password) is fetched directly by the servers of the application the user themself chose to use, via a personal, random link that the user controls and can revoke at any time.

Information may be disclosed if required by law, court order, or the demand of a competent authority.

5. Information Security

The System employs reasonable security measures, including: password encryption (one-way hash), encrypted communication (HTTPS), separation of data access permissions by role, and the use of random tokens (256 bits) that cannot be guessed for features such as calendar sync. However, absolute protection against every security incident cannot be guaranteed, and all use is at the user's own risk.

6. Information About Minors

The System is intended for use by adults (parents, coaches, administrators, and adult players). Minors' details (children of users registered as "parent") are entered by the parent only, in order to manage the minor's participation in club activities (team assignment, activity schedule, WhatsApp updates). A minor does not create or operate an independent account in the System. The parent is responsible for the accuracy of the details provided and for giving consent, on their own behalf and on behalf of the minor, to this Policy.

7. Data Retention and Deletion

Information is retained as long as the account is active and as needed to manage the Club's activity. A user wishing to review, correct, or delete the information stored about them (or about their minor child) may contact the system administrator using the contact details below. Please note that removing certain information (such as a team assignment) may impair the System's ability to provide proper service.

8. User Rights

In accordance with the Israeli Privacy Protection Law, 5741-1981, the user (or the parent, on behalf of a minor) may review information stored about them, request its correction if inaccurate, and request its deletion, subject to legal limitations and the Club's need to retain its records.

9. Privacy Inquiries

For any question, request, or complaint regarding privacy and stored information, you may reach us via WhatsApp at 050-789-0312, or by email: clubcal.team@gmail.com.

10. Changes to This Policy

This Policy may be updated from time to time. A material update will be brought to users' attention by reasonable means.