Privacy policy

1. Who is responsible for your data

clinickit is operated by Sassi Lev, Leonardo da Vinci 14, Tel Aviv 6473118, Israel, who is the controller of the personal data described here. Contact: info@clinickit.app.

No law requires you to give us this information. Without an email address and password we cannot open an account, and without billing details we cannot start a membership. Everything else on your clinic profile is optional, and leaving it out only makes the prompts less tailored.

2. What we collect

• Account data: email address and a hashed password, handled by our authentication provider (Supabase).
• Clinic profile: clinic name and type, location, treatments offered, audience, positioning, voice, hours, policies, links, and the names and credentials of practitioners you choose to enter. You decide what to enter.
• Brand settings: the colors, fonts, voice and look you choose or confirm.
• Saved work: kits you bookmarked, the details you entered for a kit, and your monthly plan.
• Billing status: your Stripe customer and subscription identifiers, subscription status, billing period dates, and the time you agreed to automatic renewal. Card details are entered on Stripe’s pages and never reach our servers.
• Usage events: a small set of first-party events (for example: account created, checkout started, kit opened, prompt copied, kit saved, demo built) with timestamps and the kit involved. We do not record the text of your personalized prompts, your profile free text, passwords, tokens or payment details in these events.
• Technical data: our hosting and authentication providers keep standard logs, including IP addresses. To limit abuse of public features we keep short-lived counters built from a one-way hash of the IP address, normally deleted within a few days.
• Messages: what you send to info@clinickit.app.
• Free demo: if you enter a website, Instagram or Facebook address on the home page, or paste text, our server reads that text, or opens that public page and up to four more pages of the same site, once. It picks out the clinic name, location, services, colors and fonts and returns them to your browser. The address, the pages and what was read are not stored or logged. We only count that a demo was built and whether the source was a website or a social profile.

3. What we do not collect

We do not collect patient information, patient photos, treatment records or client lists, and the service is designed so you never need to enter them. This is a marketing writing tool. It is not a system for protected health information and we make no HIPAA or similar compliance claim. If you enter patient information by mistake, tell us and we will delete it.

4. How we use data

We use data to provide the service, personalize prompts with your clinic profile, bill your membership, answer you, keep the service secure, and understand how members use it so we can improve it. We send account and billing emails (verification, password reset, billing notices), which are part of the service. Members also get one weekly email with the kit of the week. You can stop it at any time with the link in the email or in My clinic.

We do not sell personal data, we do not share it for cross-site advertising, and we do not use your data to train AI models. We do not use third-party advertising trackers on the service. The prompts you copy go only where you paste them, and the AI tool you choose handles them under its own terms.

5. Who receives data

These service providers process data for us, each for its own function:

• Supabase (authentication and database)
• Stripe (payments and subscription management)
• Vercel (hosting)
• Resend (sending and receiving email)

We may also disclose data when the law requires it, to protect our rights or someone’s safety, or to a successor if the service is transferred. In a transfer, this policy continues to apply until you are told otherwise.

6. Where data is held

The service is operated from Israel. Your data is stored in the United States (Supabase, US East), and email passes through Resend’s infrastructure in Japan. Stripe and Vercel may process data in other countries. By using the service you agree to these transfers.

7. How long we keep data

Account, profile and saved work are kept while your account exists. To delete your account, email info@clinickit.app from the address on the account. We will cancel any active subscription, delete your profile, saved kits, plans and usage events linked to you, and delete the authentication account, normally within 30 days. Billing records are kept by us and by Stripe for as long as tax and accounting law requires, generally up to seven years. Support emails are kept for as long as they are useful for your account, and deleted on request where the law allows.

8. Security

We use access controls, encryption in transit and row-level rules that keep each member’s data separate. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

9. Your rights

You can edit your profile at any time. You may ask to see, correct or delete your personal data, and to get a copy of it, by emailing info@clinickit.app. We answer within 30 days. If you live in a US state with a privacy law, or if Israeli law applies to you, you have these rights under that law, and we will not treat you worse for using them. If we decline a request, reply and we will review it again. You may also complain to your local privacy regulator, including your state attorney general or Israel’s Privacy Protection Authority.

10. Cookies and browser storage

We use only the cookies needed to keep you signed in, and your browser remembers for the session that you closed the offer bar. There are no advertising or cross-site tracking cookies. Because we do not track you across sites, we do not change anything in response to Do Not Track or similar browser signals.

11. Children

The service is for adults working in clinics. It is not directed to anyone under 18, and we do not knowingly collect their data.

12. Changes and contact

We will post updates here with a new effective date, and email members about material changes before they take effect. Contact: info@clinickit.app.