Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains what information Domolytics collects, why, how it is protected, who else receives it, and what rights you have over it. It applies to the Domolytics website on all of its addresses, including the travel site, and to every section of the service.

Domolytics is a personal organisation service for signed-in users. Today it offers travel planning, shopping lists, career tracking and contacts. Further sections are planned — cars, homes, household budget and subscriptions — and this policy will cover them when they are made available.

We process personal information in accordance with the Israeli Protection of Privacy Law, 5741-1981, as amended (including Amendment 13), and the regulations made under it, among them the Protection of Privacy (Data Security) Regulations, 5777-2017. Where the European General Data Protection Regulation applies to you, we honour it as well.

This policy forms part of our Terms and Conditions. You agree to both with the same checkbox when you create an account.

Who is responsible for your information

Domolytics is owned and operated by a private individual, not by a company (the "owner", also "we" and "us" in this policy). The owner decides how and why the personal information in the service is processed and is responsible for it — the owner of the database under the Protection of Privacy Law.

The owner's details and the address for privacy matters are at the end of this page.

Information you give us when you register

When you create an account we store:

• your first name, last name and email address;
• your password — only as a one-way cryptographic hash, never in a readable form. We cannot recover it;
• if you sign in with Google instead: the Google account identifier, email address and name that Google sends us. We never receive your Google password;
• whether you have confirmed your email address, and a record of each confirmation link we email you — kept only in a scrambled form that cannot be used as a link, and removed after it has been used or has expired;
• the date you agreed to the Terms and Conditions and this policy, and which version you agreed to.

Registration does not ask for your date of birth, identity number, phone number or payment details.

Later, on your profile page, you may set preferences — language, base currency and home country.

Contacts information

If you use the Contacts section, you may voluntarily provide information about yourself or about contacts you choose to add. This may include a person's title and name, date of birth, location, email addresses, phone numbers, web links and the labels you give them.

Your contacts are also where you choose travel companions and the people you share a trip or a list with.

Date of birth — optional

Providing a date of birth is optional and is not required to register for or use the service. Registration never asks for it.

You may add your own date of birth to your own entry in Contacts, and a date of birth to any contact you create. We only store the date you enter; we do not compute ages from it or use it for any other purpose.

Information you enter in the sections

The service stores what you choose to enter in it: in travel — trips, flights, accommodation, car rentals, expenses, daily plans, itineraries, travel companions and visited countries; in shopping — lists and their items; in career — companies, vacancies and applications; and in contacts — the people in your address book. When the planned sections for cars, homes, household budget and subscriptions become available, what you enter in them will be stored in the same way.

That may include details of other people — see "Information about other people" below.

Required and voluntary information

No law obliges you to give us any information. The service cannot work without some of it, though: a name, an email address and a password (or a Google sign-in) are needed to create an account.

Everything else — including any date of birth — is up to you. If you leave something out, the feature that needs it — a map without an address, for example — will simply do less.

Information collected automatically

Like every website, our servers and our network provider record the technical details of each request in order to deliver the page and keep the service secure: your IP address, the address you requested, the time, and what your browser reports about itself.

When someone tries to create an account, we also keep a record of the attempt, to protect the service against automated and fake sign-ups: the IP address, what the browser reports about itself, the email address and names entered, and the result of our checks. We delete these records after 90 days.

We run no analytics or tracking tools, and we do not build profiles of how you use the service.

How we use your information

We use information only to:

• create and maintain your account, and sign you in securely;
• store what you enter and show it back to you, and provide the features you use — including sharing, when you ask for it;
• keep the service working, fix faults and improve how it runs;
• detect and prevent unauthorised access, misuse and security incidents;
• comply with the law and answer lawful requests from competent authorities;
• enforce our Terms and Conditions, and protect the rights of the owner and the security of the service and its users.

We do not sell your information, we do not use it to send you marketing, and we do not use it for any purpose other than those above.

Who receives information

We do not sell, rent or hand over the information stored in your account to anyone for their own use, including for marketing. Other people see it only when you share it — see "Sharing" below.

Certain service providers may process or receive limited information when necessary to provide, secure or operate particular features, each only as far as its task requires:

• our hosting provider, InMotion Hosting, whose servers store the database, run the site and send the emails we send you, such as the link to confirm your address;
• Cloudflare, which provides our domain name service and passes every request to our servers — it therefore sees your IP address and the pages you request. If a sign-up looks automated, Cloudflare Turnstile also shows a security check, which receives your IP address and information about your browser and device to tell a person from a program;
• Google — only if you choose to sign in with Google: the sign-in exchange with Google's servers;
• OpenStreetMap — the map on a trip loads its map images from OpenStreetMap's servers directly into your browser, which sends them your IP address and the area shown; addresses and place names you look up are sent from our servers to the OpenStreetMap search service (Nominatim) to find their coordinates;
• an exchange-rate provider, which receives only the currency codes being converted — no personal information;
• a flight-information provider, which would receive a flight number and date to fill in flight details. This feature is currently switched off.

A link that opens a place in Google Maps takes you to Google's site, under Google's policy.

We may also disclose information where we reasonably believe it is necessary to comply with a legal obligation, a court order or another lawful demand of a competent authority; to protect the rights, property or safety of the owner, users or others; to detect or prevent fraud, security incidents or unlawful activity; to enforce our Terms and Conditions; or to establish, exercise or defend legal claims. Where the law permits, we limit such a disclosure to what the purpose requires.

Sharing

Share links. A trip plan or itinerary can be published as a share link — a long, unguessable address that opens without signing in. Anyone holding that link can see what the shared page shows, including any names and details of people on the trip, and we cannot tell who opens it. Treat it as public, and generate a new link, which stops the old one from working, when you no longer want it used.

Sharing with other users. You can share a trip or a shopping list with a person from your contacts who has a Domolytics account. To find that account, we compare the email addresses stored on the contact with the email addresses of registered accounts, and tell you only whether the person can receive the share. The recipient sees your name and the shared trip or list, and — if you make them an editor — can change it. You can stop sharing at any time.

Advertising

The website may display advertisements served by Google or by other third-party advertising providers. At the date of this policy no advertising is shown.

When advertisements are shown, the provider may itself place or read cookies, device identifiers, pixels or local storage, and may collect your IP address and browser information, under its own policies. That information is collected by the provider directly, through the advertising content delivered to your browser — not by us, and not from the information stored in your account.

We do not control what an advertising provider collects, how it uses it, how long it keeps it, or its privacy practices. Please read the privacy and cookie policies of the provider concerned to learn about them and about the choices they offer.

Before any advertising goes live we will update this policy to name the providers and technologies actually used and, where the law requires consent for advertising or tracking cookies, ask for it before any such cookie is placed.

Cookies and local storage

Our own website sets only the cookies it needs to sign you in, keep you signed in, keep the service secure and remember your language. We set no advertising, analytics or tracking cookies of our own.

• dml_at — keeps you signed in. It holds a signed sign-in token, is not readable by page scripts, and lasts 15 minutes.
• dml_rt — renews that sign-in token so you stay signed in. Not readable by page scripts; lasts 30 days, and signing out cancels it.
• dml_oauth — protects a sign-in with Google while it is in progress. Lasts 10 minutes and is deleted when the sign-in finishes.
• lang — remembers the language you chose. Lasts one year.

Your browser's local storage also keeps three display settings: the light or dark appearance (dml.theme), the text size (dml.textsize) and the monochrome view (dml.mono). They stay in your browser and are never sent to us.

If advertising is shown, the advertising provider may set its own cookies — see "Advertising" above. Those are controlled by the provider, not by us.

You can view, block or delete cookies in your browser's settings. If you block ours, you will not be able to sign in.

Data security

We take reasonable technical and organisational measures to protect your information against unauthorised access, use, loss, alteration or disclosure. Among them:

• every page is served over an encrypted (HTTPS) connection;
• passwords are stored only as a strong one-way hash;
• sign-in tokens are signed and short-lived, renewal tokens are stored only as hashes, and signing out revokes them;
• every request that reads or changes your data checks that the data is yours, or has been shared with you, before doing so;
• share links are long, unguessable addresses that you can replace at any time;
• access to the servers and the database is restricted and protected by credentials.

No service connected to the Internet can guarantee absolute security. If a security incident affects your personal information, we will handle it — and notify you and the authorities where required — in accordance with the law.

Information stored outside Israel

Our servers are hosted by InMotion Hosting in the United States, and Cloudflare and Google operate worldwide. Your information is therefore stored and processed outside Israel.

We transfer it only as the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001 allow, and with providers bound to protect it. The privacy laws of those countries may differ from Israeli law.

How long we keep information

We keep your account and the information in it for as long as the account exists.

When you ask us to delete your account, or when we close it under the Terms and Conditions, we delete it together with the information belonging to it. Copies in our hosting provider's backups are overwritten in its regular backup cycle.

Information the law requires us to keep, or that is reasonably needed to establish, exercise or defend legal claims or to protect the security of the service, is kept only for as long as that requires.

Your rights

Subject to the conditions and exceptions set by law, you may:

• ask to see the personal information we hold about you;
• ask us to correct information that is inaccurate or out of date — most of it you can correct yourself on your profile page and in the sections;
• ask us to delete your account and the information in it;
• ask what your information is used for, and object to a particular use;
• exercise any other right that privacy and data-protection law gives you.

To make a request, write to the privacy address at the end of this page, from the email address of your account where you can, so we can identify the account. We may need to verify your identity before acting on a request, and we will answer within the time the law allows.

You may also complain to the Israeli Privacy Protection Authority, or to the data-protection authority of the country you live in.

Information about other people

When you enter details of another person — a contact, a travel companion, a professional contact — you decide what is stored, and you are responsible for having a lawful basis and, where required, their consent or authorisation. Enter only what you need; a date of birth, for example, is never required.

We process that information only to provide the service to you, and it is visible only to you and to the people you share it with.

If you believe someone has stored information about you in Domolytics, you may contact us at the privacy address and we will handle the request as the law requires.

Please do not store sensitive information you do not need — in particular passwords, payment-card details, identity numbers or medical information.

Children

The service is not intended for children. You must be at least 16 to create an account, as the Terms and Conditions state.

A user may add a child as a contact or a travel companion; that information is the user's responsibility, as described above.

If you are a parent or guardian and believe a child has created an account or given us personal information, contact us and we will review the case and, where appropriate, delete the information.

Links to other websites

The service contains links to websites and services run by others, such as maps. This policy covers only the information we process. Please read the privacy policy of any other site before giving it personal information.

Changes to this policy

We may update this policy when the service, the law, technology or our practices change — for example when a planned section becomes available or advertising is introduced. The date at the top of this page shows when it last changed.

If a change is material, we will tell you on the website or by email, as the law requires.

Governing law

This policy is governed by the laws of the State of Israel, and the competent courts of Tel Aviv-Yafo have exclusive jurisdiction over any matter concerning it — without affecting any mandatory protection you have under the law of the country you live in.

Contact

For questions, requests or complaints about this policy or about your personal information, write to the owner at the privacy address below. Please include enough detail for us to identify your account and handle the request securely.