Holisticlick
EN
Back to the main page

Privacy policy

Last updated: 15 October 2026

This page is a translation of the Hebrew original, provided for convenience. If the two differ, the Hebrew version applies.

Holisticlick is a system for managing and booking appointments for coaches and therapists. This page explains what information we collect when you visit the page, leave your details or sign up for the system, and why.

1. Who we are

The site and the system are operated by Avia Arza. For any inquiry related to privacy: info@holisticlick.com.

2. What information we collect and why

When you leave your details on the page. Name, e-mail address, phone number and occupation, and a message too, if you chose to write one. We will use them to get back to you and respond to your inquiry, and we will send you an e-mail confirming that we received it. We will also keep the address of the page you sent it from and campaign parameters (for example utm), so that we can understand where you came from.

When you sign up for the system. Name, e-mail address, phone, practice name and password. We will use them to open and confirm the account, to operate the service and to contact you about the account. The password is managed by the Google Firebase sign-in service and is not visible to us.

Information about how the page is used. Through Google Analytics and Microsoft Clarity we see which parts of the page were viewed, which source you came from and which buttons you clicked, and we receive recordings and heat maps showing how the page is used. Form fields are hidden from the recordings. In the app we use Firebase Analytics, a Google service, for usage statistics.

When you book a demo call on the page. The details you fill in on the booking calendar on the page (name, phone, e-mail address and, if you chose, your birthday and notes) are saved for Avia Arza, in order to arrange the call with you and send you a confirmation. They are used only for this call.

Connecting a therapist’s Google Calendar. A therapist or coach who has chosen to connect their Google Calendar confirms this on Google’s permissions screen. What is read, what is written and why is detailed in section 3.

Clients of therapists and coaches. If you booked an appointment with a therapist or coach who uses the system, the details you provided when booking are saved for them, and they are responsible for how those details are used. For questions about such information you can contact them directly.

3. Connecting Google Calendar

A therapist or coach who uses the system can connect their Google Calendar. The connection is optional, starts only when they click “Connect your Google Calendar”, and is carried out on Google’s permissions screen. The only permission requested is https://www.googleapis.com/auth/calendar.events (viewing and editing events in the calendar). The system accesses only the user’s primary calendar.

What we read from the calendar. The events in the next 90 days: the event title, date and times, whether it is an all-day event, whether it is canceled or marked “free”, and its identifier in Google. The events are shown to the therapist in their dashboard. We do not store the event description, its attendees or its location, and we do not access other calendars, contacts, mail or files.

What we write to the calendar. After the therapist has connected the calendar, an event is created in their primary calendar for each appointment booked with them (when the appointment is booked, or when they click “Sync appointments to my Google Calendar”). If the appointment is moved or canceled, the event the app created for it is updated or deleted. The event includes the name of the treatment, the client’s name and phone number, the date and the times. The event belongs to the therapist’s calendar, and they may edit or delete it there. The app does not change or delete any other event in the calendar.

Why we use the data. Only for three purposes that the therapist sees on the screen: to show them their events, to block on the booking page the hours when they are busy (only an event that they chose to block, so that clients do not book an appointment at a time that is not free), and to add the appointments to their calendar. There is no other use.

Where it is stored. The long-term access token (refresh token) is stored encrypted on the server, in a collection that cannot be read from the browser. When a therapist blocks hours based on an event, a block record is stored in the app with the event title, the date, the times and its identifier. The record is visible to the therapist only. Clients see only that those hours are taken, without a title and without details.

Who it is shared with. We do not sell information received from Google, do not transfer it to others and do not use it for advertising or marketing. This information is not sent to artificial intelligence services (including Gemini) and is not used to train or improve models. People acting on our behalf do not read it, except with the therapist’s explicit approval (for example when they ask for support), for security or maintenance purposes of the service, or when we are required to do so by law. It is processed only by the infrastructure providers listed in section 5, for the purpose of operating the service.

Disconnection and deletion. Clicking “Disconnect Google Calendar” revokes the permission at Google and deletes our token. You can also revoke it at any time at myaccount.google.com/permissions. Blocks already created in the app remain until the therapist cancels them. For us to delete those as well, and any other information that came from Google, you can contact info@holisticlick.com. Events created in the therapist’s Google Calendar belong to that calendar and are not deleted automatically.

Google user data: summary in English

Holisticlick is an appointment-booking system for coaches and therapists. A coach can optionally connect her own Google Calendar. We request one scope, https://www.googleapis.com/auth/calendar.events, and only access the coach's primary calendar.

  • Data we read: events in the next 90 days (title, start and end time, all-day flag, status, free/busy flag, event ID). We do not store event descriptions, attendees or locations.
  • Data we write: one event per appointment booked with that coach, containing the service name, the client's name and phone number, and the time. It is created in the coach's own calendar when the appointment is booked (or when she clicks the sync button), and is updated or deleted if that appointment is moved or cancelled. The app never changes or deletes any other event in her calendar.
  • Why: (1) to show the coach her events in her dashboard; (2) to block hours she chooses, so clients cannot book a time she is busy; (3) to add booked appointments to her calendar. No other use.
  • Storage: the refresh token is stored encrypted on our server, in a collection that browsers cannot read. A time block created from an event stores the event title, date, times and ID, visible only to that coach; clients only see that the time is unavailable.
  • Sharing: we do not sell, transfer or share Google user data, do not use it for advertising or marketing, do not send it to AI models, and do not use it to train any model. Humans at Holisticlick read it only with the coach's explicit consent, for security or maintenance, or when required by law.
  • Disconnect and deletion: the coach can disconnect inside the app (this revokes the access at Google and deletes our token) or at myaccount.google.com/permissions. To delete stored blocks or any other data, email info@holisticlick.com.

Holisticlick's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Is providing information mandatory?

There is no legal obligation to provide the details. Without them, we will not be able to get back to you or open an account for you.

5. Who the information is passed to

We do not sell the information and do not pass it on for advertising purposes. We rely on service providers who process information on our behalf:

Information will also be disclosed if we are required to do so by law.

We will not send you marketing mailings. We will send only messages related to your inquiry or your account.

6. Storage and transfer outside Israel

Service providers may store and process information outside Israel as well, including in Europe and the United States.

7. How long the information is kept

Inquiry details are kept for as long as needed to handle the inquiry, and no longer than necessary. Account details are kept for as long as the account is active. The token of the Google Calendar connection is kept for as long as the connection is active and is deleted on disconnection; blocks created from calendar events are kept until the therapist cancels them or asks for them to be deleted. A deletion request will be handled as set out in section 10.

8. Information security

We take reasonable security measures to protect the information. However, no system is completely immune to intrusion.

9. Cookies

Google Analytics and Microsoft Clarity use cookies. You can block or delete cookies in your browser settings, and the page will continue to work.

10. Your rights

Under the Protection of Privacy Law, every person may request to review the information kept about them, and to have it corrected or deleted. To do so, you can contact us at info@holisticlick.com, and we will reply promptly.

11. Changes to the policy

We will update the policy from time to time. The date at the top of the page indicates when it was last updated.

12. Contact

Privacy questions: info@holisticlick.com.