This document is a good-faith template prepared to help get the Archyy app launch-ready. It is not legal advice and may not address every requirement that applies to you. Please have a qualified lawyer review it before you rely on it in production — in particular its handling of children's personal data under Israel's Privacy Protection Law, 5741-1981, and, if Archyy is offered to users in the EU or the United States, under GDPR / GDPR-K (Article 8) and the U.S. Children's Online Privacy Protection Act (COPPA).
Before publishing, complete every placeholder shown in brackets — the operating company's legal name [LEGAL ENTITY NAME] and its [REGISTERED ADDRESS] — and confirm the data-retention periods and sub-processor list with counsel.
Last updated: 18 October 2026
See also our Terms of Service
Archyy helps families in Israel discover, book, and manage children's after-school activities, classes, private lessons, camps, and family outings. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you and your family have. It should be read together with our Terms of Service.
Archyy (“Archyy,” “we,” “us,” or “our”) is a mobile application operated by [LEGAL ENTITY NAME], a company registered in Israel with its registered office at [REGISTERED ADDRESS] (the “Company”). The Company is the owner and manager of the personal-data database behind the app within the meaning of Israel's Privacy Protection Law, 5741-1981 (the “PPL”), and is the data controller of your personal data.
If you have any question about this policy or your data, contact us at hello@archyy.com.
Archyy accounts are held by adults — parents and legal guardians aged 18 or over. Account holders create a family profile and add their children to it. This policy therefore covers two kinds of people:
Children do not create or hold their own Archyy accounts. The policy also applies to the limited details you may provide about other adults — a second parent/guardian and an emergency contact. Please read the dedicated Children's Personal Data section below.
We collect only what we need to run the Service. It falls into the categories below.
| Identity & contact | Your name, email address, and phone number. |
|---|---|
| Home location | Your home address — street, city, and neighborhood — and approximate GPS coordinates for your area, used to find activities near you. |
| Second parent / guardian | Optionally, their name, phone number, and relationship to the child. |
| Emergency contact | Optionally, their name, phone number, and relationship. |
| Name | First and last name. |
|---|---|
| School grade | The child's grade (כיתה) — the primary field used to match after-school activities in Israel. |
| Sex | Used where programs are organized by sex. |
| School | School name and the Ministry of Education school ID (“semel” / סמל מוסד). |
| Date of birth (sensitive) | Used to confirm age-based eligibility and to derive age/grade for matching. |
| Health fund / HMO (sensitive) | Membership in a health fund (קופת חולים), used for eligibility and member benefits (see below). |
| Your activity | Activities you view, bookmark, book, or enroll a child in, and your outing and booking history within the app. |
|---|
| Sign-in & account IDs | Authentication identifiers created when you sign in. Archyy uses Supabase for sign-in and data storage; you can sign in with Apple, with Google, or with a passwordless email magic link. |
|---|---|
| Basic device & log data | Limited device/session identifiers and sign-in events needed to keep the app secure and working. |
Archyy is discovery-first. We do not process or store your payment-card details — when you choose to book or pay, the app hands you over to the third-party activity or booking provider, who handles the transaction on their own systems (see How We Share Information and the Terms of Service). We do not run third-party advertising trackers, and we do not sell your personal data.
We use the information above to:
We collect a child's date of birth to confirm age-based eligibility precisely (many programs have strict age cut-offs) and to derive the grade/age used for matching. We collect health-fund / HMO membership because some activities, subsidies, and discounts in Israel are offered through, or in partnership with, the health funds, so membership determines what a child is eligible for. We collect sex because some programs are organized by sex. We ask for these details only to match your child to the right options — never for any unrelated purpose, and never to build advertising profiles.
Under Israeli law, we rely primarily on your informed consent — given when you create your account and add your family's details — and on the necessity of processing to provide the Service you asked for. You may withdraw consent at any time (see Your Rights); doing so may mean we can no longer provide some or all of the Service.
If and to the extent the EU/EEA or UK General Data Protection Regulation (GDPR / UK GDPR) applies to you, our legal bases are: performance of a contract with you (Art. 6(1)(b)); your consent (Art. 6(1)(a)), including explicit consent for sensitive / special-category data such as health-fund membership and other health-related data (Art. 9(2)(a)); our legitimate interests in running, securing, and improving the Service (Art. 6(1)(f)); and compliance with legal obligations (Art. 6(1)(c)). Where a child's data is processed and a child's own online consent would otherwise be required, we rely on the consent and authorization of the holder of parental responsibility (Art. 8 GDPR).
Protecting children's information is central to how Archyy works. Please read this section carefully.
Only a parent or legal guardian aged 18 or over may create an Archyy account. Children do not create, hold, or sign in to their own accounts.
You provide the data & consent on the child's behalfWhen you add a child to your family profile, you are providing that child's personal data and, as the person with parental responsibility, giving consent for us to process it for the purposes in this policy. You confirm you are entitled to do so.
What we collect about a child, and whyFirst and last name, school grade, sex, school (name and semel), date of birth, and health-fund / HMO membership — used solely to match the child to suitable, eligible, age- and grade-appropriate activities and outings, and to help you manage their bookings. We do not build advertising profiles of children or use their data for any purpose beyond running the Service.
Sensitive details get extra careA child's date of birth and health-fund membership are treated as sensitive and protected with heightened security — encryption in transit and at rest, and strict access limits (see Security). They are collected for eligibility and matching, as explained in Section 4.
RetentionWe keep a child's data only while the child is on your active family profile and for the limited period after removal or account closure described in Data Retention, after which it is deleted.
Your controls as a parent / guardianAt any time you can view, correct, or delete any child's details from within the app, remove a child from your profile, or ask us to do so at hello@archyy.com. Deleting a child removes their personal data from your profile, subject to the limited retention above.
EU / US noteArchyy is directed to families in Israel. If you use Archyy from the EU/EEA, Article 8 GDPR (and “GDPR-K” principles) applies to children's data; if from the United States, the Children's Online Privacy Protection Act (COPPA) may apply. Because every account is held, and all children's data is entered, by a parent or guardian, we rely on verifiable parental consent. If you believe a child's data has reached us without proper parental consent, contact hello@archyy.com and we will delete it.
We keep personal data only as long as we need it for the purposes in this policy:
When data is no longer needed, we delete it or irreversibly anonymize it.
We take appropriate technical and organizational measures to protect personal data, consistent with the security-level obligations of the PPL's data-security regulations and good industry practice. These include encryption of data in transit and at rest, access controls that limit who can see personal data (with tighter limits on sensitive fields such as date of birth and health-fund membership), authentication through trusted providers, and ongoing monitoring. No system is perfectly secure, but we work hard to protect your family's information and to meet our breach-notification obligations if something goes wrong.
You have rights over your personal data. Under Israel's PPL, you may review the data we hold about you and your family and ask us to correct, complete, or delete data that is inaccurate, incomplete, or no longer needed. If the GDPR applies to you, you also have rights of access, rectification, erasure (“right to be forgotten”), restriction, objection, and data portability, and the right not to be subject to solely automated decisions with legal or similarly significant effects.
You can exercise most of these rights directly in the app — view and edit your profile and your children's details, or delete your account. For anything else, email hello@archyy.com and we will respond within the timeframes the law requires. You may withdraw consent at any time; this will not affect processing already carried out.
If you believe we have mishandled your data, you can complain to the Israeli Privacy Protection Authority (PPA). EU/EEA users may also complain to their local data-protection supervisory authority.
We are based in Israel and direct Archyy to families in Israel. Some of our providers (including Supabase and the sign-in providers) may store or process data outside Israel, including in the EU/EEA and the United States. When data is transferred abroad, we do so in accordance with the PPL's transfer rules (including the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 2001) and, where the GDPR applies, on the basis of an adequacy decision (Israel benefits from an EU adequacy recognition) or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of Archyy after a change means you accept the updated policy, to the extent permitted by law.
For any privacy question, or to exercise your rights, contact us at:
Archyy — operated by [LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Email: hello@archyy.com
We will handle your request in line with the PPL and, where applicable, the GDPR.