Privacy Policy

The operator of Rega / רגע (“Rega,” “we,” “us,” or “the company”) respects users’ privacy. This policy explains what information we process through the website, the app, and the Numa service, for what purposes, with whom it may be shared, what your rights are, and how to contact us.

In short: We do not sell your conversations or personal details to third parties. Personal conversations with Numa are not used to train Rega generative models and are not transferred to third parties for marketing purposes. There is no unrestricted access to user conversations; access is granted only to a small group of authorized role holders and for defined purposes such as support, security, handling a malfunction, reviewing misuse, a legal obligation, or your explicit authorization.

Important to know: No digital system can guarantee absolute security or absolute confidentiality. We operate accepted and strict security measures, but the use of online services inherently involves risks. Do not enter information into the service that you do not want processed for operation of the service.

1) Who are we and how can you contact us?

Service operator: Rega Ltd. / רגע בע״מ.

For privacy, information security, deletion, access, or correction requests: hello@rega.co.il. We recommend using the email subject: “Privacy Request – Rega”.

2) Scope of this policy

This policy applies to the use of the website rega.co.il, the Rega app, meditation and sleep content, the Numa service, support and customer service systems, and any other digital service that we operate and that refers to this policy.

When this policy refers to “personal information,” it means information that identifies you or can reasonably be linked to you, including information that may be sensitive, such as information about mental state, health, sleep habits, feelings, relationships, or personal conversation content.

3) What information do we process?

Information provided directly to us

• Account and identification details: name, email, phone, user ID, display name, and login details.
• Login details through Apple, Google, Facebook, or a similar service, if you chose to log in through it.
• Content you initiate: support requests, questionnaires, preferences, comments, ratings, and feedback.
• Conversations with Numa: messages you wrote, answers you received, contexts the system stores to enable continuity, and marks or feedback you gave about the conversation.

Sensitive information provided voluntarily

Numa and other Rega content may be used by you to talk about stress, anxiety, sleep, trauma, emotional state, or other personal topics. You are not required to provide sensitive, medical, or identifying information. If you choose to share such information, it will be processed for providing the service, personalization, security, support, legal compliance, and preserving continuity of use as described in this policy.

Do not enter personal or medical information about another person without appropriate authorization from that person.

Usage and technical information

• Device identifiers, IP address, operating system, app version, browser type, language, general region, usage times, screens viewed, clicks, usage events, and crashes.
• Subscription and purchase data through the App Store, Google Play, the website, or subscription and payment providers such as RevenueCat or payment processors. We do not store full credit card details.
• Cookies, pixels, and measurement tools on the website and app, including tools from Google, Meta, Vercel, and similar providers, to the extent they are active, for operation, security, measurement, attribution, analytics, and marketing.

4) Why do we use information?

• Operating the service, opening an account, user authentication, subscription management, and customer support.
• Preserving continuity of use and personalizing content, practices, and conversations with Numa.
• Generating an AI response within the same conversation, storing history according to the service settings, and documenting contexts intended to improve relevance for you.
• Information security, malfunction monitoring, fraud prevention, misuse prevention, and improving service stability.
• Measurement, internal research, and improving the service using aggregated, statistical, or anonymized data as much as possible.
• Service communications, policy and terms updates, and handling privacy requests.
• Marketing and mailing only subject to law and required consents, including an unsubscribe option.
• Compliance with legal obligations, orders, regulatory requirements, and protection of our rights or users’ rights.

5) Processing Numa conversations and AI providers

So that Numa can respond, your messages and some conversation contexts may be sent to artificial intelligence, cloud infrastructure, and language-processing providers through a secure and encrypted API. To the extent possible, we reduce identifying details before transferring information to providers; however, if you wrote a name, phone number, health details, identifying details, or information about a third party in the conversation, that information may be included in the text sent for processing.

AI and infrastructure providers operate as processors on our behalf or as external providers subject to contractual commitments. To the best of our contractual control, the information is intended for producing the response, security, misuse prevention, operating the service, and legal compliance, and not for third-party marketing or training public models without consent. Providers may retain data for a limited period for security, misuse monitoring, troubleshooting, or legal obligation purposes according to their agreements and policies.

We do not use identified conversations to train Rega generative models, and we do not sell or rent conversations. We may use aggregated, statistical, anonymized data, or data that does not reasonably identify a person, to improve the service, measure quality, understand common uses, and develop new capabilities.

6) Who can see my conversations?

There is no unrestricted or broad access to user conversations. Access to conversations, if required, is limited to a small group of authorized role holders, according to role-based need and subject to permissions, confidentiality, and access controls.

Human access may occur only in specific cases, such as: handling your support request; checking or fixing a malfunction; security or misuse review; handling a safety event; fulfilling a legal obligation; protecting our rights; or when you have given explicit approval. Conversations are not monitored in real time by a therapist or staff member, and you should not rely on any person on our behalf reading or identifying distress in real time.

7) With whom do we share information?

We share information only as needed and for the purposes listed in this policy, subject to agreements or an appropriate legal basis:

• Cloud infrastructure, hosting, database, information security, malfunction monitoring, and support providers.
• AI, language-processing, search, transcription, or automation providers required to operate Numa or the service.
• App stores, subscription providers, payment processing and payment management providers.
• Analytics, advertising, measurement, and attribution providers, including Google, Meta, Vercel, and similar providers, subject to law and consent settings where required.
• Professional advisers, lawyers, accountants, insurers, and business service providers.
• Competent authorities, courts, or other parties when there is a legal obligation, order, regulatory requirement, need to protect rights, or a real concern of harm to a person or the public.
• As part of a reorganization, merger, investment, sale of activity, or transfer of assets, provided that the information continues to be protected according to law.

We will not sell personal information or conversations for third-party marketing.

8) International transfers

Some of our providers and infrastructure may operate outside Israel. Accordingly, information may be processed or stored in Israel, the United States, Europe, or other countries. We work to use contractual, organizational, and technological safeguards according to applicable law, including requirements of Israeli law regarding transferring information outside Israel.

9) Retention and deletion

• Account and subscription data: retained while the account is active and then for the period needed for operation, law, accounting, fraud prevention, and legal defense.
• Conversations with Numa: retained to enable continuity, history, personalization, and support, unless you requested deletion or another deletion rule is set in the product. We may delete conversations or anonymize them after a period of inactivity.
• Technical, security, and crash logs: usually retained for a limited period needed for security, troubleshooting, and service improvement.
• Backups: deletion from active systems may not immediately delete backup copies, but they will be deleted or overwritten according to our backup cycles.
• Information we are required to retain: we may retain certain information if required by law, for legal defense, fraud prevention, collection, security, or handling a dispute.

You can request deletion of an account and data through hello@rega.co.il. We will handle requests within a reasonable time and subject to exceptions set by law.

10) Your rights under Israeli law

Subject to applicable law, you may request to review personal information held about you, receive information about its processing, correct inaccurate information, delete information that is no longer needed, object to certain uses, withdraw consent for marketing mailings, and request clarifications regarding information processing.

To handle a request, we may ask for reasonable identity verification. If we cannot fully comply with a request, we will explain the reason to the extent possible under law.

11) Information security

We implement organizational and technological security measures intended to protect personal information, including encryption in transit, encryption at rest in relevant systems, access controls and permissions, monitoring, environment separation, secure cloud providers, periodic reviews, and incident response procedures. Conversations and sensitive information are stored in secure cloud infrastructure, and relevant systems use strong encryption such as AES-256 or an equivalent standard.

That said, no system is completely secure. We do not undertake that there will be no intrusion, malfunction, loss, unauthorized use, or event outside our control. In the event of a security incident requiring reporting, we will act according to law.

12) Your choices and control

• You may request deletion, access, or correction through hello@rega.co.il.
• You may unsubscribe from marketing mailings through an unsubscribe link or by contacting us.
• You may control some device permissions through your phone settings.
• If you want to add a privacy layer on the device itself, you may configure the operating system to open apps using Face ID, Touch ID, fingerprint, or passcode, to the extent the device supports it.
• We recommend avoiding entering full names, identity numbers, addresses, third-party details, or identifying medical information when it is not needed for the conversation.

13) Minors

The service is intended mainly for adults. Opening an account and independent use of the service are intended for users aged 18 and older, unless expressly stated otherwise and subject to parent or guardian consent. Content intended for children, if any, is intended for use under parent or guardian supervision. We do not knowingly collect information from children under age 16 without appropriate consent. If you learn that information was collected from a child contrary to this policy, contact us and we will act to delete or adjust it.

14) The rega.co.il website, cookies, and advertising

The website may use cookies, local storage, tags, pixels, and measurement tools for operation, security, improving user experience, performance measurement, advertising, remarketing, and conversion analysis. These providers may receive online identifiers such as Cookie ID, IP address, User Agent, landing pages, click events, and conversion data.

You may block or delete cookies through browser settings. Blocking may impair some website functions or the ability to measure activity. To the extent consent is required by law to activate non-essential cookies or pixels, we will act to obtain consent or enable choice according to the mechanisms available on the website.

15) Changes to this policy

We may update this policy from time to time. In the event of a material change, we will update the website, app, or another channel at our discretion and according to law. Continued use of the service after the policy is updated constitutes agreement to the updated policy, to the extent permitted by law.

16) Questions and requests

For any question about privacy, information security, Numa, deletion, or user rights, contact us at hello@rega.co.il.