Privacy Policy
The Decision Clinic ("the Clinic", "we", "us") is committed to protecting the privacy of the people who use it ("user", "you"). This Policy describes how the Clinic collects and processes information about you when you use our website (the "Website"), our Platform (as defined below), and our Services.
The Clinic is a medical decision-support service, offered by a collaboration of independent doctors, each licensed in Israel and working together to offer this service. Licensed doctors review your case and discuss it with you. Other healthcare professionals or relevant professionals may also take part, depending on the decision you are facing. Dr. Chaim Haber is responsible for managing the medical information, which is kept in Tipulog (see (c) below). The doctors of the Clinic are jointly responsible for all other information we hold about you (the database owners). When the doctors collaborate on your case, your medical information is held in one place: a single shared record of your case in Tipulog, rather than separate copies kept by each doctor.
This Privacy Policy explains:
- What information we collect and why we collect it.
- How we use that information and who we share it with.
- How we secure your information and how long we keep it.
- Your rights with regard to your information.
Agreement and Consent
By using the Website and Platform, and when receiving the Services, you agree to this Privacy Policy. If you do not agree with it, please do not use the Website, Platform or Services, and do not provide us with your Personal Information (as defined below).
This Policy tells you what we do. It is not, by itself, your consent to the use of your health information. That consent is a separate, explicit step after the introductory call, given in the "Before your session" consent form, which you sign and return to us. We keep the signed form for as long as we keep your medical record. You may refuse it, or withdraw it later. If you do not consent to the processing described below, we may not be able to provide the Services to you.
You are not legally required to give us your information. Giving it is your choice. But the doctors cannot review your case safely without full and accurate medical information, and the law requires them to keep an accurate medical record based on what you provide. If you do not provide the information we need, we may not be able to provide the Services.
The law we follow. We handle your information under Israeli law, in particular the Protection of Privacy Law, 5741-1981 (as amended by Amendment 13) and its regulations, including the Protection of Privacy (Data Security) Regulations, 5777-2017; the Patient's Rights Law, 5756-1996; the Public Health Regulations (Medical Records Retention), 5737-1976; the Ministry of Health's guidance on telemedicine; and the rules of medical ethics on medical confidentiality. We process your information on the basis of your consent, to provide you with medical services, and to meet our legal obligations.
General
The Clinic accompanies people who face a complex or high-stakes medical decision. Licensed doctors review the medical documents you provide. We go through the recommendation/s you received from your doctor/s or healthcare professional/s. We work with you to figure out if there is an option that hasn't been raised or was under-emphasised. We help you understand the trade-offs for each option taking into account your personal values and preferences. We do not tell you which one to choose. The decision is yours (the "Services").
The Services are delivered through a web or mobile application, video calls, email and other channels through which you send us documents, book and attend your calls and sessions, and receive your summary (the "Platform"). The Website provides information about the Clinic and the Services and lets you contact us when you wish to do so.
Devices
You can access the Website and Platform through various devices. A "Device" is any digital device used to access the Website and Platform, including a desktop or laptop computer, a mobile phone, a tablet, or any other consumer electronic device. This Privacy Policy governs your use of the Website and Platform however you access them.
Collecting Information
This Privacy Policy covers only information the Clinic collects through the Website, the Platform and the Services. It does not cover medical records held by your own doctors, your health fund (Kupat Cholim), your insurer, or any hospital.
Information collected automatically. When you use the Website or Platform, some technical information is collected automatically by our hosting providers: your IP address and the approximate location it reveals, the type of Device, operating system and browser you use, the date and time of your visit, and the pages and content you access. We use it to operate and secure the Website and Platform and to understand, in aggregate, how they are used (see Cookies). We do not use it to build a profile of you, and we do not collect the precise location of your Device.
Personal Information. Information from which you can be identified may also be collected, including your name, date of birth, address, email address, telephone number and health-related information ("Personal Information"). Personal Information is collected only when you give it to us voluntarily, including in the following ways:
a. The request form and registration. If you fill in the request form on the Website, we receive your name, email address and, if you choose to write it, a few words about the decision you are facing. We use it only to contact you and arrange an introductory call, and we ask you not to send detailed medical information at this stage. Your name and email address are held by our website data provider, and the few words you write reach our business email (Google Workspace). If you go ahead with the Services, we first move what we need into your record we open for you in Tipulog. If you then request the Services, we collect your full name, date of birth, email address and phone number.
b. Your health-related information. We can provide the Services only if you share your health-related information with us. This may include your medical condition and background, medical history, test and imaging results, consultation letters and discharge summaries, medications, your treating doctors, imaging files or discs, and any other medical document you choose to share with us. After your introductory call, we tell you which documents to send and how: through a private upload link to a Google Drive folder on our business Google Workspace account, or, if you do not have a Google account, by email to our business address. We move your documents into your record in Tipulog and permanently delete them from Google Drive and email within 14 days.
c. Your case and appointments. We keep a file for your case. It includes your contact details, the health-related information described in (b), your introductory call, session and follow-up dates, the doctors and other professionals taking part, and your written summary. We use your appointment details to keep you updated and to remind you of your calls and session. Your medical documents and medical record are kept in Tipulog (טיפולוג), a clinic management system operated by Cliniclicks Ltd. (קליניקליקס בע"מ), an Israeli company, and stored on its servers in Israel. We may also use Tipulog to schedule your calls and session and to issue your invoice or receipt. (Tipulog's privacy policy)
d. Calls, sessions and recordings. We may record your introductory call. We record your session on our video call platform, which transcribes it automatically. We use them to keep an accurate record of your case, to give the doctors accurate context, to prepare your written summary, for quality review, and to resolve any question about what was said. If you prefer not to be recorded, tell us before the call or session starts, or ask us to stop at any point, and we will take written notes instead. Our video call provider stores recordings and transcripts on its servers outside Israel. Within 7 days we move the transcript and the audio recording into your record in Tipulog (or, if Tipulog cannot hold the audio file, into our business Google Workspace account), and the recording and transcript are deleted automatically from the video call platform after 30 days. We do not use recordings or transcripts for advertising, publication, teaching or research.
e. Payment information. The price is agreed when you book, and you pay for the Services once, after your introductory call and before your session, to the provider designated by the Clinic, through Bit (operated by Bank Hapoalim), PayBox (operated by Israel Discount Bank) or bank transfer. When you pay by Bit or PayBox, the app shares your name, phone number and the amount paid with the person you pay. Your bank and card details stay with the app, and we never see them. Bit and PayBox handle your payment under their own privacy policies. When you pay by bank transfer, the person you pay receives your name and account details from your bank, as with any transfer. They issue your receipt and keep invoices and receipts for the period that tax law requires.
f. Your doctors and the people you choose. If you choose to involve a doctor or a family member, carer or another person in your case (for example, to join your session or receive your summary), we collect their contact details and their relationship to you. They receive only what you authorise. You can change or withdraw a person's access at any time by contacting us, and we stop sharing with them from that moment. A summary already sent to your own doctor stays with them and cannot be recalled, so we confirm with you before we send it. You confirm that you have the necessary rights and consents to give us information about these people and to allow us to contact them. If someone acts for you under a legal guardianship or a lasting power of attorney (ייפוי כוח מתמשך), we will ask to see the document that authorises them.
g. Contacting us. If you contact us for support or about the Services, the Website, this Privacy Policy or any other matter, by email at the-decision-clinic@healthei.io, we collect what you provide so we can handle your inquiry.
h. Communication channels. We may collect Personal Information when we interact with you directly, in person or through communication channels such as phone, email, video calls and others. We collect what you choose to share with us through these channels.
Automated Tools and AI
Your session is transcribed automatically by our video call platform, as described in (d) above. We do not enter your name, medical documents, recordings, transcripts or any other information that identifies you into generative AI tools. Our doctors may use AI tools to research medical literature relevant to your case, but only with general clinical questions that contain no identifying details. Your doctors write your summary themselves.
In your session you always talk to licensed doctors, never to an AI. No AI tool makes a decision about your care. Anything from AI-assisted literature research that informs your session is reviewed by a licensed doctor, who remains responsible for the professional input they provide. If we ever materially change how we use AI with information that identifies you, we will update this Policy and ask for any additional consent required before doing so.
How We Use Information
We use your information to provide the Services; to communicate with you about your case, calls and session; to keep a medical record as the law requires; to process payment; to operate, secure and improve the Website, Platform and Services; and to meet our legal obligations.
We will not send you marketing or newsletter messages unless you have agreed in advance to receive them, as the Communications Law (Bezeq and Broadcasts), 5742-1982, s.30A requires. Agreeing to this Policy is not consent to marketing. You can unsubscribe from any marketing message at any time, free of charge, by clicking "unsubscribe" or replying "remove".
Service messages are different. Even if you do not receive marketing, we will still send you messages needed for your care, such as booking confirmations, reminders, instructions before your session, and notice that your summary is ready. These are not marketing.
We may use statistical information that cannot identify you, to understand and improve the Services. We will not use your information for research, and will not share it with researchers, without your separate consent.
Disclosure of Information and Transfer of Data
We do not sell your Personal Information. Except as described in this Policy, or as permitted or required by law, we do not disclose your Personal Information to any third party without your permission. Your medical information is also protected by medical confidentiality under the Patient's Rights Law, 5756-1996.
To provide the Services and meet our legal duties, we may need to share your Personal Information as follows:
Medical and other professionals. With the licensed doctors and any other professionals who take part in your case, each within their own field, and with clinic staff who help run your case. Doctors and other regulated healthcare professionals are bound by medical confidentiality. Anyone else who takes part is bound by a written confidentiality commitment. Each of them sees only what they need for your case.
Your doctors and the people you choose. With your own doctors and the people you authorised under (f) above, only when you ask us to.
Service providers. With third-party service providers that operate parts of the Services for us, such as hosting, data storage, email, video calls, payment and maintenance. Today these are: Tipulog by Cliniclicks Ltd. (medical documents and records, scheduling and invoices), website hosting, data and email-delivery providers (never identifiable medical information), an online scheduling provider (booking your introductory call), our video call provider (video sessions, recording and transcription), Google Workspace (email, request form submissions, secure document upload, and storage of signed consent forms), and Bit (Bank Hapoalim) or PayBox (Israel Discount Bank) (payments).
Your insurer, at your request. We do not deal with your health fund or insurer on your behalf. If you want to claim a refund, we give you the receipt and documents you need, or send them to your insurer if you ask us to in writing.
Legal claims. If there is a dispute or claim between you and the Clinic or its doctors, we may share the relevant information with our legal advisers and with the doctors' professional liability insurers, as needed to handle it.
Analytics. With analytics service providers, who may set their own cookies or similar technologies on your Device and collect information about how you use the Website, such as the pages you visit and how long you stay. This helps us compile aggregated statistics about how well the Website works. We never send them your health information or what you write in the request form. See Cookies below.
Service providers may access your Personal Information only to perform these tasks for us, under written obligations at least as protective as this Policy. They must follow our privacy and security requirements and may not use your information for any other purpose.
Transfer abroad. Your medical record is stored in Israel, on Tipulog's servers. Signed consent forms, and any session audio recordings that Tipulog cannot hold, are kept in our business Google Workspace account, on Google's servers outside Israel. Some information is held abroad only for a limited time, until we move it into Tipulog or delete it: medical documents you send us through Google Drive or by email (up to 14 days), session recordings and transcripts with our video call provider (up to 30 days). Some of our other providers are located outside Israel, mainly in the United States and the European Union, and we may send them the information they need. We transfer Personal Information abroad only as the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001 allow, and use legal mechanisms, including contracts, to make sure your rights and protections travel with your data.
Change of practice. If the Clinic's practice is merged, sold, or transferred to another practitioner or body, your information may be transferred as part of it. Medical records will be transferred only to a party bound by the same confidentiality and record-keeping duties, and we will tell you before it happens.
Legal requirements and special cases. We may release information to comply with a valid legal requirement, such as a court order, warrant, subpoena or statute. We may also release specific information where necessary if you use the Website, Platform or Services to commit an unlawful act; to investigate or respond to an attempted breach of our security; or where there is a real danger to your life or health or to someone else's. In any of these cases we release only what is necessary, and your medical record only where the law allows.
The authority that supervises the protection of personal information in Israel is the Privacy Protection Authority (הרשות להגנת הפרטיות). You have the right to file a complaint with it or with any other relevant supervisory authority.
Your Rights
Under the Protection of Privacy Law, 5741-1981 and the Patient's Rights Law, 5756-1996, you have the following rights:
Access. You may request a copy of some or all of the Personal Information we hold about you, including your medical record. The first copy is free. We may charge a fee permitted by law for further copies.
Correction. We want your information to be accurate and up to date. You may ask us to correct information you think is inaccurate. We correct factual errors. A doctor's clinical assessment is not rewritten, but if you disagree with it, your own account is added to your record, in your words.
Deletion. You may ask us to delete your information, subject to the medical record retention described under Data Retention.
Withdrawing consent. You may withdraw your consent to processing at any time. This does not affect processing already done, and we may then be unable to continue providing the Services.
You may exercise these rights yourself, or through someone you authorise in writing, your legal guardian, or a person acting under a lasting power of attorney. We will not refuse you the Services or treat you differently because you exercised any of these rights.
To make a request, contact us at the address below. Because medical information is highly sensitive, we will verify your identity (and, where relevant, the authority of the person acting for you, for example with a copy of an ID card) before acting on it, and respond without undue delay and within the time the law sets. If we decline to act on your request, we will tell you why, and how you may appeal or complain to the Privacy Protection Authority.
Cookies
We use "cookies" and similar technologies (together, "cookies") to understand how visitors use the Website and to improve it. Cookies are small files a website stores on your Device. Some may help the Website work properly, for example by remembering your preferences. Others may be analytics cookies set by our analytics provider, which record information such as the pages you visited, how long you stayed, and the general location from which you accessed the Website. We use this information in aggregate. We do not use advertising cookies, and we do not use cookies to build a profile of you from your health information.
You can set your browser to reject cookies or to delete cookies already stored on your Device. If you do, some parts of the Website or Platform may not work fully.
Links to Other Websites
The Website and Platform may link to other websites. Those websites are not covered by this Privacy Policy, and we are not responsible for the privacy practices of providers, advertisers, websites, companies or individuals that the Clinic does not own or control. When you follow a link to another website, we suggest you read its privacy policy before giving it any personal information.
Data Security
Your health information is highly sensitive information, and we protect it accordingly, in line with the Protection of Privacy (Data Security) Regulations, 5777-2017. We use physical, technical and administrative safeguards to protect the security, confidentiality, integrity and availability of the Personal Information we process, and we test and update them periodically. Access to Personal Information is limited, on a need-to-know basis, to the people who need it to provide the Services to you. We choose service providers that meet recognised information security standards for health data, and we do not send medical information through tools that are not designed for it.
You can help too: protect the phone or computer you use to contact us with a password or biometric lock, and tell us at once if you suspect anyone has used your details. Please do not post personal medical information in public comments on our social media pages. Those platforms are not covered by medical confidentiality.
No security measures are perfect or impenetrable. If a serious security incident occurs, we will take all reasonable steps to minimise the harm, report it to the Privacy Protection Authority, and notify you where the law or the Authority requires.
Data Retention
As a rule, we keep information only as long as needed to provide the Services and for our lawful needs.
Your medical record. Once a doctor has reviewed your case, the documents, notes, session transcript and written summary form a medical record. Israeli law requires us to keep medical records for a set period, under the Public Health Regulations (Medical Records Retention), 5737-1976. We keep your medical record for up to 7 years from your last contact with us, or longer if the law requires it or it is needed to establish, exercise or defend a legal claim. During that period we cannot delete it, even if you ask or withdraw your consent, but we will not use it for any other purpose.
Other information. Generally, we do not retain information longer than necessary to provide our Services and for our reasonable business and lawful needs. If you withdraw your consent to us processing your data, we will erase your Personal Information from our systems, unless the data is required for the clinic to establish, exercise or defend against legal claims or it is necessary for the performance of the requested Services. Health information copies held outside Tipulog are deleted on a fixed schedule: medical documents on Google Drive or email within 14 days, and session recordings and transcripts with our video call provider after 30 days.
How to delete your information. Email us at the address below. We will confirm in writing what was deleted and what we are required to keep.
Children's Privacy
The Services are intended for adults aged 18 and over. We do not knowingly collect information about anyone under 18.
Questions Regarding Our Privacy Policy
If you have any questions about this Privacy Policy or the practices it describes, or wish to exercise any of your rights, contact us at the-decision-clinic@healthei.io. Liat Zussman Cana is the Data Protection Officer appointed.
Revisions and Modifications to Our Privacy Policy
We may revise, amend or modify this Privacy Policy from time to time. When we do, we will update this page and the date below.
Governing Law and Jurisdiction
This Privacy Policy is governed by and interpreted under the laws of the State of Israel, without regard to its choice of law rules. The competent courts in Tel Aviv, Israel have exclusive jurisdiction over any claim arising from or relating to this Privacy Policy.
This page was last updated on 12 October 2026.