Noviq Privacy Policy

This policy explains what personal data Rallyve (“Noviq”, “we”) processes when you visit noviq.rallyve.com, use a Noviq workspace, or have data about you entered into one — why we process it, where it lives, how long we keep it, and the rights you have over it.

This policy is published in Hebrew and in English. The Hebrew version is the binding version; this English text is provided for convenience. Questions and requests: support@rallyve.com.

1. Who this policy covers

It covers four situations, with different data in each:

• Visitors — you browse our public pages without signing in.
• Account holders — you created a Noviq account (for example, you set up a workspace for your organization, or accepted an invitation and signed up).
• Workspace members — your employer (or another organization you work with) uses Noviq to schedule your shifts, and data about you exists in its workspace. Some of that data may have been entered by your employer rather than by you — section 3 explains who is responsible for it.
• Business contacts — you contacted us about using Noviq where you work, or somebody at your organization did. You may have no Noviq account at all.

2. What we process, and why

Visitors

• Essential cookies — a session cookie (only after you sign in), your language choice, and your cookie-consent choice. Details in the Cookie Policy.
• Analytics — only if you opt in. See section 5.
• Technical logs — our hosting provider and error monitoring may record technical request data (such as IP address and browser type) needed to operate and secure the site.

Business contacts and people who contact us

If you ask us for a demo or write to us about using Noviq where you work, we keep what you sent — your name, your work email address and phone number if you gave one, your organization and its approximate size, and anything you wrote — together with our own notes of the calls and emails that follow. We use it to answer you and to keep our record of the conversation. Our basis is our legitimate interest in responding to an enquiry you chose to send us.

We will not send you marketing without asking you first. Nothing is sent to the address you give us except a reply from a person.

If the conversation does not lead anywhere, we delete our record of you 24 months after we last had contact. If your organization becomes a customer, we keep it for as long as the relationship lasts and for 24 months afterwards. An enquiry nobody answered is deleted within 90 days. You can ask us to delete your details at any time — section 9 explains how.

Account holders

• Account data — name, email address, password (held by our authentication provider in protected form — we never see or store the password itself), profile photo if you add one, and preferences such as language and theme. Used to operate your account and sign you in.
• Signing in with Google or Apple — if you choose to, Google (or, in the iPhone app, Apple) gives us your name and email address; Apple lets you share a private relay address instead of your own. A Google profile picture is shown straight from Google’s servers, so your browser loads it from them. An invitation may also sign you in once through a link sent to your email.
• Feedback you send us — when you use “Share feedback”, we keep your message with your name, email address, role, workspace and language, and the page or app version you sent it from (on the web, also your browser type). It reaches us in our system and by email, and is deleted 24 months after you send it.
• Phone notifications — if you allow notifications in the phone app, we store an address for your device (a push token) so we can deliver them. It is removed when you delete your account.
• Consent records — which version of the Terms and this policy you accepted, when, and from which flow. Kept as evidence of agreement.
• Security and audit records — actions that change workspace data (for example, approving a leave request) are recorded in the workspace’s audit log together with the acting user’s identity. Used for security, accountability, and troubleshooting.

Workspace members

A workspace contains the data your organization needs to schedule and manage shift work:

• employment profile — name, email, phone, role, teams, employment dates, weekly hours, employee number;
• scheduling data — shift assignments and published schedules;
• availability you declare;
• leave requests and their status — note that a leave type (such as sick leave) can indicate sensitive information, and we treat it with heightened care;
• documents you attach to a leave request (for example, a doctor’s note or a reserve-duty call-up order) — kept with the request and seen by the people who handle it;
• timesheets — attendance, hours, and the pay-relevant summaries computed from them;
• time-clock punches — when you clock in or out, the time (recorded by our servers) and, only if you use the mobile app and grant location permission, a one-time location fix at the moment of the punch. Noviq never tracks your location in the background or between punches. Your employer chooses how that fix is used, and the app shows which setting applies to you:
  • No check, or a check by scanned code only — no location is requested or stored at all. No check is the default for every workspace.
  • A check by location — the fix is compared against your employer’s registered work sites. Your employer separately chooses what happens if you are away from every site: either the punch is recorded and flagged for your manager to review, so you can tell them why, or clocking IN is refused.
  • A check by either location or a scanned code — the app tries location first and, if that cannot confirm you, offers you the printed code at the site instead. Declining location permission does not by itself prevent you clocking in where this applies.
  • A check by both — you must be within a registered site and scan its code to clock IN.
  Whatever your employer chooses, you can always clock OUT, wherever you are and whether or not location is available: we will never leave you unable to end a shift you have worked. Where a location check is in use, we keep only its result with the punch: which site, whether you were within it, and the distance to its centre in whole metres. Your coordinates themselves are not stored (coordinates recorded before 18 September 2026 are deleted 30 days after they were recorded);
• employment documents — files your employer’s administrators or managers attach to your file (contracts, certifications, identification, policies), with optional expiry dates and your receipt confirmations. You are notified in-app whenever a document is added to your file, and you can always see and download your own documents;
• date of birth — only if your employer records it. Used to apply the rules the Youth Employment Law sets for workers under 18 (see section 11) and, if your employer connects its payroll system, sent to that system on your employee card, which it needs to work out your pay. Visible to you and to your employer’s workspace administrators;
• hourly rate — if your employer records it. Visible to you, to your employer’s workspace administrators and to its finance role;
• ID number — your Israeli ID number, or a passport number if you have none, if your employer records it. Used only to match you in your employer’s payroll system when it hands over your hours, and to bring your payslips back from it. Visible to you, to your employer’s workspace administrators and to its finance role;
• payslips — if your employer connects its payroll system and turns this on, Noviq brings your monthly payslip from that system and keeps it for you. A payslip shows your pay, deductions, tax and the bank account your pay goes to. Visible to you, to your employer’s workspace administrators and to its finance role, and never to managers. You are notified when a new one arrives, and every opening of a payslip is logged;
• weekly rest day — the day your employer sets as your rest day (Saturday unless it records another day). Because it can reflect your religion, it is used only for the working-time and rest rules;
• notes your employer’s workspace administrators write about you — not shown to you in the app, but included when you download your data;
• answers you give to your employer’s forms and checklists, including files you upload, and tasks assigned to you with whether they were done;
• shift swaps and open-shift claims you take part in, and your break bookings;
• a private calendar link, if you create one to see your shifts in your own calendar app. Anyone who has the link can read your schedule through it, and you can replace it at any time;
• in-app notifications addressed to you.

Data not collected from you directly: some of this data is entered by your employer’s administrators or managers (for example, your employment profile or shift assignments), and your payslips come from your employer’s payroll system. It is used solely to operate the workspace for your employer. You are not legally required to provide data yourself; data you do provide (such as availability, a phone number or a photo) is provided voluntarily. If you do not provide availability, your manager schedules you without knowing your preferences; nothing else follows from it. Records of the hours you work are different: your employer is required by law to keep them. Within the workspace, your data is visible according to role — for example, your manager sees your team’s schedules, and finance-role users see pay-relevant summaries and payslips.

3. Who is responsible for your data

For workspace data, your employer (the workspace’s organization) is the controller — the “owner of the database” under the Israeli Protection of Privacy Law. It decides what data is entered and who in the workspace can see it. We act as its processing service provider (“holder”), hosting and processing the data only to provide the Service, under the data-processing terms at /legal/dpa. Your employer is responsible for informing you about the data it manages about you; this policy is part of how that information is made available.

For account data, consent records, feedback, business-contact records and analytics, we are the controller: Rallyve, an unregistered Israeli partnership of Lior Sionov and Adiel Label. Email: support@rallyve.com.

4. Cookies

We use a small set of essential cookies (sign-in session, language, consent choice) and, only with your opt-in consent, analytics cookies. The full list, lifetimes, and how to change your choice are in the Cookie Policy.

5. Analytics and error monitoring

• Product analytics (PostHog) — runs only if you opt in via the cookie banner. We use it to understand which parts of the product are used (page views, feature usage). You can withdraw consent at any time via “Cookie settings” in the footer.
• Error monitoring (Sentry) — when something breaks, an error report (error details, browser type, technical context) is sent so we can fix it. This is necessary to run a dependable service, so it does not wait for consent; reports carry no name, email address or cookies. In the phone app, a crash report also carries the device model and the operating-system and app versions. Session-replay capture, which records more context about what was on screen when an error happened, runs only if you opt in.

6. Where your data is stored

The Service is hosted on Google Cloud / Firebase, with data stored in the United States. We rely on contractual data-protection commitments with Google (including its data-processing terms) and industry-standard safeguards — encryption in transit and at rest, access controls, and audit logging — in accordance with the Israeli Privacy Protection (Transfer of Data Abroad) Regulations. By using the Service you acknowledge that data is processed in the United States as described here.

7. Who we share data with

• Subprocessors — service providers that host or process data on our behalf: Google (hosting, database, sign-in, and the mail relay that delivers every email we send), PostHog (analytics, only if you opt in), Sentry (error monitoring), Expo (phone notifications, and the update check the phone app makes when it opens) and Apple (Sign in with Apple and iPhone notifications). The current list, including locations, is at /legal/subprocessors. Expo also uses technical details it receives from the phone app, such as the phone’s IP address, for its own purposes: to analyse usage trends in aggregate and to improve its service. For that use Expo acts independently of us, under its own privacy policy.
• Integrations your employer connects — for example, if your employer connects Slack notifications, workspace notification content is sent to its Slack workspace; a webhook your employer sets up sends a fixed set of fields about workspace events to an address it chooses; and if your employer connects its payroll system (such as Maskoreshet), Noviq sends that system each month your employer closes for payroll, with your employee card, and brings your payslips back from it. What reaches the payroll system is your employer’s record there.
• Services we look things up from — when an administrator places a work site on the map, the site’s address is sent to OpenStreetMap’s address search (Nominatim), and holiday dates come from Hebcal and Nager.Date. None of them receives personal data.
• Legal requirements — we may disclose data where required by law or a binding order, and to protect the Service and its users.

We do not sell personal data, and we do not use workspace data for advertising.

8. How long we keep data

9. Your rights

Under the Israeli Protection of Privacy Law you may inspect data held about you and request the correction or deletion of inaccurate data. We honor these rights, and where feasible we go further:

• Export — you can download a copy of your personal data from your profile page on the website: profile, memberships, schedules, availability, leave requests and their attachments, timesheets, time-clock punches, your date of birth, hourly rate and ID number where recorded, documents on your file, the list of your payslips (each payslip downloads from your profile), form answers, tasks, swaps and open-shift claims, and notifications. On the phone, the “Your data” row in Settings opens that page. The website cannot sign in an account created with Apple in the iPhone app; if that is yours, write to us and we will send you the same export.
• Correction — your own details can be edited in your profile; employment records managed by your employer should be corrected through its workspace administrator.
• Deletion — you can delete your account from the app. Deleting your account removes your sign-in, your contact details and personal profile data, your date of birth, your availability, pending requests and the documents attached to them, your private calendar links and your phone’s notification address; it also takes you off open tasks and withdraws your pending swaps and open-shift claims. One important limit: records your employer must keep by law (such as wage and attendance records, and payslips) remain in the employer’s workspace, identified, for the statutory period — deletion strips your contact details and preferences from them but does not destroy them. Nor does it reach what was already sent to your employer’s payroll system, which is your employer’s record there.

For anything you cannot do in the app, write to support@rallyve.com. We respond within 30 days. If you believe your privacy rights were violated, you may also contact the Israeli Privacy Protection Authority.

10. Security

We apply technical and organizational measures appropriate to the data we process: role-based access control in every workspace, encryption in transit and at rest, server-side enforcement of all data writes, audit logging of every change, and the protections of our hosting and authentication providers. No system is perfectly secure, but security failures are treated as top-priority incidents, and where the law requires notification of a data breach we will notify the authority and those affected.

11. Minors at work

The Service is a workforce tool and is not directed at children. It is used by employers, some of whom lawfully employ young people: in Israel, from age 15, or 14 during school holidays (Youth Employment Law, 5713-1953). A young worker uses the Service on their employer’s behalf, like any other employee.

Where an employer records the date of birth of an employee under 18, it does so to apply the working-time rules that law sets for young workers, such as the limits on night work and weekly hours. The date is visible to that employee and to the employer’s workspace administrators, and is deleted when the account is deleted. If the employer connects its payroll system, the date also goes on the employee’s card there (see section 2). The employer is responsible for the approvals and any parental consent the law requires. Anyone who creates or administers a workspace must be 18 or over.

12. Changes to this policy

We may update this policy from time to time. Each version is dated, and the current version is always at noviq.rallyve.com/legal/privacy. For material changes we will give notice in the Service, and where the change concerns data users actively agreed to provide, we will ask for renewed acceptance.

13. Contact

Privacy requests and questions: support@rallyve.com. General support: support@rallyve.com.