PRIVACY
Privacy Policy
Your privacy is our priority. Learn how we protect your data.
Last updated 27 October 2026
Introduction
Your Privacy is Important to Us
We respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our app.
We respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our app.
Data Collection
Information We Collect
We may collect basic information such as name, email address, and phone number, as well as usage data about how you use our app and device information.
We may collect basic information such as name, email address, and phone number, as well as usage data about how you use our app and device information.
Data Usage
How We Use Your Information
We use your information to provide and improve our services, communicate with you, and ensure the security of our app.
We use your information to provide and improve our services, communicate with you, and ensure the security of our app.
Google API Services
Fullness CRM allows you to connect your own Google Account using Google OAuth. Google APIs are accessed only after you explicitly grant consent during that authorization flow, and our access is limited strictly to the permissions you approve — never more.
Gmail API Usage
Our application uses the Gmail API to provide CRM functionality. Specifically:
• We access your Gmail messages solely to provide customer relationship management features
• We may send emails on your behalf through Gmail as part of our CRM services
• We may modify message labels or status to help organize your communications
• All Gmail data access is limited to providing CRM functionality only
• We do not sell, share, or use your Gmail data for any other purposes
• You can disconnect your Gmail account at any time through your account settings
Your Gmail data is processed according to the same security standards as all other personal information in this policy.
In accordance with the Google API Services User Data Policy, including the Limited Use requirements: we do not use Gmail data for advertising purposes; we do not allow employees or contractors to read your Gmail data except with your explicit consent, when necessary for security purposes, or to comply with applicable law; and we do not use Gmail data to train or improve generalized artificial intelligence or machine learning models.
• We access your Gmail messages solely to provide customer relationship management features
• We may send emails on your behalf through Gmail as part of our CRM services
• We may modify message labels or status to help organize your communications
• All Gmail data access is limited to providing CRM functionality only
• We do not sell, share, or use your Gmail data for any other purposes
• You can disconnect your Gmail account at any time through your account settings
Your Gmail data is processed according to the same security standards as all other personal information in this policy.
In accordance with the Google API Services User Data Policy, including the Limited Use requirements: we do not use Gmail data for advertising purposes; we do not allow employees or contractors to read your Gmail data except with your explicit consent, when necessary for security purposes, or to comply with applicable law; and we do not use Gmail data to train or improve generalized artificial intelligence or machine learning models.
Google Calendar API Usage
Our application uses the Google Calendar API to provide scheduling functionality within the CRM. Specifically:
• We read your Google Calendar events so you can see your existing schedule alongside appointments created in the CRM
• We create, update, and delete events on your Google Calendar to two-way sync appointments and work-order events you schedule in the CRM
• All Calendar data access is limited to providing scheduling functionality only
• You can disconnect your Google account at any time through your account settings
In accordance with the Google API Services User Data Policy, including the Limited Use requirements: we do not use Calendar data for advertising purposes; we do not allow employees or contractors to read your Calendar data except with your explicit consent, when necessary for security purposes, or to comply with applicable law; and we do not use Calendar data to train or improve generalized artificial intelligence or machine learning models.
• We read your Google Calendar events so you can see your existing schedule alongside appointments created in the CRM
• We create, update, and delete events on your Google Calendar to two-way sync appointments and work-order events you schedule in the CRM
• All Calendar data access is limited to providing scheduling functionality only
• You can disconnect your Google account at any time through your account settings
In accordance with the Google API Services User Data Policy, including the Limited Use requirements: we do not use Calendar data for advertising purposes; we do not allow employees or contractors to read your Calendar data except with your explicit consent, when necessary for security purposes, or to comply with applicable law; and we do not use Calendar data to train or improve generalized artificial intelligence or machine learning models.
Google User Data
Google user data is used only to provide the functionality you requested. Specifically:
• Google user data is not sold.
• Google user data is not used for advertising.
• We only transfer Google user data to others as necessary to provide or improve user-facing features that are prominent in the Fullness CRM user interface, for security purposes, or to comply with applicable law.
• Google user data is not read by humans unless we have your affirmative consent, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized.
• Google user data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
The scopes we request are gmail.modify (to read, organize and send mail in the built-in email client) and calendar.events (to read and two-way sync appointment events).
These commitments apply to all Google user data and take precedence over any more general data-sharing terms elsewhere in this policy, including those describing business transfers or third-party service providers.
Fullness CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Google user data is not sold.
• Google user data is not used for advertising.
• We only transfer Google user data to others as necessary to provide or improve user-facing features that are prominent in the Fullness CRM user interface, for security purposes, or to comply with applicable law.
• Google user data is not read by humans unless we have your affirmative consent, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized.
• Google user data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
The scopes we request are gmail.modify (to read, organize and send mail in the built-in email client) and calendar.events (to read and two-way sync appointment events).
These commitments apply to all Google user data and take precedence over any more general data-sharing terms elsewhere in this policy, including those describing business transfers or third-party service providers.
Fullness CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data Protection
Data Security
We implement reasonable security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction.
We implement reasonable security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction.
OAuth Security
• OAuth access tokens are securely stored using encryption.
• OAuth refresh tokens are securely stored.
• Tokens are used only for authenticated requests to Google APIs on your behalf.
• OAuth refresh tokens are securely stored.
• Tokens are used only for authenticated requests to Google APIs on your behalf.
Data Deletion
• You may disconnect your Google account at any time.
• OAuth tokens are revoked or deleted after disconnection.
• Synchronization with Google stops immediately after revocation.
• OAuth tokens are revoked or deleted after disconnection.
• Synchronization with Google stops immediately after revocation.
Data Retention
Google user data is retained only as long as necessary to provide synchronization features, or until you revoke authorization or request deletion, subject to our legal obligations.
Data Sharing
Data Sharing and Third Parties
We do not sell, trade, or share your personal information with third parties for marketing purposes. We may share information only in the following circumstances:
• With your explicit consent
• To comply with legal obligations
• To protect our rights and prevent fraud
• With trusted service providers who assist in operating our service (under strict confidentiality agreements)
We never sell or share your Gmail data or any other personal data for commercial purposes.
We do not sell, trade, or share your personal information with third parties for marketing purposes. We may share information only in the following circumstances:
• With your explicit consent
• To comply with legal obligations
• To protect our rights and prevent fraud
• With trusted service providers who assist in operating our service (under strict confidentiality agreements)
We never sell or share your Gmail data or any other personal data for commercial purposes.
Forms on Our Website
Who is responsible
Fullness Smart Business Management System Ltd. (company no. 517195863) is responsible for the details you send through the forms on our website — except the forms and pages that businesses using Fullness publish, or send you through it, themselves — such as their campaign and other forms, digital business cards (including appointment booking), online stores, and the links they send you to sign a document, fill in a request, reschedule a visit or reply to a purchase order (see below). You can reach us at [email protected] or 074-7722019.
What we collect and why
• Demo requests: your name and email and, if you give them, your phone and company — to arrange the demo and contact you about it.
• Calculator reports: your name, email and phone, together with the figures you entered in the calculator — to email you the report, which, like its email, also presents Fullness. Our sales team is told about the request, but contacts you about Fullness only if you ticked the box asking for that.
• The PCN874 and minimum-wage checkers: your name, email and phone only — passed to our sales team, who contact you about Fullness only if you ticked the box asking for that. These two forms don't keep the figures from the calculator and don't email a report.
• Quote requests on the pricing page: your name, email and phone and, if you give it, your company, together with the package you built — to prepare a quote and contact you about it.
• The contact form and "Talk to our team": your name, email, phone and message — to answer you and contact you about Fullness. These enquiries are recorded in our customer-management system, and you receive a copy of your message by email.
• Sign-up: your details and your business's details — to open and run your account, bill you and send you messages about the service. Card payments are made on the page of our payment provider, Pelecard.
With demo requests, quote requests, calculator forms and sign-ups we also record when the form was sent, your IP address and your browser type, to protect the forms from abuse.
Who receives the details
• Cloudflare, through which every page and form of this website passes, and which also checks that some forms are sent by a person rather than a bot.
• Our hosting provider, Amazon Web Services, in Israel.
• Our email provider, Microsoft 365, through a mailbox operated for us by Forbit.
• Our error-monitoring service, Sentry, in Germany: when something fails, its error report can include details from the form.
• By email, the Fullness sales and support teams, and Forbit, which develops and operates the Fullness systems.
We don't sell your details.
Do you have to fill them in?
No law requires you to. Without the details a form marks as required, we can't reply to you, send you a report or a quote, or open an account.
Marketing
Apart from the information about Fullness that comes with a calculator report, we send you marketing updates only if you ticked the box asking for them. You can ask us to stop at any time by writing to [email protected], and any such message will include a way to unsubscribe.
Our customers' own forms
Businesses that use Fullness can publish their own forms (such as lead forms), digital business cards (including appointment booking) and online stores, and can send you links through it — for example to sign a document or a delivery note, to fill in a request such as a pension request, to reschedule a service visit or to reply to a purchase order. The details you send through them go to that business, which is responsible for them; Fullness stores and processes them on its behalf. Please contact that business about your details.
Your rights
You have the right to see the information we hold about you and to ask us to correct or delete it (Protection of Privacy Law, sections 13 and 14). Write to [email protected].
Fullness Smart Business Management System Ltd. (company no. 517195863) is responsible for the details you send through the forms on our website — except the forms and pages that businesses using Fullness publish, or send you through it, themselves — such as their campaign and other forms, digital business cards (including appointment booking), online stores, and the links they send you to sign a document, fill in a request, reschedule a visit or reply to a purchase order (see below). You can reach us at [email protected] or 074-7722019.
What we collect and why
• Demo requests: your name and email and, if you give them, your phone and company — to arrange the demo and contact you about it.
• Calculator reports: your name, email and phone, together with the figures you entered in the calculator — to email you the report, which, like its email, also presents Fullness. Our sales team is told about the request, but contacts you about Fullness only if you ticked the box asking for that.
• The PCN874 and minimum-wage checkers: your name, email and phone only — passed to our sales team, who contact you about Fullness only if you ticked the box asking for that. These two forms don't keep the figures from the calculator and don't email a report.
• Quote requests on the pricing page: your name, email and phone and, if you give it, your company, together with the package you built — to prepare a quote and contact you about it.
• The contact form and "Talk to our team": your name, email, phone and message — to answer you and contact you about Fullness. These enquiries are recorded in our customer-management system, and you receive a copy of your message by email.
• Sign-up: your details and your business's details — to open and run your account, bill you and send you messages about the service. Card payments are made on the page of our payment provider, Pelecard.
With demo requests, quote requests, calculator forms and sign-ups we also record when the form was sent, your IP address and your browser type, to protect the forms from abuse.
Who receives the details
• Cloudflare, through which every page and form of this website passes, and which also checks that some forms are sent by a person rather than a bot.
• Our hosting provider, Amazon Web Services, in Israel.
• Our email provider, Microsoft 365, through a mailbox operated for us by Forbit.
• Our error-monitoring service, Sentry, in Germany: when something fails, its error report can include details from the form.
• By email, the Fullness sales and support teams, and Forbit, which develops and operates the Fullness systems.
We don't sell your details.
Do you have to fill them in?
No law requires you to. Without the details a form marks as required, we can't reply to you, send you a report or a quote, or open an account.
Marketing
Apart from the information about Fullness that comes with a calculator report, we send you marketing updates only if you ticked the box asking for them. You can ask us to stop at any time by writing to [email protected], and any such message will include a way to unsubscribe.
Our customers' own forms
Businesses that use Fullness can publish their own forms (such as lead forms), digital business cards (including appointment booking) and online stores, and can send you links through it — for example to sign a document or a delivery note, to fill in a request such as a pension request, to reschedule a service visit or to reply to a purchase order. The details you send through them go to that business, which is responsible for them; Fullness stores and processes them on its behalf. Please contact that business about your details.
Your rights
You have the right to see the information we hold about you and to ask us to correct or delete it (Protection of Privacy Law, sections 13 and 14). Write to [email protected].
User Rights
Your Rights and Control
You have certain rights regarding your personal information, including:
• The right to access, correct, or delete your information
• The right to disconnect your Gmail account at any time
• The right to request data portability
• The right to opt-out of certain data processing
• The right to be informed about how your data is used
To exercise these rights or disconnect your Gmail integration, please visit your account settings or contact our support team.
You have certain rights regarding your personal information, including:
• The right to access, correct, or delete your information
• The right to disconnect your Gmail account at any time
• The right to request data portability
• The right to opt-out of certain data processing
• The right to be informed about how your data is used
To exercise these rights or disconnect your Gmail integration, please visit your account settings or contact our support team.
The Fullness App for Clients
Who this part covers
The sections that follow describe the Fullness mobile app for people who use it as clients of the businesses that work with Fullness (in this policy, "companies"): how you sign in, how you connect to companies, and what you do with them in the app. They add to the rest of this policy.
Who is responsible
Fullness Smart Business Management System Ltd. (company no. 517195863) is responsible for your Fullness account: signing in, your sessions, the list of companies, your account's deletion and the records of your acceptance of this policy and of the terms of service. Each company you connect to is responsible for what it keeps about you as its client, such as your client card, your requests, documents and signatures, and the information it obtains to provide its services. Fullness stores and processes those records on the company's behalf. You can reach us at [email protected] or 074-7722019.
The sections that follow describe the Fullness mobile app for people who use it as clients of the businesses that work with Fullness (in this policy, "companies"): how you sign in, how you connect to companies, and what you do with them in the app. They add to the rest of this policy.
Who is responsible
Fullness Smart Business Management System Ltd. (company no. 517195863) is responsible for your Fullness account: signing in, your sessions, the list of companies, your account's deletion and the records of your acceptance of this policy and of the terms of service. Each company you connect to is responsible for what it keeps about you as its client, such as your client card, your requests, documents and signatures, and the information it obtains to provide its services. Fullness stores and processes those records on the company's behalf. You can reach us at [email protected] or 074-7722019.
Signing In to the App
What we ask for
You sign in with your ID number and your mobile number, and we send a one-time code to that mobile by SMS. A code is sent only when the ID number and the mobile belong to the same account, and the app answers in the same way whether they do or not. To register, you also give your full name. If your account has a password or a passkey, you can still sign in with it.
The code
The code has 6 digits and can be used for 5 minutes, with up to 5 attempts. We keep only a one-way fingerprint (hash) of it, never the code itself, and delete it a few hours after it expires. The SMS is sent under the name FULLNESS by our SMS provider. Its text is not stored, and it does not appear in any company's message history.
What we record
To protect your account and the service from abuse, we record each code sent, each check of a code, and each sign-in and registration, with its time, device and outcome. In these records your ID number, your mobile and your network (IP) address are kept only as fingerprints made with a secret key held on our servers, and the mobile also in partly hidden form. We keep these records for 12 months, then delete them.
Accepting the terms and this policy
When you sign in or register from the app's welcome screen, we record that you accepted the versions of the terms of service and of this policy then in force: the versions, the time, the app's language, the device, how you signed in and a keyed fingerprint of your network address. We keep these records as evidence for as long as the law requires.
You sign in with your ID number and your mobile number, and we send a one-time code to that mobile by SMS. A code is sent only when the ID number and the mobile belong to the same account, and the app answers in the same way whether they do or not. To register, you also give your full name. If your account has a password or a passkey, you can still sign in with it.
The code
The code has 6 digits and can be used for 5 minutes, with up to 5 attempts. We keep only a one-way fingerprint (hash) of it, never the code itself, and delete it a few hours after it expires. The SMS is sent under the name FULLNESS by our SMS provider. Its text is not stored, and it does not appear in any company's message history.
What we record
To protect your account and the service from abuse, we record each code sent, each check of a code, and each sign-in and registration, with its time, device and outcome. In these records your ID number, your mobile and your network (IP) address are kept only as fingerprints made with a secret key held on our servers, and the mobile also in partly hidden form. We keep these records for 12 months, then delete them.
Accepting the terms and this policy
When you sign in or register from the app's welcome screen, we record that you accepted the versions of the terms of service and of this policy then in force: the versions, the time, the app's language, the device, how you signed in and a keyed fingerprint of your network address. We keep these records as evidence for as long as the law requires.
Staying Signed In
"Remember me on this device"
If you tick it, you stay signed in until you sign out, delete your account or we block the session, or until 90 days pass without your opening the app. If you leave it unticked, the session ends when you close the app or after 30 minutes in the background, and on our servers 30 minutes after its last request. Registering in the app keeps you signed in as if you had ticked it, unless the account also holds a staff place at a business. Whatever you choose, every session ends 180 days after you signed in, and you then sign in again.
On your device
The app keeps the session's key in the device's secure storage, with your choice to be remembered and, for a session you asked us not to remember, the time the app went into the background. It also keeps a random installation identifier, which helps us limit abuse and recognise a reinstalled app and says nothing about who you are. Nothing you type while signing in or registering, such as your name, ID number, mobile or code, is saved on the device, except the username of the password sign-in if the app remembers it for you.
On our servers
For each session we keep the device's name and when the session started and was last used. When a session ends, we keep for 180 days a short note of when and why it ended (you signed out, it expired, or the account was deleted), which names no one, so that the device can tell you why you were signed out. Signing out ends the session on the device and on our servers, and removes the device's registration for notifications.
If you tick it, you stay signed in until you sign out, delete your account or we block the session, or until 90 days pass without your opening the app. If you leave it unticked, the session ends when you close the app or after 30 minutes in the background, and on our servers 30 minutes after its last request. Registering in the app keeps you signed in as if you had ticked it, unless the account also holds a staff place at a business. Whatever you choose, every session ends 180 days after you signed in, and you then sign in again.
On your device
The app keeps the session's key in the device's secure storage, with your choice to be remembered and, for a session you asked us not to remember, the time the app went into the background. It also keeps a random installation identifier, which helps us limit abuse and recognise a reinstalled app and says nothing about who you are. Nothing you type while signing in or registering, such as your name, ID number, mobile or code, is saved on the device, except the username of the password sign-in if the app remembers it for you.
On our servers
For each session we keep the device's name and when the session started and was last used. When a session ends, we keep for 180 days a short note of when and why it ended (you signed out, it expired, or the account was deleted), which names no one, so that the device can tell you why you were signed out. Signing out ends the session on the device and on our servers, and removes the device's registration for notifications.
Requests, Documents, Signatures and Appointments
What you send
In the app you can send a company requests and messages, answer its questions, upload documents and photos from your device, sign documents, and book a call or a meeting. Everything you send goes to that company, which is responsible for it, and is stored on Fullness's servers on its behalf. The app opens your camera, photos or files only when you choose to add something, and only with your device's permission.
Identity documents
When a company asks for a copy of your ID card or another identity document, the image is kept in a separate, private and encrypted storage area that only that company can reach, and the company decides how long it is kept.
Signatures
When you sign a document in the app, we keep with it, as evidence of the signature, your name and mobile as the signer, when you viewed and signed it, and your network address and device. The signed document is part of the company's records.
Appointments
When you book a call or a meeting, the company receives the time you chose with your request, and may contact you about it.
In the app you can send a company requests and messages, answer its questions, upload documents and photos from your device, sign documents, and book a call or a meeting. Everything you send goes to that company, which is responsible for it, and is stored on Fullness's servers on its behalf. The app opens your camera, photos or files only when you choose to add something, and only with your device's permission.
Identity documents
When a company asks for a copy of your ID card or another identity document, the image is kept in a separate, private and encrypted storage area that only that company can reach, and the company decides how long it is kept.
Signatures
When you sign a document in the app, we keep with it, as evidence of the signature, your name and mobile as the signer, when you viewed and signed it, and your network address and device. The signed document is part of the company's records.
Appointments
When you book a call or a meeting, the company receives the time you chose with your request, and may contact you about it.
Requests to the Pension Clearing House and Har HaBituach
When it happens
If you are a client of FORBIT, the insurance and pension-planning agency, the app can ask whether you allow FORBIT to request your information from the pension clearing house and from Har HaBituach, the insurance database of the Capital Market, Insurance and Savings Authority. Nothing is requested unless you sign, in the app, the clearing house's power of attorney and Har HaBituach's authorization. Each is shown in full; each place to sign has its own approval, never ticked in advance; and you confirm with a code sent by SMS to the mobile on your FORBIT client card. If you choose "Later", nothing is requested.
What is recorded
With your approval we record, as evidence of your consent, the exact text you were shown and a fingerprint of it, the time, the language, the device and a keyed fingerprint of your network address. For these requests you also confirm your address, which is kept with the authorization, and for Har HaBituach you give your date of birth and your ID card's issue date, as its own form asks: these are kept with the request, and saved on your client card only if the app created that card.
Who makes the request
The requests are made by FORBIT, in its own name, through an agent it appoints for requests from the app. If the app has just added you as a new client, FORBIT first checks your details, and nothing is sent until it approves your card. The information that comes back, such as your pension savings and insurance products with their balances, fees and deposits, becomes part of FORBIT's records about you, which Fullness stores and processes on FORBIT's behalf. FORBIT's own terms of use and privacy policy, shown in the app, apply to it.
Cancelling
The power of attorney and the authorization stay in force until you cancel them with FORBIT, even if you delete your Fullness account. To cancel them, or to ask about this information, contact FORBIT.
If you are a client of FORBIT, the insurance and pension-planning agency, the app can ask whether you allow FORBIT to request your information from the pension clearing house and from Har HaBituach, the insurance database of the Capital Market, Insurance and Savings Authority. Nothing is requested unless you sign, in the app, the clearing house's power of attorney and Har HaBituach's authorization. Each is shown in full; each place to sign has its own approval, never ticked in advance; and you confirm with a code sent by SMS to the mobile on your FORBIT client card. If you choose "Later", nothing is requested.
What is recorded
With your approval we record, as evidence of your consent, the exact text you were shown and a fingerprint of it, the time, the language, the device and a keyed fingerprint of your network address. For these requests you also confirm your address, which is kept with the authorization, and for Har HaBituach you give your date of birth and your ID card's issue date, as its own form asks: these are kept with the request, and saved on your client card only if the app created that card.
Who makes the request
The requests are made by FORBIT, in its own name, through an agent it appoints for requests from the app. If the app has just added you as a new client, FORBIT first checks your details, and nothing is sent until it approves your card. The information that comes back, such as your pension savings and insurance products with their balances, fees and deposits, becomes part of FORBIT's records about you, which Fullness stores and processes on FORBIT's behalf. FORBIT's own terms of use and privacy policy, shown in the app, apply to it.
Cancelling
The power of attorney and the authorization stay in force until you cancel them with FORBIT, even if you delete your Fullness account. To cancel them, or to ask about this information, contact FORBIT.
Recommendations and Questions About Them
Recommendations
Where a company shows you recommendations, as FORBIT does, they are produced automatically by fixed rules from your products' data: for example a management fee above a set level, an inactive fund, a negative net return, or employer deposits that did not arrive. No AI model produces them.
The questions you can ask
You can ask about your recommendations only by choosing one of the questions the app offers; there is no free text. Our server prepares the answer from a short sheet of facts about the recommendation, or about your recommendations together: the kind of product, rounded figures such as fees, the market average and an estimated saving, and how many recommendations there are. Where the company has switched AI answers on, the question's fixed wording and this sheet are sent to an AI model, which writes a short answer in your language. The model never receives your name, ID number, mobile, email or address, any policy or account number, or the name of a fund, an insurer or your agent. The answer is checked against the facts before you see it. If it fails the check, or the model is not used or not available, you get a pre-written answer instead.
The AI providers
The model is Google's Gemini, used through Google's Gemini API, with Anthropic's Claude in its place when Gemini is not available. We use them under terms that do not let them train their models on this data. Answers are kept for up to 24 hours, so that the same question gets the same answer. We record which question was asked, when, and whether the model or a pre-written answer replied, but not the answer's text.
Information, not advice
Recommendations and answers are general information, based on the data the company has, which may be incomplete or out of date; estimates are marked as such. They are not personal financial, pension, insurance or tax advice, and they are not a recommendation to make any change. Before any decision, speak with your licensed agent; the app offers a way to contact them.
Where a company shows you recommendations, as FORBIT does, they are produced automatically by fixed rules from your products' data: for example a management fee above a set level, an inactive fund, a negative net return, or employer deposits that did not arrive. No AI model produces them.
The questions you can ask
You can ask about your recommendations only by choosing one of the questions the app offers; there is no free text. Our server prepares the answer from a short sheet of facts about the recommendation, or about your recommendations together: the kind of product, rounded figures such as fees, the market average and an estimated saving, and how many recommendations there are. Where the company has switched AI answers on, the question's fixed wording and this sheet are sent to an AI model, which writes a short answer in your language. The model never receives your name, ID number, mobile, email or address, any policy or account number, or the name of a fund, an insurer or your agent. The answer is checked against the facts before you see it. If it fails the check, or the model is not used or not available, you get a pre-written answer instead.
The AI providers
The model is Google's Gemini, used through Google's Gemini API, with Anthropic's Claude in its place when Gemini is not available. We use them under terms that do not let them train their models on this data. Answers are kept for up to 24 hours, so that the same question gets the same answer. We record which question was asked, when, and whether the model or a pre-written answer replied, but not the answer's text.
Information, not advice
Recommendations and answers are general information, based on the data the company has, which may be incomplete or out of date; estimates are marked as such. They are not personal financial, pension, insurance or tax advice, and they are not a recommendation to make any change. Before any decision, speak with your licensed agent; the app offers a way to contact them.
Notifications and App Diagnostics
Push notifications
To send you notifications, for example that a company answered your request or that your information is ready, the app registers your device with Firebase Cloud Messaging, a Google service, and we keep the device's notification address with your account. A notification's title and text pass through Google's service on their way to your device. You can turn notifications off at any time in your device's settings; signing out or deleting your account removes the registration. "Notify me when my information is ready" stays off until you choose it, and that notice is sent once.
Crash reports and usage statistics
The app uses Firebase Crashlytics, a Google service, to report crashes and errors so that we can fix them. A report holds technical details such as the device model, the versions of the operating system and of the app, an installation identifier, and the error with what the app was doing before it. The app also uses Google Analytics for Firebase to count app openings and the screens people use, so that we can improve the app. Our servers report their own errors to our error-monitoring service, Sentry, in Germany.
To send you notifications, for example that a company answered your request or that your information is ready, the app registers your device with Firebase Cloud Messaging, a Google service, and we keep the device's notification address with your account. A notification's title and text pass through Google's service on their way to your device. You can turn notifications off at any time in your device's settings; signing out or deleting your account removes the registration. "Notify me when my information is ready" stays off until you choose it, and that notice is sent once.
Crash reports and usage statistics
The app uses Firebase Crashlytics, a Google service, to report crashes and errors so that we can fix them. A report holds technical details such as the device model, the versions of the operating system and of the app, an installation identifier, and the error with what the app was doing before it. The app also uses Google Analytics for Firebase to count app openings and the screens people use, so that we can improve the app. Our servers report their own errors to our error-monitoring service, Sentry, in Germany.
Service Providers for the App
To run the app we use the service providers below. Each receives only what its service needs, and we don't sell your details.
• Amazon Web Services, our hosting provider, in Israel: our servers, and the documents and photos you upload.
• Cloudflare, through which the app's connection to our servers passes.
• SMS4Free, our SMS provider, which sends the codes and the account's messages to your mobile.
• Google, through Firebase: push notifications (Firebase Cloud Messaging), crash reports (Firebase Crashlytics) and usage statistics (Google Analytics for Firebase).
• Google (the Gemini API) and Anthropic (Claude), which write answers to the questions about recommendations and receive only the facts described above.
• Sentry, our error-monitoring service, in Germany.
• Our email provider, Microsoft 365, through a mailbox operated for us by Forbit, when you write to our support.
Transfer outside Israel
Google, Anthropic and Sentry may process this information outside Israel, including in the United States and the European Union.
• Amazon Web Services, our hosting provider, in Israel: our servers, and the documents and photos you upload.
• Cloudflare, through which the app's connection to our servers passes.
• SMS4Free, our SMS provider, which sends the codes and the account's messages to your mobile.
• Google, through Firebase: push notifications (Firebase Cloud Messaging), crash reports (Firebase Crashlytics) and usage statistics (Google Analytics for Firebase).
• Google (the Gemini API) and Anthropic (Claude), which write answers to the questions about recommendations and receive only the facts described above.
• Sentry, our error-monitoring service, in Germany.
• Our email provider, Microsoft 365, through a mailbox operated for us by Forbit, when you write to our support.
Transfer outside Israel
Google, Anthropic and Sentry may process this information outside Israel, including in the United States and the European Union.
Your Rights as an App User
Your rights
Under the Protection of Privacy Law, 5741-1981, you have the right to see the information we hold about you and to ask us to correct or delete it (sections 13 and 14). For what a company keeps about you as its client, contact that company: it is responsible for it, and we will help it answer you.
Your choices in the app
• You can delete your Fullness account at any time, as described in the next section.
• You can change your account's mobile by verifying the new one with a code.
• You can turn notifications off in your device's settings.
• You can ask a company to end your access to it, and cancel a power of attorney or an authorization you gave it, by contacting it.
Contact and complaints
Write to us at [email protected] or call 074-7722019. If you are not satisfied with our answer, you may complain to the Privacy Protection Authority.
Under the Protection of Privacy Law, 5741-1981, you have the right to see the information we hold about you and to ask us to correct or delete it (sections 13 and 14). For what a company keeps about you as its client, contact that company: it is responsible for it, and we will help it answer you.
Your choices in the app
• You can delete your Fullness account at any time, as described in the next section.
• You can change your account's mobile by verifying the new one with a code.
• You can turn notifications off in your device's settings.
• You can ask a company to end your access to it, and cancel a power of attorney or an authorization you gave it, by contacting it.
Contact and complaints
Write to us at [email protected] or call 074-7722019. If you are not satisfied with our answer, you may complain to the Privacy Protection Authority.
Deleting Your Fullness Account
How to delete your account
In the app, choose "Delete account" wherever the app lets you sign out: in the account menu, in the side menu or on FORBIT's account screen. It opens our deletion page with a one-time link, valid for 10 minutes, that opens the page already signed in to your account. You can also open the page yourself at fullness.co.il/account/delete: enter your ID number and mobile and confirm with a code sent to that mobile, and the page lists every account that holds that ID number and mobile, with its companies. The page explains what will be deleted and what will be kept, and nothing is deleted until you confirm. If no code reaches you, you can send a deletion request from the page with your name, ID number and a way to reach you: our support checks your identity, deletes the account within 30 days and lets you know. If you are the only owner of an active business, first hand over its ownership or close it; until then the account is not deleted.
What is deleted
So that no company loses its records, your account is anonymised rather than removed: its name becomes "Deleted account", and your ID number, mobile, email, usernames, password, two-factor details, photo and payment-card details are cleared or replaced with values that identify no one. Everything that belongs to the account alone is deleted: your sessions on every device, your sign-in tokens, device and notification registrations, passkeys, codes, notifications, preferences, the order of your companies and the app's onboarding marks. Connected email and calendar accounts are disconnected, and their access is revoked or their credentials destroyed. Your account is unlinked from every company's client, supplier, employee and project records, and every staff place you hold ends; each business where you had one is told. Your open identity checks and connection requests are closed. In the account's own activity log, your password, two-factor details, ID number, mobile and email are removed. After the deletion we send an SMS confirming it to the mobile the account held, and every device signed in to the account returns to the welcome screen.
What Fullness keeps, and for how long
• The records of your acceptance of the terms of service and of this policy, of the consents and authorizations you gave and of the documents you signed, for as long as the law requires.
• The record of the deletion itself (when it was requested and done, how, and how many records were unlinked), for at least 12 months and for as long as the consent or authorization evidence it relates to is kept, so that the deletion is documented and the deleted account cannot be used again.
• The audit of codes, sign-ins and registrations, for 12 months from each event, and the audit of the deletion page's steps, for 12 months.
• For a deletion request sent to support: the name, ID number, contact details and support note are cleared 12 months after the request is completed, and its status and dates are kept.
• One-time deletion links are deleted a day after they are used or expire.
What the companies keep
Each company keeps, under its own policy and the law that applies to it, its records about you: your client card (including one created when you connected in the app), the requests, documents, signatures and messages you sent it, and its own client, supplier, employee and accounting records. Deleting your Fullness account does not delete them; contact the company about them. If you gave FORBIT a power of attorney or an authorization, they stay in force until you cancel them with FORBIT, and the deletion page tells you how to contact it.
In the app, choose "Delete account" wherever the app lets you sign out: in the account menu, in the side menu or on FORBIT's account screen. It opens our deletion page with a one-time link, valid for 10 minutes, that opens the page already signed in to your account. You can also open the page yourself at fullness.co.il/account/delete: enter your ID number and mobile and confirm with a code sent to that mobile, and the page lists every account that holds that ID number and mobile, with its companies. The page explains what will be deleted and what will be kept, and nothing is deleted until you confirm. If no code reaches you, you can send a deletion request from the page with your name, ID number and a way to reach you: our support checks your identity, deletes the account within 30 days and lets you know. If you are the only owner of an active business, first hand over its ownership or close it; until then the account is not deleted.
What is deleted
So that no company loses its records, your account is anonymised rather than removed: its name becomes "Deleted account", and your ID number, mobile, email, usernames, password, two-factor details, photo and payment-card details are cleared or replaced with values that identify no one. Everything that belongs to the account alone is deleted: your sessions on every device, your sign-in tokens, device and notification registrations, passkeys, codes, notifications, preferences, the order of your companies and the app's onboarding marks. Connected email and calendar accounts are disconnected, and their access is revoked or their credentials destroyed. Your account is unlinked from every company's client, supplier, employee and project records, and every staff place you hold ends; each business where you had one is told. Your open identity checks and connection requests are closed. In the account's own activity log, your password, two-factor details, ID number, mobile and email are removed. After the deletion we send an SMS confirming it to the mobile the account held, and every device signed in to the account returns to the welcome screen.
What Fullness keeps, and for how long
• The records of your acceptance of the terms of service and of this policy, of the consents and authorizations you gave and of the documents you signed, for as long as the law requires.
• The record of the deletion itself (when it was requested and done, how, and how many records were unlinked), for at least 12 months and for as long as the consent or authorization evidence it relates to is kept, so that the deletion is documented and the deleted account cannot be used again.
• The audit of codes, sign-ins and registrations, for 12 months from each event, and the audit of the deletion page's steps, for 12 months.
• For a deletion request sent to support: the name, ID number, contact details and support note are cleared 12 months after the request is completed, and its status and dates are kept.
• One-time deletion links are deleted a day after they are used or expire.
What the companies keep
Each company keeps, under its own policy and the law that applies to it, its records about you: your client card (including one created when you connected in the app), the requests, documents, signatures and messages you sent it, and its own client, supplier, employee and accounting records. Deleting your Fullness account does not delete them; contact the company about them. If you gave FORBIT a power of attorney or an authorization, they stay in force until you cancel them with FORBIT, and the deletion page tells you how to contact it.
Connecting to Companies
The list of companies
The app lists the companies that chose to appear in it, with their public name, logo and field. The list is the same for everyone and never reveals anything about a company's clients. The companies you are connected to, and the order you arrange them in, are kept with your account.
What a company receives
When you connect to a company, by choosing it or because it already knows you as its client, the company receives your name, ID number and verified mobile number, and the language you use the app in, so that it can identify your record, handle your request and provide its services. If the company has no client card for you, one is created in its system with these details; if it has one, your app access is linked to it. Your client card is marked as registered in the app, with the date, whether you were a new or an existing client, and whether you chose the company or it recognised you. A company that gives access automatically connects you as soon as you verify your mobile, if an active client card of its holds your ID number and that mobile. Any other connection waits for the company's approval, and the company may approve, decline or end your access.
What the company keeps
From then on the company sees what you do with it in the app: your requests and messages, the documents and photos you send it, your signatures and your appointments. The company is responsible for its own use and retention of these details, under its own privacy policy and the law that applies to it. You can contact it to ask about your information, correct it or request its deletion. Ending the connection or deleting your Fullness account does not remove records the company keeps or must retain.
The app lists the companies that chose to appear in it, with their public name, logo and field. The list is the same for everyone and never reveals anything about a company's clients. The companies you are connected to, and the order you arrange them in, are kept with your account.
What a company receives
When you connect to a company, by choosing it or because it already knows you as its client, the company receives your name, ID number and verified mobile number, and the language you use the app in, so that it can identify your record, handle your request and provide its services. If the company has no client card for you, one is created in its system with these details; if it has one, your app access is linked to it. Your client card is marked as registered in the app, with the date, whether you were a new or an existing client, and whether you chose the company or it recognised you. A company that gives access automatically connects you as soon as you verify your mobile, if an active client card of its holds your ID number and that mobile. Any other connection waits for the company's approval, and the company may approve, decline or end your access.
What the company keeps
From then on the company sees what you do with it in the app: your requests and messages, the documents and photos you send it, your signatures and your appointments. The company is responsible for its own use and retention of these details, under its own privacy policy and the law that applies to it. You can contact it to ask about your information, correct it or request its deletion. Ending the connection or deleting your Fullness account does not remove records the company keeps or must retain.