Dit document is momenteel alleen in het Engels beschikbaar. Vragen? Schrijf naar support@monitor2log.com. This Privacy Policy explains what personal data Monitor2Log collects, why we process it, and what you can do about it. Monitor2Log is operated by Funtika LTD, a company registered in Israel. We process personal data under the Israeli Privacy Protection Law, 5741-1981, as amended including Amendment 13, and, where it applies to you, the EU General Data Protection Regulation (GDPR).
Privacykeuzes
Met je toestemming meet Google Analytics bezoeken aan openbare pagina’s, klikken en artikelbeoordelingen via een browseridentificatie. Vrijwillige antwoorden kunnen samengevoegd worden gepubliceerd. We sturen geen account-ID’s, medische meetwaarden, foto’s of notities en volgen je privédagboek niet. Je kunt de analyse uitschakelen bij ‘Privacykeuzes’ onderaan elke pagina. Weergavevoorkeuren werken zonder analyse.
Vrijwillig. Je antwoord wordt naar Google Analytics gestuurd. We kunnen samengevoegde antwoorden in artikelen publiceren. Geen namen of medische meetwaarden. Kies een antwoord om mee te doen.
1. Who is responsible
Funtika LTD (“Funtika”, “we”, “us”), a company registered in Israel (company no. 516271806), is the controller of the personal data described in this policy. Postal address: P.O. Box 1544, Shoham, Israel. Phone: +972-55-994-4670. Email: support@monitor2log.com.
Before you first sign in, the diary shows you this notice in short form and asks for your agreement: who we are, what your readings are used for, that providing them is voluntary, who processes them for us, where they are stored, and your rights. Nothing is saved until you agree, and you can withdraw that agreement at any time by deleting your account.
Health information is sensitive, so Monitor2Log is built to hold as little of it as possible: your readings live in your own account, you can edit or delete any row, and you can take the whole diary away as an Excel file at any time.
2. What data we process
Account data — the email address, account identifier and basic profile returned by Google when you sign in, held through Firebase Authentication.
Health records — the readings you confirm (such as systolic and diastolic values, pulse and the measurement time) and any note you write. They are stored in Cloud Firestore, in Google's United States multi-region (nam5), under your own account. When you use the diary, Firestore also automatically caches the readings you load in this browser's IndexedDB storage on the device. This makes return visits faster and keeps already-loaded readings available during connection interruptions.
Photos — a photo you choose to scan on the website is sent from your browser for processing. If you opt into WhatsApp and send a photo there, Meta notifies our secured Firebase Function, which checks your scan balance before requesting the image from Meta and passes it to Gemini in memory. Monitor2Log does not retain either kind of photo.
Optional WhatsApp data — if you connect WhatsApp, we keep a protected phone-number lookup, an encrypted copy of the number, its last four digits, your reminder times, language, time zone and delivery state. Extracted draft rows from a WhatsApp photo are kept only until you review them or for up to 24 hours.
Subscription records — the PayPal subscription identifier, selected plan, amount, status and billing-period timestamps, kept in a ledger keyed to your account. For the few accounts on our scan allowlist the ledger also records the sign-in email that was checked against it. Card details and PayPal credentials are handled by PayPal and never reach us.
Technical data — the locale preference cookie (m2l-locale), your Firebase authentication session, interface preferences kept in your browser's local storage and in your account profile, and the data your browser sends when it requests a page, such as an IP address, which our hosting and abuse-protection providers process in their logs.
We do not run advertising trackers. Usage analytics (Google Analytics for Firebase) runs only if you allow it in the cookie notice: it records which pages and features are used so we can see where the site confuses people, it never receives your readings, notes or email address, and declining costs you no functionality.
3. Why we process it, and on what legal basis
To provide the Service — creating your account, saving and displaying the readings you confirm, drawing your chart, producing your Excel export, and applying and counting scan-plan allowances. Legal basis: performance of our contract with you. Health data is processed on the basis of the explicit agreement you give in the notice step before your first sign-in, as the Israeli Privacy Protection Law and, where it applies, Article 9 of the GDPR require; you can withdraw it at any time by deleting your account.
To scan a photo — sending the photo you select for the numbers to be extracted. On WhatsApp, sending MONITOR or NOTEBOOK and then a photo requests that scan. Legal basis: your consent; you can avoid scanning and type the reading by hand.
To provide optional WhatsApp reminders and linking — connecting your signed-in account to your number and sending reminders at the times you choose. Legal bases: performance of the service you request and your consent. You can turn reminders off or disconnect WhatsApp at any time.
To take payment and keep accounts — processing purchases through PayPal and keeping the purchase ledger. Legal bases: performance of our contract and our legal obligations under tax and accounting law.
To keep the Service secure — App Check with reCAPTCHA Enterprise, rate limits and abuse prevention. Legal basis: our legitimate interest in protecting the Service, its users and our providers from abuse.
To communicate with you — support replies and notices about material changes. Legal bases: performance of our contract and our legitimate interest in running the Service properly.
4. Who processes data for us
Google LLC and its affiliates — Firebase Authentication (accounts), Cloud Firestore (your readings and notes), Firebase AI Logic with Gemini models (extracting numbers from a photo you submit) and reCAPTCHA Enterprise (App Check abuse protection). Photos are processed under Google's paid Gemini API terms and data-processing addendum: Google does not use them to improve its products and keeps a log for a limited period solely to detect abuse. Monitor2Log does not store them.
PayPal — recurring payment processing and subscription management. PayPal handles your payment details as an independent controller under its own privacy policy; we receive the subscription identifier, plan, amount, status and billing-period timestamps.
Netlify — hosting of the website and of the purchase ledger, on infrastructure in the United States.
Meta Platforms — delivery of WhatsApp linking messages, photos, service replies and reminder templates when you opt into the WhatsApp feature. Meta processes WhatsApp traffic under its own terms and privacy policy.
These providers act on our instructions under data-processing terms, except where they act as controllers in their own right, as PayPal does for payments. We do not sell personal data.
5. International transfers
Monitor2Log is operated from Israel, and the data described above is held in the United States: your readings in Google Cloud Firestore (nam5 multi-region), account data in Firebase Authentication, and the purchase ledger and reminder records with Netlify. Under the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, these transfers rest on the agreement you give before your first sign-in and on our data-processing agreements with Google and Netlify, which bind them to protect the data to a standard no lower than Israeli law requires and not to pass it on.
Where the GDPR applies to you, transfers to the United States rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.
6. How long we keep it
Readings and notes — until you delete them, or until you delete your account from the account menu in the diary, which removes them at once. You can delete any row yourself at any time.
Local browser cache — until the browser evicts or clears it, or until you clear the site data for monitor2log.com in your browser settings. Signing out does not necessarily remove this device copy.
Purchase ledger records — seven years from the end of the billing period, as tax and accounting law requires, after which they are deleted automatically. When you delete your account, its purchase records are detached from any account and kept only for that period.
Reminder settings, push registrations and encrypted WhatsApp details — until you turn the feature off or delete your account.
Account and authentication records, including sign-in logs — for as long as your account exists, and after that according to Firebase's default retention periods.
Photos — not stored by us. A WhatsApp photo is held only in function memory while it is processed. Any retention by Meta or Google for the processing they perform is governed by their terms.
WhatsApp draft rows and linking challenges — deleted after completion or expiry; draft rows expire after 24 hours and linking codes after 10 minutes. Encrypted WhatsApp account and reminder settings remain until you disconnect the feature or delete your account.
7. Your rights
You can see and export your readings at any time from the diary, as an Excel file, and you can correct or delete any row yourself. You can also delete your whole account and everything in it from the account menu: the deletion runs at once, cannot be undone, and covers your readings, preferences, reminder and WhatsApp settings and your sign-in.
You can ask us to correct data we hold, to restrict or object to a processing activity, or to withdraw a consent you have given — write to support@monitor2log.com or use the controls in the diary. Withdrawing consent does not affect processing already carried out.
Where the GDPR applies, you also have the right to access your data, to receive it in a portable form and to object to processing based on our legitimate interests.
If you think we have handled your data wrongly, please tell us first so that we can put it right. You can also complain to the Israeli Privacy Protection Authority or, in the EU or EEA, to the supervisory authority of the country where you live or work.
8. Security
Data travels over encrypted connections and is stored by Google with encryption at rest. Firestore security rules restrict your readings to your own account, and Firebase App Check with reCAPTCHA Enterprise blocks requests that do not come from the genuine application. Health data is never written into the purchase ledger, and billing data is never written into your health records. Because loaded readings are also cached on the device, someone who can access the same unlocked device and browser profile may be able to see them.
We keep the database definition document and written security procedure that the Israeli Privacy Protection Regulations (Data Security) require, limit administrative access to named people with two-factor authentication, and keep point-in-time recovery enabled on the database.
No system is perfectly secure. If a serious security incident affects your personal data, we will report it to the Israeli Privacy Protection Authority immediately and notify you where the law requires it.
10. Children
Monitor2Log is not intended for children. You must be at least 18 to create an account. If you believe someone under 18 has created an account, write to us and we will delete it.
11. Changes to this policy
We will update this page whenever our processing changes. The date at the top identifies the current version, and we will give notice of material changes on the site or by email.
12. Contact
Funtika LTD (company no. 516271806), P.O. Box 1544, Shoham, Israel — phone +972-55-994-4670, email support@monitor2log.com.
This policy is governed by the laws of the State of Israel, and the competent courts of Tel Aviv-Yafo, Israel have exclusive jurisdiction over disputes arising from it. That does not affect your right to complain to a supervisory authority where you live.