Privacy Policy
Last updated: 20 October 2026
Sheket is a subscription service providing ambient soundtracks for treatment rooms, operated by Harel Turgeman (OctavaLabs) ("we"). This document explains what we collect about you, why, and what you can do about it.
It is written in plain language. If something here is unclear, please ask rather than assume.
What we collect
What you give us: an email address and password when you register, and your full name if you choose to provide it. Passwords are stored hashed and we cannot read them.
What using the service creates: which soundtracks were played and when, sign-in times, and the IP address you connect from. We use this to run the service, diagnose playback faults, and understand which soundtracks are worth adding.
Payment data: once billing is enabled, card details go directly to the payment provider and are never stored by us. We see only your subscription status and billing history.
We do not collect anything about your clients. The service plays music in a room; it does not know who is in it and records nothing.
Why we use it
To give you access to your account and the library, to charge the subscription, to send messages about the service itself (a fault, a change to these terms), and to improve the product.
We do not sell personal data and we do not pass it to advertisers.
Who stores it with us
The service runs on infrastructure provided by Lovable and Supabase, which host the database and the audio files. These providers process the data on our behalf only.
When billing is added, a payment provider will join this list, and it will be named here before the first charge.
Some providers operate servers outside Israel, so data may be stored outside Israel.
How long we keep it
Account details are kept while the account is active. If you ask us to delete your account, we remove its details within 30 days, except records the law requires us to keep — invoices, for example, must be retained for seven years under tax law.
Technical usage logs are kept for up to one year.
Your rights
Under Israel's Protection of Privacy Law you may see the information held about you, ask us to correct what is wrong, and ask us to delete it.
If you are in the EU or the UK, GDPR rights also apply, including receiving your data in a portable format and objecting to processing.
You can reach us at hello@octavaflow.com. We respond to any request within 30 days.
Cookies
We use strictly necessary cookies only — the ones that keep you signed in. There are no advertising cookies and no cross-site tracking.
Security
Traffic to the site is encrypted. Audio files are not reachable at any permanent public address: every playback receives a temporary signed URL generated on the server.
No system is perfectly secure. If a security incident occurs that could affect you, we will tell you.
Changes
If we change this policy we will update the date at the top. A material change will also be emailed to active subscribers.