Version 1.0 · in effect from 4 October 2026

Privacy Policy

The Tixo apps for iPhone and Android, our website and the server they work with (together, the "Service") are operated by Tixo, an independent service run by its developers and not yet incorporated ("we", "us"). This policy explains what personal information we collect, why, who receives it, how long we keep it, and the rights you have over it. It is written to meet the Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force since 14 August 2025), and its regulations. It forms part of the Terms of Use.

1. Who we are and how to reach us

Tixo, an independent service run by its developers and not yet incorporated. We handle notices and requests by e-mail. Privacy requests: privacy@tixo.co.il. General enquiries: info@tixo.co.il. Website: https://tixo.co.il.

2. What this policy covers

This policy covers the Tixo apps for iPhone and Android, our website and our server. It does not cover the sellers' websites that the Service opens for you, Google's sign-in, map and navigation services, messaging apps or any other third-party service — each has its own privacy policy, which applies when you use it.

3. The information we collect

3.1 Information you give us

• Account details: your e-mail address, a name if you give one, and a password. We store the password only as a salted one-way hash, never the password itself. To confirm your address, and when you ask to reset your password, we e-mail you a six-digit code, valid for 15 minutes, which we keep only as a hash.
• Google sign-in, only if you choose it: Google tells us your e-mail address, that Google has verified it, the name on your Google account, and an identifier of your Google account that links it to your Tixo account. We receive nothing else from Google and keep no access token from it.
• Problem reports: when you use "Report a problem" on a show's page, the kind of problem, the show, night and seller it concerns, and any note you write. E-mail addresses and phone numbers typed into the note are removed before it is kept, and the report is stored without your account, your IP address or any device identifier.
• Messages you send us, and the e-mail address you send them from.

3.2 Information created while you use the Service

• Account records: when the account was created, how you sign in (with a password, with Google or both), whether your address has been confirmed, a count of failed sign-in attempts and any temporary lock they triggered, and a security value that lets us sign out every device when your password changes.
• Your sign-in on a phone: a sign-in token that our server gives the app. It is kept in your phone's secure storage (the iPhone Keychain, or storage protected by the Android Keystore) and is renewed while you use the app.
• Your acceptance of these documents: which version you accepted and when.

3.3 Usage and error reports

The apps send our server reports about how they are used and what goes wrong. They are on by default, and one switch, Settings → "Usage and error reports", turns all of them off: switching it off empties the queue of reports waiting to be sent, deletes crash reports not yet sent and forgets the app's installation identifier. While it is on, the reports contain:

• when you open or return to the app, the kinds of screens you open and how long you stay on them — for example "a show page", never which show;
• taps, named by the control's name in our code and, for a link, by the kind of screen or the website it leads to — never by the words on it;
• the size of a search (how many words and how many results), never its words;
• when you continue to a seller, which seller it was and whether its page opened — not which show;
• the results of downloading the catalogue, warnings and errors, and crash reports, with personal details removed on the phone and again on our server;
• the app version, the platform (iPhone or Android), the operating-system version and the phone's model, a random identifier for this installation of the app and a random identifier for each session;
• for a signed-in phone, a coded handle made from your account with a secret key that only our server holds — never your e-mail address, name or account number. We can match the handle to your account (for example, to look into a fault you report); without the key, nobody can.

Separately, and filed under nobody — with no installation identifier and no handle, only the platform, the app version and the hour — the apps report which shows are opened, which shows are taken to which seller, and the words of a search that found nothing, when they read like the name of a show (not an e-mail address, a web address or a long number). Our server mixes these and stores them in batches so that they cannot be tied back to a session; when very few people are using the app at the same time, this protects less. Our server also counts sign-ins and new accounts by method (password, e-mailed code, password reset or Google), under the coded handle described above.

3.4 Technical information

Our server receives the IP address of every request, as any web server does, in order to answer it, and uses it in memory to limit abuse (rate limiting); it is not stored with your account or in problem reports. In the reports the apps send, the IP address is replaced by 0.0.0.0 before they are stored, so no location is derived from it. Our server also records its own requests and errors — which page or function was requested, when, and the result — with the usage reports; there too the IP address is not kept, although the analytics service may first derive from it an approximate area, such as the country or city. The apps contain no advertising or third-party analytics software and do not read your advertising identifier. Cookies and on-device storage are described in the Cookie & Storage Policy.

3.5 Your location — only when you ask

The city picker offers "Use my current location". Only when you tap it does the app ask your phone where it is; the first time, the phone asks for your permission, which covers only the time you are using the app — never the background. Your phone may let you share only an approximate location, which is enough. In the apps, the position is used once, on your phone, to find the nearest town in the app's own list of Israeli localities; it is never stored and never sent to us or to anyone else, and only the town that then becomes your city is saved, on your phone. You can withdraw the permission at any time in your phone's settings. Where our website offers the same choice, your browser asks for its own permission, and the position is sent over the encrypted connection to our server, which uses it once, in memory, to find the nearest town, and neither stores nor logs it.

3.6 What stays on your phone

The apps keep the following on your phone and do not send it to us: the shows you save, with any price you asked to be told about; the artists, venues, cities, categories and sellers you follow; your "interested" and "going" marks and your ratings; your saved searches and your taste settings; the in-app notifications and the record of what they have already told you, which are worked out on your phone; the shows you viewed recently and your recent searches; your city, language and theme; your "My tickets" records; and a copy of the catalogue. Settings → "Clear history" forgets the recently viewed shows and searches, and Settings → "Clear local data" removes your records from the phone. (The usage reports in section 3.3 count, anonymously, the shows people open and the searches that found nothing.) If you use the full web version of the Service, these records are kept on our server instead — in a folder for your account or, before you sign in, in a folder found by a cookie in your browser and deleted about a day after its last use — because the website keeps them on its server rather than in your browser.

3.7 What we do not collect

We do not track your location: when you ask for the nearest town, the position is used once and discarded. We do not process payments and do not receive your payment details. We do not see or store what you type on a seller's page, and we do not receive your tickets or orders from any seller. We do not access your contacts, photos, files or calendar — to add a show to your calendar, the app hands your phone a calendar file, and nothing is added unless you confirm it there. We do not buy information about you from data brokers, and we do not track you across other apps or websites.

4. Why we use your information

• To provide the Service: create and keep your account, sign you in, confirm your e-mail address, reset your password when you ask, and send the apps the catalogue.
• To keep the Service secure: authenticate you, detect and block abuse, password guessing and fraud, and investigate faults.
• To improve the Service: usage and error reports show us which screens are used, what fails and which shows people look for, so that we can fix faults and improve the catalogue. You can switch them off at any time.
• To correct the catalogue: problem reports tell us where a listing is wrong.
• To communicate with you: the codes and service messages described in section 13, and answers to the messages you send us.
• To comply with the law and to establish, exercise or defend legal claims.

We do not use your information for advertising or to build advertising profiles, we do not sell it, and we do not use it to train artificial-intelligence models.

5. Who receives your information

We do not sell or rent personal information. We share it only as follows:

• Hosting and infrastructure. Our server, its storage and the usage and error reports run on Microsoft Azure (App Service, Application Insights and Log Analytics) in Microsoft's Israel Central region, in Israel. Microsoft processes this information on our behalf as our hosting provider.
• E-mail delivery. The codes and messages we e-mail go through an e-mail delivery (SMTP) provider, which processes your e-mail address and the message in order to deliver it.
• Google, only if you choose to sign in with it: Google learns that you signed in to Tixo, and we receive what section 3.1 lists. Google's own privacy policy governs what Google does.
• Content delivery. The apps load a font from Google Fonts, an icon font from jsDelivr, and pictures of shows and sellers' logos from the sellers' own servers or the services that host their pictures; our website loads the same font. Like any web server, these see your device's IP address and standard request headers; we do not send them your identity or account details.
• The seller you choose. When you continue to a seller, its page opens — in a window inside the app on a phone, or in a new browser tab — at the seller's address for the night you chose, with a tag saying that you came from Tixo. Everything you do there is between you and the seller, under its own privacy policy and cookies. The window inside the app fills in nothing and does not read or store what you type there or any payment details; it notes only whether the seller's page opened, the address it opened at and the name the page gives its site, so that your "My tickets" record is accurate.
• Price re-checks. Where the Service re-checks a price at a seller ("Checked live"), the request names only the seller's page for that night, never you.
• Services you choose to open: a map or navigation service (Google Maps, Waze or OpenStreetMap), WhatsApp or your phone's share sheet, and your phone's calendar receive only what you choose to send them, and only when you tap them.
• Authorities and legal process: where required by law, court order or a competent authority, or to protect the rights, safety or property of users, the public or ourselves.
• A successor operator: if the Service is transferred to another operator (merger, acquisition, reorganisation), your information may be transferred with it, under this policy; we will notify you in the app or by e-mail.

6. Where your information is stored; transfers abroad

In the apps, your saved shows, follows, searches, notifications, "My tickets" records and settings are stored on your phone (section 3.6). Our server holds your account details, the problem reports and, if you use the full web version of the Service, the records described in section 3.6; the usage and error reports and our server's request records are stored in Application Insights. All of these are in Microsoft's Israel Central region, in Israel. Some providers — the e-mail delivery provider, Google if you choose to sign in with it, and the content providers in section 5 — may process information outside Israel. Where information is transferred abroad, we do so in accordance with the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

7. How long we keep it

• Account details: for as long as your account exists. When you delete your account they are deleted (see the Account & Data Deletion page).
• Records of the full web version: for as long as your account exists; a signed-out visitor's folder is deleted about a day after its last use.
• E-mailed codes: valid for 15 minutes, kept only as a hash, and deleted once used.
• Usage and error reports, and our server's request records: 30 days, after which they are deleted automatically.
• Problem reports: in a size-limited file on our server, where, once it is full, the oldest reports make way for new ones.
• Records on your phone: until you delete them, clear them in Settings, or remove the app.
• Information we are required by law to keep: for as long as the law requires.

8. Security

We protect your information with measures appropriate to its sensitivity, as required by the Protection of Privacy (Data Security) Regulations, 5777-2017: encryption in transit (HTTPS/TLS) between the apps, our website and our server; passwords kept only as salted one-way hashes, and e-mailed codes only as hashes; a confirmation code that works only together with the password it was sent for, never a link; a temporary lock after five wrong passwords, and limits on how often codes can be sent and guessed; the sign-in token kept in your phone's secure storage; reports cleaned of personal details on the phone and again on our server; and access to our servers and data limited to the developers who run the Service. No system is perfectly secure, and we cannot guarantee that unauthorised access will never occur; if an incident affects your information in a way that requires notification, we will notify the Privacy Protection Authority and, where required, you.

9. Your rights

• Access (section 13 of the law). You may ask to inspect the personal information we hold about you. We will answer within 30 days, in Hebrew, Arabic or English as you request.
• Correction and deletion (section 14). If information about you is inaccurate, incomplete, unclear or out of date, you may ask us to correct or delete it.
• Delete your account. From within the app: Account → Delete account. If you cannot sign in, e-mail us from the account's address. See the Account & Data Deletion page.
• Your choices. You can switch usage and error reports off in Settings, withdraw the location permission in your phone's settings, and clear your history or your local data in Settings, at any time.
• Direct mailing. We do not send direct mailing within the meaning of section 17C of the law and do not provide direct-mailing services. Should we ever send you marketing messages, we will do so only with your separate consent, and every message will carry a way to unsubscribe (see section 13).
• Complain. If you believe we have not handled your information lawfully, you may complain to the Privacy Protection Authority (הרשות להגנת הפרטיות) at the Ministry of Justice, in addition to any other remedy.

To exercise a right, write to privacy@tixo.co.il. We may ask you to confirm your identity — usually by writing from the account's e-mail address — before acting.

10. Children

The Service is intended for people aged 18 and over; a person under 18 may use it only with a parent's or guardian's consent. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. Automated processing

The catalogue, the matching of listings into shows and nights, the categories, the order of sellers and the "Cheapest" mark, similar-show suggestions and the in-app notifications are produced automatically by software. The Service uses no artificial-intelligence models. These are information tools: they make no decision with legal or similar effect on you, and every result can be checked or ignored by you. Their limits are described in the Price & Listing Disclaimer. In the apps, what depends on the shows you save and the things you follow — your home rows and your notifications — is worked out on your phone, not on our server.

12. Cookies and on-device storage

The Service uses only strictly necessary cookies and preference storage, and no advertising cookies or third-party trackers; the usage reports in section 3.3 go to our own server. The Cookie & Storage Policy lists each of them.

13. Communications and marketing

We send e-mail only when the Service needs to: a code to confirm your address or reset your password, a reminder that your account signs in with Google if you ask to reset a password it does not have, and, where needed, notices about security, these documents or your account. Notifications about shows you saved or follow appear only inside the app. We send no marketing messages and have no newsletter. Should we ever send marketing messages, we will do so only with your prior express consent under section 30A of the Communications (Telecommunications and Broadcasts) Law, 5742-1982; they will be marked as advertising and will always carry a free way to unsubscribe.

14. Database registration and privacy officer

Under the law as amended, our database is not subject to registration, and we are not currently required to appoint a privacy protection officer (ממונה על הגנת הפרטיות) or to notify the Privacy Protection Authority of the database. The Data Security Regulations apply to it, and we will update this policy if these obligations change. Privacy matters are handled by the contact in section 1.

15. Users outside Israel

The Service is operated from Israel for the Israeli market, and Israeli law governs our processing. If you nevertheless use it from elsewhere:

• European Economic Area / United Kingdom. Our legal bases are the performance of our agreement with you (your account and the Service you ask for), your consent (your location, when you ask the app to use it) and our legitimate interests (security, fraud prevention, and usage and error reports that help us improve the Service, which you can switch off). You have the rights of access, rectification, erasure, restriction, portability and objection, may withdraw consent at any time, and may complain to your local supervisory authority. Your information is stored in Israel, which the European Commission recognises as providing an adequate level of data protection.
• California. We collect identifiers (e-mail address, name, account identifier, installation identifier and coded handle), internet and app activity (usage and error reports and technical records) and the problem reports you send, for the business purposes in section 4. We do not sell personal information and do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes other than providing the Service. You have the rights to know, to delete, to correct and to non-discrimination; exercise them by e-mail to privacy@tixo.co.il.

16. Changes to this policy

We may update this policy as the Service or the law changes. The version and effective date appear at the top. For material changes we will give notice in the app or by e-mail at least 14 days before they take effect, where practicable, and where consent is required we will ask for it again. The current version is always available in the app, from the Account screen, and at https://tixo.co.il/en/legal/privacy.

17. Language

This policy is published in Hebrew and in English. In case of any inconsistency between the versions, the Hebrew version prevails.

18. Contact

Tixo, an independent service run by its developers and not yet incorporated

• Privacy requests: privacy@tixo.co.il. General enquiries: info@tixo.co.il
• Website: https://tixo.co.il