Privacy Policy — AI Chavrusa

Effective date: November 1, 2026
Last updated: November 1, 2026 (revision 2)

> What changed (November 1, 2026): We added optional daily learning reminder emails. They are off unless you turn them on. This policy now describes the reminder settings we store, how we use them, and that Cloudflare sends these emails for us. See Sections 2, 3, and 6.

AI Chavrusa ("AI Chavrusa," "we," "us") is a free, non-commercial, AI-assisted Talmud and Torah study website at aichavrusa.org, operated by Oriel Hagbi, an individual. This policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have.

1. Who may use AI Chavrusa

AI Chavrusa is only for adults 18 or older who are located in the United States. It is not directed to children, and we do not knowingly collect personal information from anyone under 18, including children under 13. Sign-up requires you to confirm that you are 18 or older. If we learn that we have collected information from someone under 18, we will delete the account and its data. If you believe a minor has created an account, please contact us at the address in Section 12.

2. Information we collect

Information you give us

• Account information: your email address, display name, and password. We store your password only as a one-way cryptographic hash; we cannot see it.
• Study content: the messages you type to the AI teacher, the passages you study, your study sessions and progress, and short automatically generated summaries ("recaps") of your earlier sessions.
• Messages to us: if you email us, your email address and whatever you include in your message.
• Reminder settings (optional): if you turn on daily learning reminders, your chosen reminder time and time zone, when you turned reminders on or off, and a simple log of which days a reminder was sent or skipped.

Information collected automatically

• Technical and security data: your IP address and the country it indicates (used to enforce the US-only rule), rate-limit counters, and basic server logs (such as time of request, browser type, and error information) needed to run, secure, and debug the service.
• Sign-in cookie: one essential cookie that keeps you signed in. We do not use advertising cookies, analytics or tracking cookies, or third-party tracking pixels. We do not use any analytics service.
• On-device settings: your chosen voice setting is stored only in your own browser (local storage), not on our servers.

Information we do not want. Please do not enter sensitive personal information in the chat — for example, health, financial, government ID, or other people's personal details. Chat content is sent to Google (see Section 4).

3. How we use information

We use information only to:

• create and secure your account and sign you in;
• provide the AI teacher, keep your study history and progress, and generate session recaps;
• enforce eligibility (18+, US-only), daily usage limits, and our Terms of Use;
• prevent abuse, fraud, and security incidents, and fix problems;
• if you opt in, send you a daily learning reminder email (today's daf, a link to continue, and your streak), skipped on days you already learned;
• respond to your questions and requests; and
• comply with law and protect our rights and the safety of users and others.

We do not sell your personal information, do not "share" it for cross-context behavioral advertising, do not show ads, and do not use your information to build advertising profiles.

4. The AI teacher (Google Gemini) — please read

Answers from the AI teacher are generated by Google's Gemini API. To answer you, we send Google your study messages, the passage being studied, and a short summary of your earlier sessions. We do not send your email address or password.

AI Chavrusa uses Google's unpaid Gemini API service. Under Google's terms for unpaid services, Google uses the content submitted and the responses generated to provide, improve, and develop Google products, services, and machine-learning technologies, and human reviewers may read, annotate, and process that content. Google states it disconnects this data from the developer's Google Account, API key, and Cloud project before reviewers see it. Google also states it retains prompts and responses for 55 days to detect and prevent misuse. Because of this, do not enter anything in the chat you would not want a third party to read.

Google's handling of this content is governed by the Gemini API Additional Terms of Service (https://ai.google.dev/gemini-api/terms), Google's abuse-monitoring policy (https://ai.google.dev/gemini-api/docs/usage-policies), and Google's Privacy Policy (https://policies.google.com/privacy). Deleting your AI Chavrusa account does not delete content Google has already received; that content is governed by Google's terms.

5. Voice features

English voice playback is generated by your own device's browser; that audio and text do not leave your device. Hebrew lines read aloud within a reply also use your device's voice. An optional "Hear in Hebrew" feature (not currently enabled) would, only when you press its button, send the specific passage text you chose — not your chat messages or account details — to Google Cloud Text-to-Speech. We will update this policy before enabling it if anything else is sent.

6. Who we share information with

We share information only with:

• Service providers that run the service for us: Cloudflare, Inc. (hosting, database, storage, security, and network — Cloudflare Workers, Durable Objects, and D1) and Google LLC (Gemini API, as described in Section 4). Cloudflare also sends the optional reminder emails for us (Cloudflare Email Service); it receives only your email address, display name, and the reminder content. We send no marketing email. Reminders are off unless you turn them on, and every reminder has a one-click link to turn them off; you can also turn them off in your dashboard. We reply to messages you send us from our own mailbox.
• Legal and safety reasons: when we believe in good faith that disclosure is required by law, subpoena, court order, or other legal process; to protect the rights, property, or safety of AI Chavrusa, our users, or others; or to investigate abuse or security incidents. Where legally permitted and practical, we will try to notify the affected user before disclosing their information in response to a legal demand, unless we believe notice would be unlawful, would create a risk of harm, or the request is an emergency.
• If the operator changes: if the service is transferred to a successor (for example, a nonprofit or LLC formed to run it), information may be transferred to the successor, which will be bound by this policy for information collected under it.

AI Chavrusa is free and non-commercial. There are no payments, donations, or paid features, so we collect no payment information.

7. Data retention and deletion

• While your account is active: we keep your account information, study sessions, messages, progress, and recaps so the service can work.
• Deletion requests: email us from the address on your account (Section 12) asking us to delete your account. To protect your account, we may ask you to confirm the request from that address. We will delete your account and its study data from our live systems within 30 days of confirming your request, and confirm by email once done.
• Backups and logs: deleted data may remain in automatic database backups (Cloudflare's point-in-time recovery, which keeps database history for up to 30 days) and in server logs until those expire. We do not restore deleted data from backups except to recover from a system failure, and if we do, we will re-delete it. Deleted data is fully purged from backups and logs within 60 days of your confirmed request.
• What we may keep: a minimal record that we received and completed your request (your email address and the dates), kept for up to 3 years to show we honored it; and information we must keep to comply with law, resolve disputes, or enforce our Terms (for example, in connection with an account suspended for abuse).
• Content sent to Google: see Section 4. Google states it retains Gemini prompts and responses for 55 days for abuse monitoring; under unpaid service terms, Google may also use it to improve its products.

8. Your choices and requests

Regardless of where in the United States you live, you may ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct inaccurate account information; or
• delete your account and personal information (Section 7).

Email us from your account's address (Section 12). We will respond within 45 days. We may need to verify your identity before acting, and we may decline requests that are fraudulent, unverifiable, or that the law lets us refuse; if so, we will tell you why. We will not treat you differently for making a request.

AI Chavrusa is a free, non-commercial project run without revenue, and we do not believe it currently meets the thresholds for state comprehensive consumer privacy laws (such as the California Consumer Privacy Act or the Florida Digital Bill of Rights). We nonetheless honor the requests above for all users.

9. Do Not Track and Global Privacy Control

We do not track you across other websites or services over time, and we do not allow third parties to do so through AI Chavrusa. Because we do no cross-site tracking, our practices are the same whether or not your browser sends a "Do Not Track" or Global Privacy Control signal.

10. Security

We use reasonable measures to protect information, including encrypted (HTTPS) connections, hashed passwords, access controls, and rate limiting. No online service is perfectly secure. If a security breach affects your personal information, we will notify you and any government authority as required by applicable law — under Florida law, generally no later than 30 days after we determine a breach occurred — by email to your account address unless another method is required.

11. Changes to this policy

We may update this policy. We will post the updated version on this page with a new "Last updated" date. If we make a material change — for example, to what we collect, who we share it with, or how Google may use your chat content — we will notify you by email or a prominent notice in the app at least 14 days before the change takes effect, except where a change is required sooner by law. Changes apply only to information collected after they take effect unless you agree otherwise.

12. Contact

Questions, data requests, or account deletion: info@shsignaturehomesrealty.com
Operator: Oriel Hagbi.