PRIVACY & STUDENT TRUST
Privacy Policy
Torah University uses personal information to operate the school, protect accounts, support learning and provide services students choose. We collect only what the platform needs and do not sell personal information.
Effective September 22, 2026 · Last updated October 25, 2026
Information we collect
- Account information supplied through Google sign-in, including name, email address and a stable account identifier.
- Learning records created inside TU, such as course enrollment, lesson completion, quiz attempts, assignments, placement choices, study plans and participation XP.
- Information a person chooses to submit through support, appointments, inbox, coaching, community, forms or uploaded files.
- Operational records needed for security and reliability, such as timestamps, audit events, integration status and error information.
- Public page and signup activity counts help us improve the learning entrance. Recognized paid-social tags distinguish paid-tagged visits from ordinary social referrals, and clicks on public Bronze, Silver or Gold membership links are counted as anonymous plan choices. These are not purchase or enrollment records. Public FAQ and enrollment-guide visits and the first Genesis teaching appearing in view are counted as broad categories. Published study-guide shelf and reader views, the last page appearing in view, and clicks on download and further-learning links are counted in the same broad categories, without guide IDs or titles. Visibility and clicks do not confirm reading, downloads or enrollment. Questions, answers and lesson reflections are never included in these measurement events. A random first party browser code in local storage expires after 30 days and helps estimate distinct browsers. It is used only to update combined statistical registers; TU does not store the code or its full hash on the server or connect it to student and payment records. Counts use public page categories and broad referral categories, without IP addresses, contact details, device fingerprints, private page paths or full referral URLs. We honor Do Not Track, Global Privacy Control and the browser measurement choice below.
- A fixed approved invitation reference may be kept in session storage for up to 30 minutes in the current tab. If you select the optional, unchecked checkout referral choice, TU records that reference with your checkout and can associate its verified payment outcome and first lesson completion in private reports. This is separate from anonymous visitor measurement; no browser code is linked to an account. Declining has no effect on membership. You can remove a shared referral association from Your membership without changing billing or learning records. This feature sends no data to social platforms. The same browser measurement preferences, Do Not Track and Global Privacy Control suppress it.
- Purchase and subscription status received from Square. TU does not store complete payment-card numbers.
- Public social-media engagement reviewed through owner-connected Meta tools when TU prepares prospective-student records. Private social messages are not scanned by this feature.
How we use information
- Provide sign-in, course access, progress tracking, classroom features, appointments, support and account communication.
- Show a student an accurate next step and help authorized staff support that student.
- Operate approved communications, prevent duplicate messages and respect unsubscribe or contact-hold choices.
- Protect the service, investigate failures, maintain audit records and improve navigation and learning workflows.
- Process purchases, memberships and fulfillment through connected providers.
AI-supported features
Some owner or student features may use configured AI providers, including xAI, Google Gemini or Groq. TU sends only the content needed for the requested task. Rabbi’s Assistant requires the student to confirm that a Torah question and its supplied conversation history are suitable to treat as public before an external model is used. Academic record questions are answered from TU’s own records without sending the private record to that public-question model.
Owner tools may send owner-selected course material, lecture excerpts or lead screenshots to a configured analysis provider. Generated curriculum, outreach, publications and consequential student actions remain subject to the review controls shown in the applicable tool.
Service providers and disclosures
TU uses service providers to host the platform, authenticate accounts, store data, send email, process payments, analyze owner-selected material and publish owner-approved content. Current integrations may include Cloudflare, Google/Firebase, Resend, Square, Meta, Buffer and configured AI providers. Each provider processes information under its own terms and only for the connected function.
We may disclose information when required by law, to protect users or the service, or as part of a legitimate organizational transition with appropriate safeguards. We do not sell personal information or rent student records to advertisers.
Account isolation and sensitive material
Student records are access-controlled by the signed-in account. Coaching journals, support conversations, private messages and staff notes are not made public. Private coaching material is kept separate from general academic reporting unless the student deliberately shares an entry with the office or the feature clearly states otherwise.
Retention and choices
We keep information while it is needed to provide the service, maintain academic and operational records, resolve disputes, prevent abuse and meet legal or accounting obligations. Retention varies by record type. Students may manage available email preferences inside TU and may request access, correction or deletion through Student Support or by email.
Distinct browser reports cover at most the last 30 UTC days. Older aggregate visitor registers are purged when the measurement endpoint next runs; aggregate page totals are retained separately. The browser measurement switch removes the local random code and stops future measurement from that browser. Statistical counts are estimates, not identified people, and cannot be used to recover an individual visit history.
Deleting an account may not remove records we must retain for security, payment reconciliation, legal compliance or a documented institutional obligation. We will explain any retained category when responding to a verified request.
Security, children and changes
TU uses access controls, private storage, server-side authorization and audit records designed to protect personal information. No online service can guarantee absolute security. The general TU platform is not directed to children under 13, and a parent or guardian should contact us before a child uses the service.
We may update this policy as the platform changes. The effective date above identifies the current version. Material changes will be presented through an appropriate TU notice.
Website measurement choices
This choice applies to this browser. It does not change your account, lessons, sign in or email preferences.
Past combined counts do not identify your visits and cannot be separated by person. Clearing browser storage also clears this preference.