Privacy Policy

1. What RabbiGPT Is

RabbiGPT is a Torah study companion application. It helps users study Jewish texts through AI-assisted conversations, source retrieval, and structured learning modes. This privacy policy explains how we collect, use, store, and protect your information when you use the RabbiGPT application.

2. Information We Collect

When you create an account, we collect your name and email address (provided through Google Sign-In or Apple Sign-In) and a unique user identifier. When you use RabbiGPT, we store your conversations with the AI study companion, your study preferences, your progress through Torah texts, and daily/monthly/yearly/arc memory summaries derived from your study activity. If you grant permission, we collect your approximate geographic location to calculate sunset, nightfall, Shabbat, and Hebrew date times. If you use voice input, audio is transmitted to OpenAI's Whisper for transcription — we do not store raw audio. Documents or images you upload are stored securely in your personal vault. We also collect anonymized usage and diagnostic data retained for 30 days.

3. How We Use Your Information

We use your information to provide the service (personalized Torah study sessions and learning continuity), to calculate halachic times (sunset, nightfall, Shabbat), to improve the service (anonymized usage data for retrieval and performance optimization), and to communicate with you (service-related communications only — never marketing without consent).

4. Third-Party Services

RabbiGPT uses Firebase Authentication and Cloud Firestore (Google LLC) for sign-in and data storage, Firebase Crashlytics for crash reporting, OpenAI API for AI responses and voice transcription, and Sefaria API (nonprofit) for Torah text retrieval. OpenAI does not use API-submitted data to train its models. Sefaria queries contain study topics only — no personal identifying information.

5. Data Storage and Security

Your data is stored in Google Cloud Firestore servers in the European Union (europe-west12). All data is encrypted at rest and in transit. We implement Firebase Auth with secure token verification, Firestore security rules enforcing owner-only access, server-only access controls for sensitive collections, append-only write rules for conversation entries, rate limiting on all API endpoints, and hashed user identifiers in usage logs.

6. Data Retention

Account information, conversations, study entries, summaries, arc memory, and study progress are retained until account deletion. Anonymized usage logs are retained for 30 days. Crash reports are retained for 90 days.

7. Your Rights (GDPR)

Under GDPR and applicable data protection laws, you have the right to access, rectification, erasure, data portability, restriction, objection, and withdrawal of consent. You can delete your account directly within the app (Profile → Delete Account), which permanently removes all data. To exercise any rights, contact privacy@rabbigpt.app. We respond within 30 days.

8. Consent Controls

Within the app, you can opt in or out of sharing anonymized data for research and model improvement. Consent records are append-only and timestamped for auditability.

9. Children's Privacy

RabbiGPT is not directed at children under 16. We do not knowingly collect personal information from children under 16.

10. International Data Transfers

Your data is stored in the EU. If you access RabbiGPT from outside the EU, your data will be transferred to and processed in the EU. We rely on Google Cloud's standard contractual clauses for lawful transfers.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app or by email.

12. Contact

Monoikos OÜ, C. R. Jakobsoni tn 3-7, 10128 Tallinn, Estonia. Email: privacy@rabbigpt.app. For complaints, contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at https://www.aki.ee.