Privacy Policy

• MyRabbi does not keep your child's voice. A recording is sent to a speech service to be checked, and our server keeps only the result.
• We ask for as little as possible — a display name is enough for a child to use MyRabbi.
• We do not sell anything to anyone. Children and school accounts are never shown advertising.
• A school or parent can ask us to delete an account and its history, and we will.

For a learner: a display name, and the progress record built as they practise — which words were read, which were flagged, scores over time, and which portions were completed. Children are not asked for an email address.

For an adult (teacher, parent, or school administrator): an email address and a password, or — if you sign in with Google or Facebook — your name and email address as that provider gives them to us. We never receive your Google or Facebook password.

For a school: the school name and a billing contact, so invoices can be issued.

Anything else you type into the app, such as a note on a lesson, is stored as you wrote it.

When a learner reads aloud, the audio is sent to our server and passed on to a speech service for analysis. It is held in memory while it is being processed, is never written to disk on our server, and no copy is kept afterwards.

What we keep is the result — which words were read correctly, which need work, and a score. That is what a teacher or parent sees. MyRabbi does not keep the recording.

The speech services that do the analysis, named in the next section, receive the recording itself. Each of them may keep what it is sent for a limited time under its own API terms. That is their policy, not ours.

If a school ever asks us to retain recordings for review, that would require their explicit agreement and a change to this page first.

To do its job, MyRabbi passes some information to a small number of service providers:

• OpenAI, Google (Gemini), Microsoft Azure Speech and AssemblyAI — audio and text are sent for pronunciation analysis and for AI features. Which are used depends on the deployment. These services receive the recording itself, and each may keep it for a limited time under its own API terms. We ask AssemblyAI to delete each transcript as soon as we have the result.
• Your browser's own speech recognition — in word-by-word reading, the browser itself listens. In Chrome that audio goes to Google's speech service, and in Safari to Apple's, under their own terms and not through our server.
• Brevo — sends our email (parent reports, verification and password resets). It sees the recipient address and the message.
• Hetzner — hosts the server the app runs on.
• Cloudflare — sits in front of the site and handles traffic.

We do not sell personal information, and we do not share it with any advertising network — there is no such network here, and no third-party tracker.

Free accounts see a small number of banner advertisements from local businesses. Paid accounts, school accounts and children never see one, whatever their plan — that is decided on our server, so an advertisement is not sent to those readers at all rather than merely hidden from them.

An advertiser chooses a city, and that is the whole of it. We tell them nothing about you: not your name, your account, what you learn, or which pages you open. There is no advertising network involved and nothing on the page is watching you.

To know whether a city is worth selling to, we keep one count: how many people opened MyRabbi in a metro area on a given day. There is no name, no account and no page in that record — it is a number per city per day. If you gave a postcode for the calendar, it stays on your own device; your browser works out the city and sends only that. We never receive your postcode.

MyRabbi is built to be used by children, usually through a school or by a parent. A child's account is created by that school or parent, not by the child, and we ask for the minimum needed: a display name.

A parent or school may ask at any time to see what we hold about a child, correct it, or have it deleted. Write to us and we will act on it — we will not require a legal letter to delete a child's data.

If you believe a child's account was created without a parent's or school's involvement, tell us and we will remove it.

Progress history is kept while the account is open, because the point of it is to show improvement over months. When an account is deleted, its progress goes with it.

Sign-in sessions expire after seven days. MyRabbi does not keep recordings at all; the speech services that analyse them may keep them for a limited time under their own terms, as above.

Passwords are stored hashed with scrypt — we cannot read them, and neither could anyone who obtained the file. Sign-in attempts are rate-limited. Traffic is encrypted in transit.

We will not pretend to be impregnable. If we ever discover a breach affecting your data, we will tell the affected accounts rather than hope nobody notices.

• Ask for a copy of what we hold about you or your child.
• Ask us to correct something that is wrong.
• Ask us to delete an account and its history.
• Withdraw a linked Google or Facebook account — you can also revoke it from their side, and a password can be set instead.

If this policy changes in a way that affects what we do with your data, we will change the date at the top and, for anything significant, tell account holders directly.

Questions, requests, or anything that worries you: hello@myrabbi.io. A person reads that address.