My Hebrew TutorMy Hebrew Tutor
Privacy policy
Last updated: October 30, 2026
Your saved learning records stay on your iPhone by default. AI features send relevant information to the connection you enable. Local storage does not mean AI runs on your phone.
We are preparing the beta. Public privacy and support contact details will be added before external invitations open. Current invited testers can send feedback from the app’s page in TestFlight.
What this policy covers
This policy describes the Hebrew Tutor iPhone app, presented on this website as My Hebrew Tutor, and myhebrewtutor.com. The app is designed for adults aged 18 and over.
Learning records on your device
The app saves learning preferences, text exchanges, activities, responses, feedback, progress evidence and retained call summaries on your iPhone. Estimates and AI feedback are not proof of mastery. Learning records are not synced to a company learning account by default.
Device backups and exported copies are separate. Your iPhone settings can affect backups. We do not promise that every record stays outside Apple’s backup services.
AI connections and the information they process
Before using an AI connection, the app explains the relevant data and costs and asks you to enable it. Depending on the feature, relevant messages, saved learning context, activity content, responses and in-memory call observations may be sent for processing.
- Google Gemini: Gemini handles conversational voice. Live microphone audio and relevant teaching context are transmitted to Google, directly or through the internal service when that access route is used. A selected Gemini text connection also processes text tasks.
- OpenAI: A selected OpenAI text connection processes tutoring, practice generation and feedback. ChatGPT-plan access, where supported and available in the build, also involves sign-in, account metadata and access credentials.
- Internal access: If enabled, requests or voice traffic may pass through our operator-controlled service hosted on Google Cloud. This service maintains access/security records and time-limited connection handles separately from local learning records.
Provider processing can take place outside your country. Retention, training use, account controls and available deletion options depend on the provider, connection type, plan and settings. Review the applicable Google Gemini API terms, OpenAI privacy policy and OpenAI business/API privacy information. The app does not guarantee that a provider retains nothing.
Voice and credentials
The app does not retain raw voice recordings or full voice-call transcripts by default. It can save bounded summaries and learning observations. Audio and temporary recognition context still leave your device during an enabled voice session.
Connection credentials and provider account handles are stored separately from learning records in protected device storage. Learning exports do not include connection secrets. Disconnect a provider separately from deleting learning data.
Diagnostics and feedback
The app keeps a bounded local technical diagnostic journal, including operational events and available iOS crash/hang information. It is designed to exclude lesson text, raw audio and credentials. You can deliberately share diagnostics using the system share sheet. Review the destination and the information before sharing.
When you send a support message or share diagnostics, the recipient receives the information you choose to send and uses it to investigate the issue. Do not include API keys, passwords, access codes or sensitive personal information. TestFlight separately collects testing and feedback information under Apple’s terms.
This website
The website collects your email address only when you submit the waitlist form and explicitly agree to receive beta availability emails. You must be 18 or older. We store the email address, consent-policy version, signup time, expiry time and a one-way hash of your private removal link in Cloudflare D1. The database is separate from app learning records. We do not sell the waitlist or expose a public subscriber list. Signup does not verify ownership of an email address, create an app account or guarantee an invitation. No campaign or confirmation emails are sent automatically.
The website is hosted on Cloudflare. When you visit, the hosting provider may process your IP address, request headers and security/operational information to deliver and protect it, and may use necessary security cookies. See Cloudflare’s privacy policy.
Waitlist retention and removal
Each signup expires 12 months after registration and is removed by a daily cleanup, within one further day. Duplicate signups do not extend this period. Use the private removal link displayed after a new signup to delete the active entry immediately, or email moshe@myhebrewtutor.com from the subscribed address to request removal. If you lose the link or did not make the signup, use the same email contact. We may ask for confirmation of ownership before acting on an email request.
Cloudflare’s database recovery copies can retain deleted data for a limited period under its service settings (up to 30 days). We do not use recovery copies for mailing. If we restore a backup, we must reapply removal requests before using the waitlist. Support correspondence is kept in the owner’s email account only as needed to handle the request and related follow-up; you can ask for its deletion.
Website security and support email
Cloudflare Turnstile checks for automated abuse and processes browser and network information. Our Worker uses a short-lived, daily-changing digest derived from your IP address for rate limiting; it does not write your IP address to the waitlist database or log your email address. Cloudflare may retain its own security and operational records. Fonts and images are hosted with the site. We use no advertising or marketing analytics. We do not set a waitlist tracking cookie or store the removal link in browser storage.
Support email sent to moshe@myhebrewtutor.com is forwarded by Cloudflare Email Routing to the owner’s Gmail inbox, where Google also processes the message. Cloudflare and Google may process information outside your country. See Google’s privacy policy and Cloudflare’s Turnstile privacy policy.
Your controls
- Export saved learning data in Settings → Learning data.
- Delete saved learning data in Settings → Learning data. This does not delete existing exports, backups or provider-held information.
- Disconnect AI accounts or remove keys in Settings → AI connections. Remote revocation may require additional action with the provider.
- Change microphone and notification permissions in iPhone Settings.
Contact and updates
Privacy or deletion questions can be directed to moshe@myhebrewtutor.comthe beta feedback channel described on our support page until public contact details are available. Your rights may vary by location; provider-held data requests should also be directed to that provider.
We will update this page when the app’s data practices or launch setup change. The date above identifies this version.