Legal

Privacy policy

Effective November 9, 2026. Covers chavruti.ai, the Chavruti app at app.chavruti.ai, and the Chavruti connector at api.chavruti.ai.

Zeno Services, LLC
Brooklyn, New York, United States

Privacy questions: support@chavruti.ai

Zeno Services, LLC operates Chavruti and is responsible for your information. The same company operates other Zeno products (zenonest.com, zenofirm.com, zenorent.com and zenobudget.com). They're separate services, and using one doesn't share your Chavruti data with another.

The short version

Chavruti keeps your settings and a record of your learning, so your assistant can pick up where you left off and the app can show you the journey. We don't sell it, we don't use it for advertising, and we don't train AI models on it. It's shared only with the service providers that run Chavruti, and with the assistant you connect, when you use it.

What we collect

Your account

Your email address, the name you'd like to be called, and session records that keep you signed in.

Your settings

Your pronunciation tradition, how you'd like the Divine Name read and written, the lenses you choose, the frame for questions of practice, how you'd like to be addressed in Hebrew, and how the reader's help fades. These describe how you'd like to learn. Some of them may suggest something about your background or practice, so we treat them as private, and they're used only to teach you the way you asked.

Your learning record

The tracks you're on and your stage and milestones in each; where you are in each book; the words, roots, letters, terms and passages you've met, how each review went and when each is due; what you've learned, with short notes your assistant writes for next time; sugya maps; and graded readers made for you.

Mussar check-ins

If you use the Mussar track, your daily check-ins: the middah of the week, an optional score and an optional note. They're private to you. Nobody else can see them, and your assistant reads them only when you're using that track.

Assistant connections

The keys you create (stored as hashes, never in plain text), their labels, and when each was last used. When an assistant calls Chavruti, we receive only that call's inputs, which are what's needed to answer it. We don't receive or store the rest of your conversation.

Your plan

Whether you're in your trial or subscribed, monthly or yearly, the dates of your trial and of what you've paid for, and a card label such as "Visa ending 4242". You enter your card on our payment processor's own form, so Chavruti never sees or stores the card number.

Operational logs

Time, IP address, request path and result, used to run, debug and secure the service.

This website

chavruti.ai doesn't use analytics or advertising cookies.

Why we use it

To provide Chavruti: keeping your record, scheduling review, answering your assistant's requests, showing you the app, billing your plan, sending account email (sign-in, trial reminders, receipts and billing notices), keeping the service secure, responding to support requests, and meeting legal obligations. Nothing else.

AI and your data

Chavruti doesn't train AI models, and we don't let our providers use your data for training. You choose the assistant you connect, and that assistant and its provider handle your conversation under their own terms and privacy policy: for example Anthropic for Claude and OpenAI for ChatGPT. Chavruti never sends your data to an AI provider on its own. Data reaches one only because you connected it and used it.

Who we share it with

  • The assistant you connect, in answer to its requests, as described above.
  • Service providers that run Chavruti for us, each only for its job:
    • Hetzner: the servers and database.
    • Cloudflare: this website, DNS, and storage for encrypted backups.
    • Postmark: sending account and billing email. It receives your email address and the message.
    • Google: only if you sign in with Google, which tells us your name and email address. Google Cloud also holds a copy of the encrypted backups.
    • Helcim: billing. It receives your name and card on its own form, and charges your plan. We never see the full card number.
  • Legal and safety recipients, where the law requires it or to protect our users, the public or the service.
  • A successor, if Chavruti is part of a merger or sale, under this policy.

We don't sell personal information, and we don't share it for advertising.

How long we keep it

  • Your account and learning record: while your account is open, including after a trial or subscription ends, so you can pick up where you left off. When you ask us to delete your account, we delete it and your record within 30 days.
  • Revoked keys: their hashes are kept for the life of the account, so a revoked key can never work again.
  • Billing records: as long as tax and accounting law requires.
  • Operational logs: no longer than 12 months.
  • Backups: nightly backups are kept for a limited time so we can recover from a disaster. Deleted data can remain in them until they expire. They're used only to restore the service.

Where it's kept

Chavruti is offered in the United States, Canada and Israel. Your information is stored and processed in the United States. If you use Chavruti from Canada or Israel, it's transferred to the United States to provide the service you signed up for, and it's protected there as this policy describes. Laws in the United States may differ from those where you live.

Your choices and rights

  • See and correct: your settings and your record are in the app. You can change any setting, mark items known or set them aside, and change your tracks and pace.
  • Disconnect an assistant: revoke its key in Settings. It stops working immediately.
  • Get a copy or delete: email support@chavruti.ai from the address you sign in with. Depending on where you live, you may have other rights under local law. Ask us and we'll honor them.

Children

Accounts are for adults. We don't knowingly collect information from anyone under 18 without a parent's account. A parent who learns with a child does so on the parent's own account.

Security

Keys are stored only as hashes, all traffic is encrypted, and each learner's record is reachable only with that learner's sign-in or keys. No system is perfectly secure. If an incident ever affects your data, we'll tell you promptly.

Changes

If we change this policy in a way that matters, we'll tell signed-in users before it takes effect, and we'll update the date at the top.