Privacy Policy

1. Who we are

The operator of Torah App is David Herz (founder). The service is available as an app in Telegram (Mini App) and a related bot, and via the website torahdaily.app.

Torah App is an independent educational project. It is not affiliated with Telegram Messenger Inc. and is not an official Telegram product.

Privacy questions: david@torahdaily.app or Telegram @torah_app.

2. What this policy covers

This policy applies to: (a) the Torah App Mini App inside Telegram; (b) messages and commands to the related bot; (c) torahdaily.app and its subpages; (d) newsletters and notifications you enable in your profile.

Separately, the Telegram Privacy Policy, Telegram bot/Mini App terms, and this page apply. Your use of Telegram is governed by Telegram’s rules, not ours.

3. What data we process

3.1. Telegram account data

Sign-in is Telegram-only (Mini App / Login Widget / bot interaction). We receive and store what Telegram provides for identity: user id, first name, last name (if any), username, language code, Premium flag (if available), avatar URL (if provided), and last activity time.

We do not request your phone number, Telegram account email, or Telegram password. There is no separate Torah App password account.

3.2. Learning progress and settings

• Progress: wisdom/quiz topics seen, Path topic attempts (correct/incorrect), parasha read dates, Sparks points, streaks, achievements, mini-game scores.
• Settings: UI language and newsletter language (up to 6 languages), newsletter category and notification preferences.
• Usage counters (e.g. wisdom requests or quiz attempts) needed to run the product and limit abuse.

3.3. Newsletters

We store your subscription toggles (wisdom, quiz, service news, and related options). Daf Yomi categories may be temporarily paused on the product side — that does not erase your preferences. You can opt out in the app profile.

3.4. Payments (optional)

Optional project support via Telegram Stars is processed by Telegram. We store successful payment records (amount, Stars currency, Telegram payment ids, bot/web source) for support accounting. We do not receive card details.

3.5. Analytics and website cookies

We do not use Google Analytics, Mixpanel, or similar third-party trackers. We collect first-party events: in-app/bot actions and landing page views/CTA clicks (path, page language, referrer/UTM, user-agent, anonymous visitor id).

Website cookies: Mini App session (HttpOnly), anonymous landing visitor id, landing language preference (RU/EN). They are used for sign-in, language, and basic product analytics.

3.6. Text you enter

If you ask a question or choose a topic (in the bot or where forms allow it), that text may be sent to AI models to generate a response. Wisdom and quiz explanations are built from a curated source base; the model composes wording from those excerpts.

3.7. Data we do not intentionally collect

We do not collect special-category data (health, religion-as-profile, etc.) and we do not sell personal data. The product’s educational content about Jewish tradition does not mean we store your religious affiliation as a profile field.

4. Why we process data

• to provide sign-in, progress, newsletters, and learning features;
• to maintain security, reliability, and abuse prevention;
• to improve the product using anonymized/aggregated analytics;
• to record optional Stars support;
• to respond to requests and comply with lawful requirements if they arise.

Where data-protection law applies (e.g. GDPR), legal bases may include: performing the contract / providing the service, legitimate interests (security and product improvement), and consent (where you explicitly enable newsletters or submit text for AI).

5. Who we share data with

We do not sell personal data and do not rent it to ad networks.

Data may be processed by providers without which the service cannot run:

• Telegram — platform, sign-in, message delivery, Stars.
• Application hosting (currently Railway) — bot, Mini App, and website servers.
• Database (currently Supabase/Postgres) — accounts, progress, and events.
• AI providers (OpenAI and/or OpenRouter) — generating/composing educational text and related images as requested by the service.
• Parasha calendar metadata may be fetched from public sources (e.g. Hebcal) without sending your profile.

We may disclose data if required by a lawful request from a competent authority or to protect users and the service.

6. International transfers

The service is global: infrastructure and AI providers may be located in different countries. By using Torah App, you understand data may be processed outside your country of residence. We limit transfers to what is needed to operate the service.

7. Retention

Account and progress data are kept while you use the service and while the record is needed to provide features. Analytics events and payment records are kept as long as needed for the product, security, and accounting. After a deletion request we delete or anonymize data within a reasonable time, except what law allows or requires us to keep.

8. Security

We use reasonable technical and organizational measures: Telegram initData / Login Widget signature checks, session cookies with security flags, and server-side database access via service credentials. No internet system is perfectly secure — report suspected incidents to the contact below.

9. Children

The service is designed for Telegram’s audience and is not intended for children below the age at which Telegram allows independent account use in your country (often 13+). We do not knowingly target younger children or collect their data on purpose. If you believe a child’s data reached us, contact us and we will delete it.

10. Your rights

Depending on applicable law you may request: a copy of your data, correction of inaccuracies, deletion, restriction of processing, objection to processing, or withdrawal of newsletter consent. Requests are handled manually — email david@torahdaily.app or message @torah_app from the Telegram account you use with the service so we can verify you. We usually respond within 30 days.

There is currently no in-app “delete account” or “export data” button — those requests are fulfilled via the contact above. Newsletter opt-out is available in the Mini App profile.

11. Changes

We may update this policy. The “Last updated” date at the top is the current version. Material changes will be reflected here and, where practical, in the service channel/news. Continued use after an update means acceptance of the new version unless law requires otherwise.

12. Contact

Data controller / operator: David Herz. Email: david@torahdaily.app. Telegram: @torah_app. Related pages: Terms of Use, About.