Legal, in plain language
Privacy (in plain language)
Last updated: April 10, 2026
Here is what we collect, what we do with it, and what we will never do with it. Written so you can actually skim it.
What we collect
When you create an account we store: your email address, a hashed password, the display name you chose, and the comfort settings you picked. As you use the app we store: the messages you send to the intake conversation, the facts we extract from those messages to build your path, the chapters you've read, the notes you've written (encrypted), and basic timestamps about when you last signed in. If you click a flag button to report a translation or a chapter, we store the report too.
What we do with it
We use it to build the experience. That's the whole list. We don't sell your data, we don't rent it, we don't ship it to marketers, we don't use it for advertising, and we don't use it to train models. There is no tracker for growth, no heatmap tool, no Facebook pixel. A very small amount of aggregate, non-personal telemetry (like total signups this month) lives in the admin panel so the author can tell whether the project is alive.
How AI providers see your content
When you chat with the intake, your message is sent to an AI provider (currently Anthropic's Claude, with OpenAI as a backup) so they can generate the reply. Both providers have their own privacy policies and data-handling rules. We don't send more than necessary to get a reply. We don't use the user-content APIs that allow the provider to train on your content (both Claude and OpenAI offer non-training defaults for API usage, and we use those).
Who we share it with
Nobody, except the small set of services we need to run the app: our database host, our email sender (for sign-in links), and the AI providers mentioned above. We don't share it with advertisers. If a court order ever asked us to hand something over we'd push back within reason, and let you know if we're legally allowed to.
Cookies
We use one cookie: the session cookie that tells the server who you are while you're signed in. We don't use analytics cookies. We don't use advertising cookies. If you turn cookies off, sign-in won't work, but that's the only thing that'll break.
Where your data lives
On a single server in Europe. Your notebook is encrypted at rest. The whole database is backed up nightly, and backups are deleted after 30 days unless we need them to recover from a problem.
Your rights
You can ask for a copy of everything we have about you. You can ask us to delete your account, at which point your data is gone: notebook, chat, family record, the works. To do either, email hello@jewishbutnotjewish.org and we'll answer within a week. You don't need a reason. If you're in the EU or the UK, the GDPR rights you have under law are the rights you have here, even if we haven't listed them one by one.
Not for kids
This project is not designed for children under 16. Please don't create an account if you're younger than that.
Changes to this policy
If this policy changes in a meaningful way, the last-updated date at the top of this page changes too. Material changes will be mentioned in the footer of the next chapter you open.
Questions
Email hello@jewishbutnotjewish.org. We read every message.