1.Scope of This Policy
This Privacy Policy explains how Yalkut AI collects, uses, shares, stores, and protects personal information when teachers, students, schools, and other authorized users use the Teacher Portal, Student Portal, AI Teacher, AI Tutor, assessments, and related services.
This policy applies to the Yalkut AI pilot or beta service. It does not cover third-party websites or services that Yalkut AI does not control.
2.Who Is Responsible for Personal Information
Tauga AI Ltd., located at 29 David Remez Street, Tel Aviv, Israel, is the operator responsible for this policy. Privacy questions and requests may be sent to idan@tauga.ai or +972 55-980-3346.
Tauga AI Ltd. is responsible for personal information processed during the direct individual-teacher pilot. If Yalkut AI later runs a school or organization pilot, the parties must document their respective responsibilities and, where applicable, enter into a Data Processing Agreement before real student information is collected.
3.Information We Collect
We may collect the following information when it is needed to operate the service:
- Account and profile information, such as name, email address, role, school or organization, grade level, and account identifiers.
- Course and classroom information, such as course names, rosters, invitations, learning objectives, and class settings.
- Teacher-created content, including lessons, homework, tests, activities, instructions, rubrics, and follow-up materials.
- Uploaded source materials, including documents, images, scans, videos, and related file information.
- Student learning data, including submissions, answers, attempts, scores, feedback, progress, and activity completion.
- AI interaction data, including prompts, generated responses, Tutor messages, selected settings, and user feedback about AI outputs.
- Usage and technical data, including login events, feature activity, timestamps, browser and device information, error logs, security events, and approximate network information.
- Support and feedback information provided through testing, surveys, bug reports, or communications.
4.How Information Is Collected
Information is collected directly from teacher testers, through their product activity and uploaded materials, and from the service providers used to operate authentication, hosting, storage, artificial intelligence, email, and browser-based voice input. During the initial teacher-only beta, teachers must use fictional or sample student profiles and must not enter personal information about real students. If real student access is enabled later, information may also be collected from invited students and their product activity.
5.How We Use Information
We may use personal information to:
- Create and manage accounts, courses, classes, activities, and invitations.
- Generate and revise lessons, questions, assessments, feedback, and learning support.
- Provide the AI Tutor and apply teacher-selected support settings.
- Record submissions, attempts, scores, progress, and teacher-approved results.
- Operate live assessments and classroom activities.
- Provide support, investigate bugs, prevent misuse, and maintain security.
- Measure pilot adoption, engagement, completion, reliability, and product performance.
- Improve the product using aggregated, de-identified, or otherwise lawfully processed information.
- Meet legal obligations and enforce the Terms of Use.
6.Artificial Intelligence Processing
Yalkut AI uses OpenAI as its artificial intelligence provider. Depending on the feature, OpenAI may process teacher prompts, text and images from uploaded materials, audio from uploaded videos for transcription, Student Tutor messages, and relevant course content used to generate or retrieve answers. Student Tutor messages are also screened using OpenAI's moderation service.
The current service uses GPT-5.4 for the Student Tutor, text extraction, and heavier analysis; GPT-5.4-mini for the Teacher Assistant, course and activity generation, and feedback suggestions; text-embedding-3-large to search course materials; Whisper to transcribe uploaded videos; and OpenAI's moderation model to screen Student Tutor messages. These models may change as the service develops.
Under OpenAI's standard API terms, data sent through the API is not used to train OpenAI models unless Tauga AI opts in. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring unless the account is approved for Zero Data Retention. Uploaded files are not stored in OpenAI's file-storage service; the necessary contents are sent within individual requests. Raw prompts, uploaded materials, student work, and AI conversations are processed only to provide, secure, and support the requested features and are not used for general product improvement unless separate permission is obtained or the use is otherwise permitted by law. Product improvement uses aggregated or de-identified information. Authorized teachers and personnel may review information as described in this policy.
7.Voice Input
Voice input uses the speech-recognition feature provided by the user's browser. Yalkut AI does not upload or store the original voice recording. Some browsers may send audio to the browser provider's speech service, which is governed by that provider. The user may review and edit the transcript before sending it; once sent, the transcript is stored as a normal chat message. For uploaded video materials, audio is sent to OpenAI's Whisper service for transcription. The transcript is stored for course-material search, and the original video remains stored until the teacher deletes the material.
8.Student and Minor Privacy
The initial beta is intended for individual teacher testing. During this phase, teachers must use fictional or sample student profiles and must not enter personal information about real students. If real student access is enabled later, Yalkut AI will use privacy-protective defaults, collect only information needed for the educational purpose, and will not use student information for targeted advertising or sell it.
If real student access is enabled later, students may not register independently and may use the service only through an invitation from an authorized teacher. The inviting teacher must confirm that the student is at least 13 years old and that any consent, authorization, or permission required by applicable law has been obtained.
Users under 13 must not register for or use Yalkut AI. Supporting users under 13 would require a separate parental consent process and additional age, privacy, provider, testing, and legal safeguards before access is enabled. The pilot is available only in Israel, the United Kingdom, Canada, Australia, and the United States. Before first use of the AI Tutor, eligible students are shown a short, plain-language notice explaining what information is collected, how AI is used, what assigned teachers can view, and how to contact Yalkut AI with a question or privacy request.
9.Teacher and School Responsibilities
During the initial teacher-only beta, teachers are responsible for using fictional or sample student profiles and excluding real student personal information. If real student access is enabled later, teachers must invite only authorized students, confirm that each student is at least 13 years old, provide required notices, obtain required permissions, limit uploads to appropriate educational content, and use student information only for legitimate educational purposes.
Only teachers assigned to the relevant course can view a student's identifiable AI Tutor conversation for an activity. They may view the conversation when they open that student's submission for homework, tests, or lessons containing questions. For a test's pre-test study chat, the conversation becomes available once the student starts the test. Lessons without questions do not create a submission for the teacher to open. Students are shown a notice before using the AI Tutor and on each activity explaining what assigned teachers can view. Access to identifiable AI Tutor conversations is recorded.
Teachers can also view individual messages that a student sends using "Ask the teacher," total AI Tutor usage in their course analytics, and applicable activity results. Teachers do not receive AI-generated conversation summaries or safety alerts. If OpenAI's moderation service flags a message, the message is blocked and the student is asked to rephrase it. Platform administrators can view platform-wide Tutor usage and helpfulness ratings.
10.Legal Reasons for Processing
Tauga AI Ltd. processes information as needed to provide the service, perform pilot agreements, protect users and system security, comply with Israeli law and other applicable law, pursue legitimate operational interests that do not override user rights, or obtain consent where required. Before real student access begins in a pilot country, Tauga AI and, where applicable, the participating teacher or organization must confirm the applicable student privacy requirements.
12.No Sale or Targeted Advertising
Yalkut AI does not sell teacher or student personal information. Student information must not be used for targeted advertising or unrelated commercial profiling. This commitment must be reflected in all vendor contracts used for the pilot.
13.Data Retention and Deletion
Personal information associated with an active account is generally retained while the account remains active and as needed to provide the service. When an account or course is permanently deleted, the related data is removed from active systems within 30 days. Security and operational logs are retained for up to 90 days. De-identified analytics may be retained for up to 24 months. Limited information may be retained longer when required by law or reasonably necessary to protect security or legal rights.
When a student deletes their account, the account and associated enrollments, submissions, answers, live-session participation, and AI conversations are queued for removal from active systems within 30 days. When a teacher requests account deletion, the account is deactivated and identifying profile information is removed within 30 days. Authorized educational records may be transferred to the school or another authorized teacher, or deleted or anonymized according to the applicable pilot agreement. A course must first be archived, which is reversible. Permanently deleting an archived course queues its database records, uploaded materials, extracted text, transcripts, related generated files, activities, submissions, enrollments, and Tutor conversations for deletion from active systems within 30 days. Deleting an individual uploaded material also queues its file and extracted text for deletion within 30 days. An activity may be permanently deleted only when no student has submitted work; otherwise it may be archived. Removing a student from a course hides the enrollment but preserves authorized past educational records until the applicable course or account deletion schedule is completed. The audit log records deletion actions.
Deleted information may remain in automatic backups for up to 90 days before being overwritten or removed. OpenAI may retain API inputs and outputs for up to 30 days as described above. Vercel and Yalkut AI security and operational logs are retained for up to 90 days. De-identified analytics may be retained for up to 24 months and cannot reasonably be linked back to an individual. Privacy and deletion requests may be sent to the contact listed in this policy. Some information may be retained longer when required by law or needed to protect security or legal rights.
14.Security
The operator uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No system can guarantee absolute security.
Users should protect their credentials and report suspected security incidents promptly. The operator will investigate incidents and provide legally required notifications.
15.International Data Transfers
The application is hosted by Vercel and currently runs in Vercel's default Washington, D.C. region unless the project settings specify another region. Supabase stores database, account, and uploaded-file data in the AWS us-west-1 region. OpenAI processes AI requests in the United States by default, and Resend processes course-invitation email data in the United States. The pilot is available in Israel, the United Kingdom, Canada, Australia, and the United States, and information from these countries may be transferred to and processed in the United States. Tauga AI Ltd. must put appropriate contractual, organizational, and international-transfer safeguards in place before collecting personal information in a pilot country. A participating school or organization must also meet its own obligations where applicable.
16.User Privacy Rights
Depending on applicable law, users, parents, guardians, schools, or eligible students may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to complain to a privacy regulator.
Requests may be submitted using the privacy contact listed at the beginning of this policy. Identity and authority may be verified before a request is completed.
18.Changes to This Policy
This policy may be updated to reflect product, vendor, legal, or operational changes. Material changes will be communicated through the service, by email, or through another reasonable method before they take effect when required by law.
19.Contact and Complaints
Questions, privacy requests, complaints, or concerns may be sent to idan@tauga.ai, by WhatsApp or telephone at +972 55-980-3346, or by mail to Tauga AI Ltd., 29 David Remez Street, Tel Aviv, Israel. Users may also contact the privacy regulator that applies in their jurisdiction.