Privacy Notice

Last written: 14 September 2026

Who is responsible

SAFE ARENA — the school that runs this site and the Torah Arena — decides what is collected here and why. In the language of the LGPD it is the controlador; in the language of the GDPR, the controller.

We do not publish a personal e-mail address on this site. Everything reaches us through the school's own forms.

How to reach us

Use the Contact Us form in the menu of any page, or open a ticket on the Support page. Both go to the school's own inbox. Please say which family and which student you are writing about, so we can find the record.

What we collect

Only what the thing you are using actually needs:

• Enrolment and tuition — the student's name, the parents' names, an e-mail address, a WhatsApp number or telephone, a city and country, the community and the institution the student comes from, and an emergency contact.
• Uploaded documents — where a place is applied for, an identity document for a parent and a document of birth for the child.
• Parent and child e-mail — to link a parent's account to a child's, and to send the six-digit code that proves the link.
• The learning record — which lessons were opened, which were marked as learned, the streak and where to resume. It is the student's own progress, nothing more.
• Messages — what is written in the contact form, in a support ticket, in the crisis form and in the chat.
• Connection details — with every chat message and every form, the school's server records the IP address, the approximate place it points to, the time zone, the network, the device and the browser, and sends them to the school's team with the message. They are kept with the message.
• Site measurement — Cloudflare Web Analytics, which is cookieless and does not follow a visitor from site to site. We set no advertising cookie of any kind.

Why we collect it

To decide on an application and to open the right division for a student; to teach the student and keep his own record of what he has learned; to let a parent see that record; to answer a message; to keep a child safe in a classroom; and to keep the site working and defended.

The legal bases we rely on

LGPD (Brazil) — art. 7 (consent, the performance of a contract, and the school's legitimate interest), art. 8 (how consent is given and withdrawn) and art. 14 (a child's data is processed in the child's best interest, with the consent of a parent or guardian).

GDPR (EU / EEA) — art. 6(1)(a) consent, art. 6(1)(b) a contract with the family, art. 6(1)(f) the school's legitimate interest in running and defending the site; art. 8 for the consent of a holder of parental responsibility where the child is below the age of digital consent in that country (13 to 16, depending on the member state).

COPPA (United States) — for a child under 13 the application must carry a parent's or guardian's consent (a box the parent ticks; the school records when it was given) before the account is opened, and a parent may review what is held and ask us to delete it.

How long we keep it

• A sign-in session — 30 days, then the cookie expires and the student signs in again.
• A six-digit code (parent link, sign-in) — 15 minutes.
• A support ticket — 30 days. A crisis-chat conversation, with its connection details — kept by the school and not deleted automatically, so the team can follow what was said; erased on request.
• An uploaded identity or birth document — 180 days, then it is deleted automatically.
• The learning record — for as long as the student is enrolled. On request we delete it sooner.
• An enrolment record — for as long as the family is with the school, and afterwards only where a law requires it.

Who else sees it

We do not sell anything, and we do not share anything for advertising. These are the companies that handle data because the school uses their service:

• Cloudflare — hosts the site, stores the school's records and measures the traffic (cookieless).
• Cloudflare Email, and Resend as a fallback — deliver the school's e-mail. A message you send us reaches the school's team this way.
• A WhatsApp relay (CallMeBot) — where an urgent message has to reach a person quickly.
• xAI and OpenAI — the AI study partner's model. What a student types to it is sent to the model to be answered.
• ElevenLabs — voice: when a student presses the microphone, the recording of his voice is sent to ElevenLabs to be turned into text, and the teacher's spoken voice is made there too.
• Google Fonts — the pages load their typefaces from Google's font service, so opening a page sends your IP address to Google.
• YouTube, Chabad.org and Sefaria — the video and the text of a lesson are embedded from them; opening a lesson tells them that a page was requested.

Children

The school is built for children, so this part matters most.

A child under the age of digital consent in his country — 13 in the United States and Brazil, 13 to 16 in the European Union, 18 where a local law says so — may only be enrolled by a parent or guardian, who gives consent in the application.

We show no advertising to anybody. We do no profiling, no behavioural tracking and no automated decision-making about a child. A child's record is his learning, not a profile.

The short notice for parents is here: Children's privacy.

Your rights

You may ask us for a copy of everything we hold about you or your child, ask us to correct it, or ask us to erase it. You may withdraw a consent at any time; withdrawing it does not undo what was lawful before.

Ask through the Contact Us form or the Support page. We answer in the language you write in, and we will ask one question back — enough to be sure it is really you. A signed-in student can also erase his own records himself from his student page (/api/me → “Erase my records”): sessions, learning record, documents, family links and tickets are deleted at once, and the school is told.

Security

Family records — enrolment, documents, messages — are encrypted before they are stored, and the key is held by the school's server, not by the browser. Traffic is HTTPS only. Admin surfaces are not indexed and are not reachable without the school's own key.

No system is perfect. If a breach ever affects a family, we will say so, to the family and to the authority that must be told.

Where the data is

The site runs on Cloudflare's network, which is worldwide, so a record may be processed outside your country. Our processors offer the standard contractual clauses for those transfers.

Changes

When this notice changes, the date at the top changes with it. A change that affects a family materially will be told to the family, not only posted here.