Privacy Policy

• Account details: name, email address, role (teacher, student, staff), and country when you apply as a teacher.
• Learning data: which materials are assigned to a student, reading progress, and daily activity — so teachers and students can follow progress.
• Billing data: subscription plan, payment history, the payment token issued by our payment processor, and the last four digits and expiry of the card. Full card numbers never reach our servers.
• Technical data: IP address and basic device information, used for security (for example, limiting repeated payment attempts) and to keep the service running.
• Messages you send us, such as applications or support emails.

• To provide the Platform: sign-in links, dashboards, assignments and progress.
• To bill subscriptions, send receipts and renewal reminders, and pay Teacher Partner balances.
• To notify teachers when their students join or when a payment fails.
• To protect the service against abuse and fraud.
• To improve the materials and the Platform, using aggregated, non-identifying statistics.

We do not sell personal information and we do not use it for third-party advertising.

We rely on a small number of service providers, each bound by their own data-protection commitments:

• Supabase — database and authentication (data hosted in the cloud region configured for our project).
• Cloudflare — hosting, networking, and bot protection.
• Tranzila — payment processing (PCI-DSS Level 1). Card details go directly to Tranzila.
• Resend — transactional email delivery.

A Teacher Partner can see the name, email, level, assignment and progress data of the students they invited — that is the purpose of the service. Students can see their own teacher’s name and contact email. Neither can see other teachers’ or students’ data.

We keep account and learning data for as long as the account exists, and billing records for the period required by Israeli tax and accounting law (currently seven years). You can ask us to delete your account; we will remove personal data that we are not legally required to keep.

You may ask to see, correct, or delete the personal information we hold about you, and to receive a copy of it, by emailing office@ulpanor.com. We will answer within 30 days. Where our processing is based on consent, you may withdraw it at any time.

Data is encrypted in transit; access to the database is restricted by row-level security so each user can reach only their own records; staff access is role-based and logged. No system is perfectly secure, and we will notify affected users and the relevant authority of any breach as the law requires.

We use only the cookies needed to keep you signed in and to protect the service. We do not use advertising or cross-site tracking cookies.

Student seats are activated through a teacher and, for learners under 18, by a parent or guardian who completes the activation and accepts these policies on the learner’s behalf.

We will post any changes to this policy here and update the date above. Significant changes will also be announced by email or on the Platform.