1. Scope

This policy explains how UnderstandingHeaven.com processes personal data in connection with educational content, newsletters, account features, guidance, and funded-learning verification.

2. Data Categories

We may process:

• Account data — email address, name, login timestamps
• Newsletter subscription data — email, name, topic interests, consent status
• Article engagement data — reading progress, engagement-level ratings, quiz answers
• Learning-session verification data — session timestamps, duration, verification status, evidence artifacts
• Optional religious/spiritual-profile data where collected or imported through sister-site flows (see Section 3)
• Device, analytics, and security-log data — pages visited, browser info, referrer, search queries

You may unsubscribe from the newsletter at any time using the link in each email.

3. Sensitive / Special-Category Data

Some religious or spiritual-profile data may be sensitive under applicable law (e.g., GDPR Article 9). Where such data is collected or imported — for example, whether a user identifies as Jewish for the purpose of Shabbat/Yom Tov learning-time compliance — the following principles apply:

• Collected only where necessary and with explicit consent (typically given on the BuyingHeaven.com central hub)
• Used only for funded-learning compliance purposes (Assur window enforcement)
• Never used for marketing, profiling, or automated decision-making that materially affects legal or economic rights
• Never included in tax documentation
• Kept separate from payments, receipts, and ordinary marketing wherever possible

If you have not consented to this data collection on the BuyingHeaven hub, this data will not be processed on UnderstandingHeaven.

4. Role Distinction

UnderstandingHeaven does not itself present purchases as donations or issue tax-deductible receipts unless expressly stated. Its role is educational content delivery and funded-learning verification.

5. Cookies and Analytics

We use the following types of cookies and tracking technologies:

• Essential cookies — required for authentication and session management. These do not require consent.
• Analytics cookies (Google Analytics GA4) — used to understand Site usage. These are only activated after you provide consent via our cookie banner.

You can change your cookie preferences at any time by clearing your browser cookies or using the cookie-consent controls on the Site.

6. Cross-Site Data Sharing

UnderstandingHeaven.com is part of an ecosystem that may include BuyingHeaven.com and ExistentialMobility.com. Where funded-learning verification or account integration requires data sharing with a sister site, data may be shared for:

• Account linking and continuity
• Learning-session verification reports (session duration, verification status, evidence hashes)
• Compliance, fraud/security prevention, and support

Data is not shared globally by default. Sharing is role-specific, purpose-limited, and logged where required. Religious or spiritual-profile data requires heightened protection and may be subject to explicit consent. Each sister site maintains its own privacy policy.

7. How We Use Your Data

• Authentication: To verify your identity and manage access
• Content delivery: To display educational articles and Torah-based teachings
• Newsletter: To send updates you have subscribed to (with your consent)
• Analytics: To understand how our content is used and improve the Site (with your consent)
• Funded learning: To track, verify, and report learning sessions
• Compliance: To enforce Assur window rules for funded learning (with explicit consent)

8. Data Retention

• Account data: Retained while your account is active
• Newsletter data: Retained until you unsubscribe
• Analytics data: Retained for up to 14 months (Google Analytics default)
• Learning session data: Retained as required for verification and audit purposes
• Engagement data: Retained in anonymized/aggregated form

9. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls for administrative functions.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Withdraw consent for newsletter or analytics at any time
• Object to processing of your personal data
• Request deletion of your personal data (subject to legal retention requirements)

To exercise any of these rights, contact us via the Guidance / Contact page.

11. Children’s Privacy

This Site is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date. Continued use of the Site after changes constitutes acceptance.

13. Contact

For privacy-related questions or to exercise your data rights, please use the Guidance / Contact page.