Studyzy Privacy Policy

Effective Date: 13 April 2025

Welcome to Studyzy (“Studyzy,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our websites, mobile applications, or any related services (collectively, the “Services”). It also describes your rights and choices concerning your personal data. Please read this Privacy Policy carefully.

By using the Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Services.

1. Data Controller

Studyzy, Inc. (or the relevant corporate entity operating Studyzy in your jurisdiction) is the controller of your personal data for purposes of data protection laws such as the EU’s General Data Protection Regulation (“GDPR”). If you have any questions or concerns regarding this Privacy Policy or our data processing activities, you can reach us at:

• Email: [email protected]

2. Information We Collect

We collect information about you in different ways when you use our Services. The personal data we collect may include, but is not limited to:

2.1 Information You Provide Directly

1. Account Information:
   Registration Data: When you create an account, we collect your name, email address, username, and password.
   Payment Information: If you subscribe to a paid plan or otherwise make a purchase, we (or our payment processor) collect your payment card details, billing address, and transaction history.
2. User Content (Uploads):
   When you upload photos of textbooks, notes, prompts, or any other materials to generate flashcards, we collect and store these files (“Content”) so we can provide Services such as flashcard generation. We do not use or disclose your uploaded Content for independent AI model training. We rely on third-party AI services (e.g., OpenAI or similar providers) to process your input solely to deliver features in the Studyzy platform.
3. Profile and Feedback:
   If you choose to provide information about yourself (e.g., your age, location, role, or school/university) or participate in surveys, we collect that data. If you contact us (e.g., via email or feedback form), we collect the contents of your message.
4. Social Media Information:
   If you interact with our social media pages (e.g., Instagram, LinkedIn, etc.), we collect your username, profile picture, and any other personal data you choose to provide.

2.2 Information We Collect Automatically

1. Log Data: We automatically collect certain information whenever you use our Services, such as your Internet Protocol (IP) address, browser type, operating system, referring URLs, and date/time stamps of your requests.
2. Usage Data: We track how you interact with our Services (e.g., pages visited, links clicked, features used, time spent on each page) to better understand usage patterns and improve the platform.
3. Device Information: We may collect information about the device you use to access our Services (e.g., device identifiers, operating system type and version, browser type).

2.3 Cookies and Similar Technologies

We and our third-party partners use cookies, web beacons, mobile analytics, and similar technologies to operate and enhance the Services. These technologies allow us to:

• Remember your preferences and settings.
• Understand how you interact with our Services.
• Measure and improve performance.
• Provide certain features and functionalities.

You may adjust your browser or device settings to limit or refuse cookies; however, doing so may affect the availability and functionality of certain features of our Services.

3. How We Use Your Information

We use your personal data for the following purposes, and in accordance with applicable data protection laws (e.g., GDPR, CCPA):

• Provision of Services: To provide and maintain our platform, generate flashcards, and perform other activities you request (GDPR legal basis: contract necessity, Art. 6(1)(b)).
• Improvement and Development: To analyze usage trends and user feedback, troubleshoot technical issues, and develop new features and services (GDPR legal basis: legitimate interest, Art. 6(1)(f)).
• Communications and Customer Support: To send you transactional or administrative messages (e.g., billing notices, service updates), respond to your inquiries, and provide customer support (GDPR legal basis: contract necessity or legitimate interest, Art. 6(1)(b) or (f)).
• Marketing Communications: With your consent or as permitted by law, we may send you promotional emails about new features or offers (GDPR legal basis: legitimate interest or consent, Art. 6(1)(f) or (a)). You can opt out at any time.
• Payment Processing and Fraud Prevention: To process payments for subscriptions or other paid services, and to protect against fraudulent or unauthorized transactions (GDPR legal basis: contract necessity or legal obligation, Art. 6(1)(b) or (c)).
• Legal Compliance and Security: To comply with applicable laws, regulations, or legal obligations; to detect and prevent fraud, abuse, and security risks; and to protect the rights, safety, or property of our users, Studyzy, or others (GDPR legal basis: legal obligation or legitimate interest, Art. 6(1)(c) or (f)).
• Aggregated or De-Identified Data: We may aggregate or anonymize your personal data so it no longer identifies you. We use this data for research, analytics, or product improvement.

4. Legal Bases for Processing (EEA/UK/Swiss Users)

When processing personal data from individuals in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, we rely on various legal bases under the GDPR, including:

• Contract necessity (Art. 6(1)(b)) – for processing necessary to provide you with our Services.
• Legitimate interests (Art. 6(1)(f)) – for improving and securing our Services, or sending certain marketing communications to existing users.
• Legal obligations (Art. 6(1)(c)) – for complying with relevant laws and regulations.
• Consent (Art. 6(1)(a)) – where applicable law requires consent (e.g., certain marketing communications).

5. How We Share Your Information

We do not sell or rent your personal data. However, we may share your personal data with:

1. Service Providers: Companies that help us operate our business or provide services on our behalf (e.g., payment processors, cloud hosting, AI platform providers). These parties are contractually obligated to keep your data confidential and use it only for the purpose of providing services to us.
2. Analytics and Advertising Partners: We may allow third-party analytics providers (e.g., Google Analytics) to collect data to help us understand usage of our Services. Where applicable and lawful, we may share limited data (e.g., cookie identifiers, IP address) with advertising partners to measure ad performance. We do not run personalized ads targeted to minors under 13.
3. Legal and Compliance: If required by law, court order, or when disclosure is necessary to protect our rights, investigate fraud or security issues, or respond to government requests.
4. Corporate Transactions: If we undergo a merger, acquisition, financing, or sale of some or all of our assets, your information may be transferred as part of that transaction.
5. With Your Consent: We may share information with other parties if you specifically direct us to do so or consent to such sharing.

6. Children’s Privacy

Studyzy’s Services are primarily designed for users who are at or above the age required by local law to provide valid consent to data processing. However, we understand some younger students may wish to use our platform.

1. Under 13 (or relevant minimum age): If you are under 13, you must have a parent or legal guardian’s permission to use our Services. We do not knowingly collect or process personal data from children under 13 without verifiable parental consent (or a similar mechanism required by law). If we learn we have collected personal data from a child under 13 without the appropriate consent, we will take steps to delete it.
2. Education or School Use: Where a school or teacher uses Studyzy with students under 13, the school may serve as the guardian’s representative. We may process “student records” as part of providing our Services to the school, abiding by relevant student data privacy laws (e.g., FERPA in the U.S.).

If you become aware that a child has provided us personal data without parental or school consent, please contact us at [email protected], and we will promptly remove the data and terminate the account.

7. International Data Transfers

We are based in UK, but we may transfer and process your personal data in other countries (including the United States) where we or our service providers operate. These countries may have data protection laws that differ from those in your home country.

For transfers from the EEA/UK/Switzerland to countries not deemed to provide an adequate level of data protection (e.g., the U.S.), we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms. If you have questions about our international data transfer practices or wish to obtain a copy of the relevant transfer safeguards, please contact us at [email protected].

8. Data Retention

We retain your personal data only as long as necessary to:

• Provide and maintain the Services;
• Comply with our legal obligations (e.g., tax, accounting, or audit requirements);
• Resolve disputes and enforce our agreements;
• Fulfill other legitimate business purposes.

When we no longer need your data for these purposes, we securely delete or anonymize it.

9. Your Rights and Choices

Depending on your location and applicable laws, you may have some or all of the following rights regarding your personal data:

• Access and Portability: You can request details about the personal data we hold about you, as well as a copy of that data in a commonly used format.
• Rectification and Deletion: You can ask us to correct inaccurate data or delete your personal data.
• Objection and Restriction: You can object to or request that we restrict certain processing (e.g., direct marketing).
• Withdrawal of Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.
• Lodge a Complaint: You have the right to contact your local supervisory authority if you believe our data processing violates applicable law.

To exercise your rights or make any request regarding your personal data, please email us at [Insert Contact Email]. We may request proof of identity or ask you to verify account details to ensure we act on requests only where we can confirm it is you who is making them.

10. Security Measures

We take reasonable steps to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Secure server infrastructure and encryption in transit (HTTPS).
• Internal policies and procedures on data handling.
• Limited access to personal data on a need-to-know basis.

Despite our efforts, no security measure is perfect or impenetrable. We encourage you to keep your login credentials confidential and notify us immediately if you suspect unauthorized use of your account.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will provide a prominent notice (e.g., by email or on our website) and revise the “Effective Date” at the top. Your continued use of the Services after such updates indicates your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Email: [email protected]

We will do our best to answer your questions and address your concerns promptly.

Thank you for trusting Studyzy.