Privacy Policy.

This Privacy Policy (this “Policy”) applies to information collected by Studious (“Studious,” “we,” “us,” or “our”) through the Studious website, applications, and related services (collectively, the “Service”). It does not apply to information collected by third parties, including any third-party service that the Service links to or interoperates with. Capitalized terms used but not defined in this Policy have the meanings given to them in our Terms of Service.

We collect the following categories of information:

• (a)Account information. Your email address, username, and password, provided at registration. Passwords are stored in hashed form by our authentication provider and are not accessible to us in plain text.
• (b)Optional profile information. A display name and school affiliation, if you choose to provide them in your account settings.
• (c)Study content. Text you paste, hyperlinks you submit, audio and video recordings you upload, the study materials generated from those sources, and messages you exchange with the tutoring feature.
• (d)Planning and usage data. Examinations, study blocks, and study activity you record, and usage metrics (such as processing time consumed) that we use to administer plan limits.
• (e)Technical information. Standard technical information incidental to operating an online service, such as IP addresses and security logs, which is processed by our hosting and authentication providers.

We do not collect information for advertising purposes, and we do not deploy third-party advertising or analytics trackers on the Service.

We use the information described above for the following purposes:

• (a)to provide, maintain, and secure the Service, including generating study materials, grading quiz responses, and operating the tutoring feature at your request;
• (b)to store your library, examinations, and study schedule so that they remain available to you across sessions and devices;
• (c)to administer plan limits and prevent fraud, abuse, and unauthorized access;
• (d)to respond to your inquiries and requests; and
• (e)to comply with applicable legal obligations.

We do not sell personal information. We do not use your study content for advertising, and we do not use it to train machine-learning models of our own.

We disclose information only in the following circumstances:

• (a)Service providers. We engage third-party providers to perform functions on our behalf: Supabase, which provides authentication and database hosting; OpenAI, which generates and grades study materials and transcribes audio and video recordings you upload; and OpenRouter, which processes tutoring conversations. Content is transmitted to these providers only when you request a function that requires it, and only to the extent necessary to fulfill that request. Each provider processes information under its own terms and privacy policy.
• (b)Legal requirements. We may disclose information where we reasonably believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Studious, our users, or others.
• (c)Business transfers. In connection with a merger, acquisition, or sale of all or substantially all of our assets, information may be transferred to the successor entity, subject to this Policy.

Audio and video recordings you upload are transmitted for transcription and are not retained on our servers; the resulting transcript and any materials generated from it are stored in your library, where you may delete them at any time. We do not sell or rent personal information to third parties.

Connecting Google Classroom or Google Calendar to the Service is optional. If you elect to connect either integration, the following applies:

• (a)Classroom. Access is limited to read-only scopes covering your courses, your coursework, posted class materials, and class announcements. This information is used solely to display upcoming assignments to you and, where you expressly request it, to assemble context from which study materials are generated.
• (b)Calendar. Access is used solely to create calendar events corresponding to study sessions you schedule.
• (c)Token handling. The OAuth access token issued by Google is held exclusively in your browser’s session storage and is not transmitted to or stored on our servers. The token expires with your browser session. You may disconnect either integration at any time from the dashboard, or revoke access through your Google account settings.

Studious’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We maintain administrative and technical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, hashed storage of credentials, database access controls that restrict each user’s access to that user’s own records, and the retention of provider API credentials exclusively on the server side. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a breach of security affecting your personal information, we will notify you as required by applicable law.

The Service uses the following browser storage mechanisms:

• (a)Authentication cookies, which are strictly necessary to maintain your signed-in session;
• (b)Local storage, which retains interface preferences, such as your selected display theme, on your device; and
• (c)Session storage, which temporarily holds the Google OAuth token described in Section 5 if you connect a Google integration.

The Service does not use advertising cookies or cross-site tracking technologies.

We retain your information for as long as your account remains active, so that your library and study data remain available to you. Content you delete is removed from your library promptly upon deletion. Upon deletion of your account, associated information is deleted, except to the extent that residual copies persist temporarily in backup systems pending deletion in the ordinary course, or that retention is required by applicable law.

The Service provides the following controls directly:

• (a)Export. You may download a copy of your study data from your account settings at any time.
• (b)Deletion of content. You may delete individual items from your library, or clear your study data (library, examinations, study blocks, and editable profile fields) from your account settings.
• (c)Disconnection. You may disconnect the Google integrations from the dashboard, or revoke access through your Google account settings.
• (d)Account deletion. You may request deletion of your account and associated information by contacting us at the address in Section 12.

Depending on your jurisdiction of residence, you may have additional rights under applicable data-protection law, including rights of access, rectification, erasure, restriction, portability, and objection. You may exercise these rights by contacting us as set forth in Section 12. We will not discriminate against you for exercising any such right.

The Service is intended for users thirteen (13) years of age and older, and we do not knowingly collect personal information from children under the age of thirteen. If you believe that a child under thirteen has provided personal information through the Service, please contact us at the address in Section 12, and we will delete the information and terminate the associated account.

We may revise this Policy from time to time. If we make material changes, we will provide notice within the Service or by email to the address associated with your account before the changes take effect, and we will update the Effective Date above. Your continued use of the Service after the effective date of a revised Policy constitutes your acknowledgment of the revision.

Questions, requests, or complaints concerning this Policy or our handling of your information may be directed to shewale.advait@gmail.com. We will respond within a reasonable period and in any event within the time required by applicable law.