1. Introduction
Studi (“Studi”, “we”, “us”) is an AI-powered study application. This policy explains what information we collect, how we use it, the third parties we share it with, and the choices and rights you have. It applies to the Studi web app and related services.
2. Information We Collect
We collect:
- Account & identity: email address, password (stored hashed by our auth provider), username, and optional profile name and avatar.
- Content you create or upload: study materials (PDFs, documents, slides, images), lecture audio recordings, and the study sets, flashcards, practice tests, notes, mind maps, and videos generated from them, plus your messages to the AI tutor.
- Usage & progress: study stats (streaks, gems, focus-session timers), in-app navigation history (pages visited, to restore your place across devices), practice-test progress, and AI usage events (which feature was used, the model, token counts, and estimated cost).
- Device & anti-abuse data: a hashed device identifier and device/browser signal characteristics (a “fingerprint”) used to enforce free-tier usage and account limits and to prevent abuse. We store these in a hashed/derived form, not your raw device details.
- Payment data: processed by Stripe. We store your Stripe customer and subscription identifiers and subscription status — we do not receive or store full card numbers.
3. How We Use Your Information
- Provide and maintain the app and generate AI-powered study materials from your content.
- Personalize your learning experience and sync your data across devices.
- Enforce usage limits, prevent abuse, and protect the security of the service.
- Process payments and manage subscriptions.
- Send transactional and security messages (e.g. email verification, password reset).
4. Third Parties & Subprocessors
We do not sell your personal information. We share data with service providers who process it on our behalf so the app can function:
- Supabase — authentication, database, and file storage (hosts your account and content).
- Stripe — payment processing and subscription billing.
- AI providers — when you generate study materials or chat with the tutor, the relevant text, images, or audio are sent to be processed:
- Google (Gemini) — may use content for model improvement per Google's API terms.
- Anthropic (Claude) — may use content for model improvement; see Anthropic's terms.
- OpenAI — may use content for model training; see OpenAI's data usage policy.
- DeepSeek, Groq, fal.ai — audio transcription and diagram generation under their respective terms.
- Mubert — generates background music for study videos.
- Resend — delivers transactional and operational emails.
- We may also disclose information to comply with the law or to protect our rights, users, or the public.
5. Cookies & Local Storage
We use first-party authentication cookies to keep you signed in. We also use your browser’s localStorage for preferences and a device identifier, and IndexedDB to store your uploaded files locally on your device. We do not use third-party advertising cookies.
6. Data Retention
We keep your personal data while your account is active. When you delete your account, we initiate deletion of your associated data within 30 days (see Section 7). Some records may be retained where required — for example, anonymized AI-usage logs (no longer linked to your account) kept for billing and accounting for up to 7 years per tax law, and hashed device records used for fraud and abuse prevention.
7. Your Rights & Choices
You can access and update your information in the app. You can permanently delete your account and associated data at any time from Settings → Privacy & Data → Delete Account, or by contacting us. Depending on where you live, you may also have the right to:
- Access, correct, or export your personal data (data portability).
- Request deletion of your personal data.
- Object to or restrict certain processing, and withdraw consent.
- EEA/UK (GDPR): our lawful bases are performing our contract with you (providing the app), our legitimate interests (security and abuse prevention), and consent where required.
- California (CCPA/CPRA): we do not sell or share your personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
8. International Data Transfers
Our service providers are primarily located in the United States, so your information may be processed outside your country. Where required, transfers are made under appropriate safeguards such as the EU Standard Contractual Clauses.
9. Children’s Privacy
Studi is intended for students. We do not knowingly collect personal information from children below the minimum age required in their jurisdiction without appropriate consent. If you believe a child has provided us personal data, contact us and we will delete it.
10. Security
We use industry-standard measures including encryption in transit (HTTPS), Supabase row-level security on user data, server-side AI API keys (never exposed in the browser), device-level usage caps, and API rate limits. No method of transmission or storage is 100% secure; report concerns to our security page.
11. Changes to This Policy
We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice.
12. Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of the State of California, without regard to its conflict of law principles. Any questions or disputes about this policy shall be resolved in accordance with the terms outlined in our Terms of Service.
13. Contact Us
Questions about this policy or your data? Contact us at:
privacy@studi.ai
To exercise your rights under GDPR, CCPA, or other privacy laws, please email privacy@studi.ai with the subject line “Privacy Request” and specify your request type (access, correction, deletion, or data portability).