Privacy Policy

Effective 15 September 2026. Last updated 29 September 2026.

1. About this policy

This policy explains what StudyGPT collects, why, who else sees it, and what you can do about it. It covers the StudyGPT app and this website.

StudyGPT is operated by a sole proprietor based in Ontario, Canada, and we handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). You can reach us at [email protected].

This policy forms part of our Terms of Service.

2. What we collect

When you sign in. StudyGPT uses Sign in with Apple, so we never see or hold a password. Apple gives us an account identifier and an email address, which may be a private relay address that forwards to you rather than your real one. Either is fine and we treat them the same.

What you tell us. Your display name, and a profile photo if you add one. During onboarding we ask your education level and what you are studying for — those two answers are stored so we can understand who uses StudyGPT. They are demographics, and they do not change what the AI produces for you.

What you upload or create. Text you type or paste, PDFs, audio you record, photographs from your library or camera, and YouTube links — along with the file names, page counts and recording lengths that come with them. Everything StudyGPT generates from that material is stored too: your notes, flashcards and quizzes.

How you study. Quiz and exam scores, how well you know each flashcard and quiz question and when each is next due, and your Solve history. This is what makes progress tracking work.

What you ask the AI Tutor. Your questions and its answers, so a conversation still makes sense when you come back to it.

Your usage counters. How many study sets and tutor messages you have used in the current period, so we can apply the limits described in the app, and a record of how much AI processing your account has consumed.

Your preferences. Your accent colour and interface settings.

If you subscribe. Whether your subscription is active, and when it renews. We never see your card details — Apple takes the payment and does not pass them to us.

If you email us. Whatever you write, and the address you write from.

Our website keeps ordinary server logs, as every website does.

3. What we do not collect

This list is short and we intend to keep it that way. StudyGPT contains:

• no analytics or usage-tracking software;
• no advertising, and no advertising identifiers;
• no third-party crash or behaviour reporting;
• no tracking of you across other apps or websites;
• no cookies in the app.

We do not sell your information, and we do not share it for anyone else's advertising.

4. Why we use it

To run StudyGPT and nothing else: to sign you in, to generate study material from what you give us, to save your work and your progress, to apply the limits on your plan, to manage your subscription, to answer you when you get in touch, and to keep the Service secure and working.

You give us your information so that we can provide the Service you asked for. Where the law requires your consent, using StudyGPT is that consent, and you can withdraw it at any time by deleting your account — see section 9.

5. Who else handles it

We use a small number of companies to run StudyGPT. Each one only gets what it needs, and none of them may use your information for their own purposes.

• Apple — signs you in, and handles subscription payments.
• Supabase — stores the database and your uploaded files.
• Google — its Gemini AI models generate your study material. See section 6.
• RevenueCat — tells the app whether your subscription is active. It receives your account identifier and your purchase records; it does not receive your study material.
• Cloudflare — hosts this website and routes email sent to our addresses. It does not handle anything from inside the app.

We may also disclose information if the law requires it, or where it is genuinely necessary to protect someone's safety or to investigate fraud or abuse. If StudyGPT is ever sold or reorganised, your information may transfer with it, and this policy would continue to apply.

6. AI, and why your work is not training anyone's model

To make a study set, StudyGPT sends your material to Google's Gemini API. There is a meaningful difference between the free and paid versions of that service, and it is the reason we pay for it.

We use a paid tier, under which Google does not use what we send to train or improve its models, and its staff do not read it. On the free tier, neither of those statements would be true — submitted material can be used for product improvement and can be seen by human reviewers. Your uploads are lecture recordings, photographed notes and coursework, so we did not think that was an acceptable trade, and we pay to avoid it.

We do not train any model of our own on your material either.

One practical note: AI models can be wrong, and StudyGPT's output should be checked against your own sources. That is covered in our Terms of Service.

7. Where your information is stored

StudyGPT's database and files are hosted by Supabase on Amazon Web Services in the United States (the us-east-1 region, in Northern Virginia). AI processing also happens outside Canada.

This means your information is subject to the laws of the countries it is stored and processed in, and authorities there may be able to access it under their own legal processes. By using StudyGPT you agree to it being stored and handled this way.

8. How long we keep it

You decide, not a timer. We do not delete your material after a set period, and we do not run anything in the background that quietly clears it out.

• A file lives exactly as long as the study set it produced. Delete the study set and the recording, PDF or photograph behind it is deleted with it. Keep the set and your file stays, so you can play that lecture back next term if you want to.
• An upload that failed appears on your home screen so you can retry it, save a copy, or discard it. It is yours to clear rather than ours to reap.
• Deleting your account deletes everything — your study sets, your uploaded files, your progress and your profile.

We may keep a minimal record where the law requires it, such as records connected to a purchase.

9. Your rights, and how to use them

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent to us holding it at all. You will not be treated differently for asking.

Most of it you can do yourself, immediately, without asking us:

• change your display name or profile photo in the app;
• delete any study set, which deletes the file behind it;
• delete your entire account from the app, which removes everything.

For anything else, email [email protected] and we will respond within 30 days. If you are not satisfied with how we have handled your request, you can complain to the Office of the Privacy Commissioner of Canada.

10. Children

StudyGPT is not intended for children under 13, and we do not knowingly collect information from them. If you are under the age of majority where you live, you may use StudyGPT only with a parent or guardian's involvement — our Terms of Service says the same.

If you believe a child under 13 has given us their information, email [email protected] and we will delete the account and what it holds.

11. Keeping it safe

• Everything travels encrypted between your device and our servers.
• The database enforces, row by row, that an account can only ever read its own data — it is not left to the app to remember.
• Uploaded files sit in private storage and are reached through short-lived links, not public URLs.
• Sign in with Apple means we never handle a password, so there is no password of yours for us to lose.

No service can promise perfect security, and we are not going to pretend otherwise. If a breach ever affects you, we will tell you and report it as the law requires.

12. Changes to this policy

We may update this policy. If a change is significant we will tell you before it takes effect, in the app, by email, or by posting a notice. The date at the top always shows when the current version came into force.

13. Contact

Questions, requests or complaints about privacy go to [email protected].