Privacy Policy

1. Information We Collect

We collect the following categories of information to provide and improve the StudyBuddy experience.

1.1. Account Information

We collect and store:

• Email address
• Display name
• Profile photo (optional)
• Grade level (optional)

We do not collect phone numbers, school names, or any additional personal identifiers.

1.2. Usage Data

To power analytics, badges, XP, and personalization, we collect:

• Study session data (duration, timestamps, streaks)
• Tasks created and completed
• Daily goals completed
• Flashcards created, reviewed, and accuracy
• Quiz results and performance
• Calendar events created and completed
• XP earned and badges earned
• App activity timestamps

1.3. AI Chat Logs

We store full AI chat logs, including messages you send, AI responses, timestamps, and topics discussed. This allows you to revisit past conversations and improves personalization.

1.4. AI-Generated Content

When you request AI notes, flashcards, quizzes, or study plans, we store the generated content, the subject/topic, and timestamps so your materials remain accessible.

1.5. Device Information

We may collect device type, operating system, app version, and crash logs to diagnose issues and improve performance.

1.6. Uploaded Files

StudyBuddy allows users to upload files or images. These are stored securely in Firebase Storage.

1.7. Payment Information

If you upgrade to StudyBuddy Premium, your payment and billing information is handled securely by third-party payment processors (Stripe, Apple, or Google). We do not collect, process, or store your full credit card numbers or banking details on our own servers.

1.8. Consent Records

When you create an account, accept our Terms of Service, verify your age, or accept cookies, we record a timestamped log of that consent — the type, the policy version, and the date and time. We do not store your IP address in consent records.

2. How We Use Your Information

We use your information to:

• Provide core app functionality
• Generate personalized analytics, badges, and XP
• Improve AI recommendations and save your study materials
• Maintain account security
• Improve app performance and fix bugs
• Comply with legal requirements

We do not sell your data.

3. How We Store and Protect Your Data

Your data is stored securely using Firebase Authentication, Firebase Firestore, and Firebase Storage with industry-standard security practices including:

• Encrypted connections (HTTPS)
• Firestore security rules and authentication checks
• Access control and regular security reviews

4. AI Services

StudyBuddy uses the Google Gemini API to generate notes, flashcards, quizzes, study plans, and chat responses. When you use AI features, the following data is sent to Google's servers: your text prompts, subject/topic context, and your grade level to calibrate difficulty. We do not send your email, name, or other personal identifiers to Google Gemini.

Under Google's API Terms of Service, Google does not use your API inputs or outputs to train its AI models. Data sent via the API is processed to generate a response and is not retained by Google for model improvement.

Important: AI may generate incorrect, incomplete, or misleading information. AI is not a substitute for professional tutoring, a teacher, or your own judgment. Always verify AI-generated content before relying on it for academic work.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• All personal data, study data, AI-generated content, and uploaded files are permanently deleted
• Backups are deleted within 30 days
• Anonymized analytics may be retained (no personal identifiers)

6. Children's Privacy

StudyBuddy is intended for users 13 years or older. We use an age verification gate during onboarding to prevent users under 13 from accessing the App. If a user indicates they are under 13, their account and any associated data are deleted immediately.

If we learn that a user under 13 has created an account without parental consent, we will delete the account and data as quickly as possible. If you believe a child under 13 is using StudyBuddy, please contact us at support@urstudybuddy.com.

6.1. For Users in the EEA

Our legal basis for processing your data is your consent when you create an account, and our legitimate interest in providing and improving the App. You have additional rights under the GDPR including the right to object, restrict processing, data portability, and to lodge a complaint with your local supervisory authority. Contact us at support@urstudybuddy.com to exercise any of these rights.

7. Your Rights

You have the right to access, correct, delete, or export your data, and to withdraw consent.

• Accuracy: Update your display name, profile photo, and grade level at any time in the App.
• Data Export: Email support@urstudybuddy.com with subject "Data Export Request" from your account email. We will provide your data in JSON format within 30 days.
• Account Deletion: Use the in-app "Delete Account" button to permanently remove all personal data.
• Complaints: If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

8. Third-Party Services

• Firebase (Google): Authentication, Firestore database, Storage, and crash reporting.
• Firebase Analytics: Collects device type, OS version, general geographic location (country/city level), session data, and crash data — associated with a random app instance ID, not your name or email. Learn more at firebase.google.com/support/privacy.
• Google Gemini API: AI chat, notes, flashcards, quizzes, and study plans. See Section 4.
• Payment Processors (Stripe, Apple, Google): Securely process subscription payments and manage billing history.

9. Data Sharing

We do not sell or share your data with advertisers. We only share data with Firebase, Google Gemini (via the API), and our payment processors as described above. We do not share personally identifiable information unless required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes. If we make material changes, we will ask you to re-accept the updated policy.