← Back to Home

Privacy Policy

Last updated: July 25, 2025

Introduction

Welcome to StudyPet ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application StudyPet (the "App").

By using StudyPet, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the App.

Information We Collect

Information You Provide to Us

Account Information

  • When you sign in with Apple, we receive your Apple ID authentication token
  • Optional information from Apple Sign-In: email address
  • Display name you choose during onboarding
  • Academic profile information:
    • Education level (High School, College, Masters, PhD, Working Professional)
    • Gender (optional)
    • Major or field of study
    • Study hours per day
    • Learning obstacles (ADHD, Poor Memory, Lack of Support, Hate Reading)
    • Primary study goals

Virtual Pet Data

  • Pet customization choices (color selection 1-6)
  • Pet name
  • Pet interaction history
  • Treats given and happiness levels
  • Mini-pets obtained through referrals

Study Content

  • Documents, images, and PDFs you upload for processing
  • Study subjects and collections you create
  • Text extracted from your materials via OCR
  • AI-generated summaries and audio files
  • Concepts extracted from your materials
  • Custom flashcards and quiz content

Usage Information

  • Study session duration and frequency
  • Audio playback preferences and speed settings
  • Quiz scores and learning progress
  • Daily activity metrics:
    • Documents uploaded
    • Concepts learned
    • Study minutes
    • Audio minutes
    • Review counts
  • Streak data and achievement milestones
  • Review history and spaced repetition performance

Communication Data

  • Referral codes shared and used
  • How you heard about StudyPet (during onboarding)
  • Support requests and feedback

Information Collected Automatically

Device Information

  • Device type and model
  • Operating system and version
  • App version
  • Push notification tokens (if notifications enabled)
  • Time zone settings
  • Language preferences

Technical Information

  • Authentication tokens and session identifiers
  • RevenueCat app user ID for subscription management
  • Error logs and crash reports (anonymized)
  • API request logs (for security and performance)

Information We Do NOT Collect

  • Location data or GPS coordinates
  • Contact lists or address book
  • Camera roll (beyond what you explicitly select)
  • Advertising identifiers
  • Browsing history outside the App
  • Biometric data (fingerprints, face scans)
  • Health or fitness data
  • Social media accounts (unless for authentication)

How We Use Your Information

We use the collected information to:

Provide Core Services

  • Process your documents using AI to extract text and create study materials
  • Generate personalized summaries based on your education level
  • Create audio study materials with your preferred voice settings
  • Extract academic concepts and build knowledge graphs
  • Generate flashcards and quizzes for active learning
  • Implement spaced repetition algorithms for optimal retention
  • Track your learning progress and concept mastery
  • Maintain your study streaks and achievements
  • Sync your data across devices
  • Manage your virtual pet's happiness and interactions

Improve User Experience

  • Save your preferences and settings
  • Provide personalized study recommendations
  • Customize difficulty based on your education level
  • Remember your audio playback position
  • Suggest review times based on your study patterns
  • Personalize your pet experience

Communication

  • Send push notifications for:
    • Study reminders (if enabled)
    • Document processing completion
    • Daily streak reminders
    • Subscription status changes
    • Pet happiness alerts
  • Process support requests

Analytics and Improvements

  • Understand app usage patterns
  • Identify and fix bugs
  • Improve AI processing accuracy
  • Optimize performance
  • Develop new features

Security and Legal

  • Authenticate your account
  • Prevent fraud and unauthorized access
  • Enforce credit limits and subscription status
  • Comply with legal obligations
  • Enforce our Terms of Service

Data Processing and Third-Party Services

To provide our services, we work with trusted third-party providers:

Core Infrastructure

Supabase (Database & Authentication)

  • Hosts our PostgreSQL database
  • Manages user authentication via Apple Sign-In
  • Stores your uploaded documents securely
  • Provides real-time data synchronization
  • Implements Row Level Security for data protection
  • Location: United States

AI Processing Services

OpenAI (GPT-4)

  • Creates intelligent summaries of your documents
  • Extracts key concepts and definitions
  • Generates flashcards and quiz questions
  • Builds concept relationships
  • Data retention: Does not retain your data after processing

Mistral AI (Pixtral)

  • Performs OCR on handwritten notes
  • Extracts text from images and PDFs
  • Handles mathematical notation
  • Data retention: Does not retain your data after processing

ElevenLabs

  • Converts text summaries to natural audio
  • Provides multiple voice options
  • Creates high-quality study audio
  • Data retention: Does not retain your data after processing

Payment and Subscriptions

RevenueCat

  • Manages subscription lifecycles
  • Processes in-app purchases via Apple
  • Handles free trials and promotional offers
  • Tracks subscription status
  • Note: We never see or store your payment card information

Infrastructure and Delivery

Cloudflare Workers

  • Orchestrates document processing pipeline
  • Manages queue-based job processing
  • Ensures secure API endpoints
  • Provides global edge computing
  • Data retention: Temporary processing only

Cloudflare R2

  • Stores processed outputs (audio files, OCR results)
  • Delivers content via CDN
  • Provides secure signed URLs
  • Data retention: Until you delete content

Analytics (Future)

We may implement privacy-focused analytics to improve the app experience. Any analytics will be anonymized and comply with privacy regulations.

Data Storage and Security

Where We Store Data

  • Primary Database: Supabase (PostgreSQL) in United States
  • File Storage: Supabase Storage and Cloudflare R2
  • Processing: Temporary storage during AI processing
  • Local Storage: Device cache for offline access

How We Protect Data

  • Encryption in Transit: All data transmitted using TLS 1.3
  • Encryption at Rest: Database and file storage encryption
  • Access Control: Row Level Security policies
  • Authentication: Secure JWT tokens with expiration
  • API Security: Rate limiting and authentication required
  • Monitoring: Regular security audits and monitoring
  • Signed URLs: Time-limited access to stored files

Data Retention

  • Active Accounts: Data retained while account is active
  • Deleted Content: Removed within 30 days of deletion
  • Processing Cache: Cleared after 1 hour
  • Subscription Data: Retained per Apple's requirements
  • Account Deletion: All data removed within 30 days

Your Rights and Choices

Access and Control

You have the right to:

  • View all personal data we have about you
  • Update or correct your profile information
  • Delete individual documents or study materials
  • Clear your learning history
  • Export your flashcards and summaries
  • Request complete account deletion
  • Opt-out of concept extraction

Communication Preferences

  • Enable/disable push notifications in device settings
  • Set quiet hours for notifications
  • Configure streak reminder times
  • Choose notification types to receive
  • Unsubscribe from email communications

Data Portability

You can export:

  • Your study summaries
  • Flashcard collections
  • Learning progress data
  • Audio files you've generated

Account Deletion

To delete your account:

  1. Open StudyPet app
  2. Go to Settings
  3. Tap "Delete Account"
  4. Confirm deletion
  5. All data permanently removed within 30 days

Note: Subscription cancellation is separate from account deletion.

Children's Privacy

StudyPet is designed for students of all ages, including high school students. We take special care with users under 18:

  • We do not knowingly collect data from children under 13 without parental consent
  • Parents can request access to their child's data
  • Parents can request deletion of their child's account
  • We do not use children's data for advertising
  • Educational content is age-appropriate

If you believe we have collected information from a child under 13 without proper consent, please contact us immediately.

Data Sharing and Disclosure

We NEVER:

  • Sell your personal information to anyone
  • Share your study content with other users
  • Use your data for advertising purposes
  • Allow AI providers to train on your data
  • Share data with educational institutions
  • Make your progress public without consent

We MAY Share Data:

  • Service Providers: Only what's necessary for them to provide services
  • Legal Requirements: If required by law or court order
  • Safety: To protect rights, property, or safety
  • Consent: With your explicit permission
  • Business Transfer: If we merge or are acquired (with notice)

Referral System

  • Your referral code is shareable at your discretion
  • When someone uses your code, we link the accounts
  • We track referral rewards (mini-pets)
  • No personal data is shared between referrer and referred

International Data Transfers

StudyPet is operated by YODE PTE. LTD., based in Singapore. Our infrastructure is global:

  • Company: Singapore
  • Database: United States
  • Processing: Global (via Cloudflare)
  • AI Services: Various locations

By using StudyPet, you consent to data transfer to these locations. We ensure all transfers comply with applicable data protection laws.

Regional Privacy Rights

European Union (GDPR)

EU residents have rights to:

  • Access personal data
  • Rectify inaccurate data
  • Erase data ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent

California (CCPA/CPRA)

California residents have rights to:

  • Know what personal information is collected
  • Know if personal information is sold (we don't sell)
  • Delete personal information
  • Non-discrimination for exercising rights
  • Correct inaccurate information
  • Limit use of sensitive information

Other Regions

We respect privacy rights in all jurisdictions and will honor valid requests under applicable laws.

Security Incident Response

In case of a data breach:

  1. We will investigate immediately
  2. Take steps to secure data
  3. Notify affected users within 72 hours
  4. Notify relevant authorities as required
  5. Provide guidance on protective steps

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of changes by:

  • Updating the "Last updated" date
  • In-app notification for material changes
  • Email notification for significant changes
  • Requiring consent for material changes affecting data use

Continued use after changes means acceptance of the new policy.

Third-Party Links

Our app may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their policies before providing personal information.

Contact Us

For privacy-related questions or requests:

Data Protection Officer
Email: privacy@studypet.app
Web: https://studypet.app/privacy-contact

Company Address
YODE PTE. LTD.
160 Robinson Road, #14-04
Singapore 068914
Singapore

Response Time: We aim to respond within 48 hours

Legal Basis for Processing

We process your data based on:

  • Contract: To provide services you've requested
  • Consent: For optional features like notifications
  • Legitimate Interests: To improve and secure our services
  • Legal Obligations: To comply with applicable laws

Data Processing Details

OCR Processing

  • Image uploaded → Text extracted → Original deleted after processing
  • OCR results stored for summary generation
  • Mathematical notation preserved when possible

Summary Generation

  • OCR text → AI summarization → Markdown output
  • Customized based on education level
  • Original text retained for concept extraction

Audio Generation

  • Summary text → TTS processing → MP3 output
  • Multiple voice options available
  • Audio files stored indefinitely unless deleted

Concept Extraction

  • Parallel processing of documents
  • Concepts linked across materials
  • Knowledge graph building
  • Spaced repetition scheduling

Compliance

This Privacy Policy complies with:

  • Apple App Store Guidelines
  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA/CPRA)
  • Children's Online Privacy Protection Act (COPPA)
  • Singapore Personal Data Protection Act (PDPA)
  • Other applicable privacy laws

This privacy policy is effective as of July 25, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted.