Privacy Notice

1. Who we are

Study Prep acts as the data controller for the personal data collected through the service. This means we decide how and why your data is processed.

2. Data we collect

• Account data — name, email address, and login credentials (passwords are stored only as secure hashes).
• Study data — your planner state: subjects, lesson progress, streaks, study logs, test scores, test dates, and schedule settings.
• Support messages — if you contact us, we keep the correspondence.
• Usage & device data — basic telemetry, device/browser type, and IP address, used for security and product improvement.

Payment details (card numbers) are collected directly by Paddle, our Merchant of Record, and are never seen or stored by us.

3. Why we use it (legal basis)

• To create and manage your account (contract performance);
• To provide and sync your study plan and progress (contract performance);
• For security and fraud prevention (legitimate interests);
• To improve the product through aggregated usage insights (legitimate interests);
• For customer support (contract performance / legitimate interests);
• To meet legal obligations where required (legal obligation).

4. Who we share it with

• Paddle (Merchant of Record) — for selling memberships, managing subscriptions, payments, tax compliance, and invoicing;
• Service providers — hosting, database, and analytics providers who process data on our behalf under contract;
• Professional advisers — legal and accounting, where necessary;
• Authorities — where required by law.

5. Retention

We keep your data for as long as your account is active. When data is no longer needed (for example after account deletion), it is deleted or anonymised within a reasonable period, except where law requires longer retention.

6. Your rights

Depending on your country's law, you may have the right to access, correct, delete, restrict, or transfer your personal data, to object to processing, and to withdraw consent where processing is based on consent. To exercise any right, contact us through the support channel on our website. You may also have the right to complain to your local data protection authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, hashed credentials, and strict access controls, to protect your data.

8. Cookies

We use essential cookies and local storage only — to keep you signed in and to store your planner preferences (such as your chosen theme). We do not use advertising or marketing cookies. You can clear cookies and site data at any time in your browser settings.

9. Changes

If we update this notice, we will post the new version here with a revised date.