Privacy Policy

StudyBuddy is operated by StudyBuddy AI, based in Toronto, Ontario, Canada ("we", "us"). We are responsible for the personal information described here. Our privacy contact can be reached at support@studybuddyapp.io.

Information you give us:

• Account details: email address, name, date of birth (to confirm you meet the minimum age), and your password — which is handled by our authentication provider and never stored by us in readable form.
• Study material you upload: PDFs and slides, and the notes, quizzes, flashcards and mind maps generated from them.
• Study activity: focus sessions, quiz and flashcard results, Blurting recall attempts (including audio recordings), schedules, goals, streaks and XP.
• Voice and chat: what you say or type to Buddy, and the transcripts and replies generated from it.
• Profile extras you choose to add: display name and profile picture.
• Waitlist details: your name and email if you join the waitlist.
• Messages you send us, for example support or refund requests.

Information created when you use StudyBuddy:

• Plan and usage records: your plan, trial dates, referral and trial codes you've used, and counts of features used (so plan limits and fair use can work).
• Payment records: if you buy a plan or top-up, Stripe gives us a customer reference, what you bought, the amount, and whether it succeeded. We never receive your full card number.
• Technical logs: timestamps and error logs needed to run, secure and debug the service.

We use your information only for these purposes, and on these legal grounds:

• To provide StudyBuddy — your account, generating notes, quizzes, flashcards, mind maps and voice conversations, and applying your plan. (Needed to perform our agreement with you.)
• To take payments, prevent fraud and handle refunds. (Agreement with you, and our legal obligations.)
• To keep the service secure and fix problems. (Our legitimate interest in running a safe, working service.)
• To send account and service emails, such as sign-in confirmations, trial reminders and receipts. (Agreement with you.)
• To send product news and offers — only if you've opted in, and you can unsubscribe at any time. (Your consent.)
• To meet legal obligations, such as keeping payment records for tax purposes.

We don't sell your personal information, we don't share it for cross-context behavioural advertising, and we don't show you ads.

To generate study content and conversations, the material you upload and the questions you ask are sent to AI providers (Anthropic, OpenAI and ElevenLabs) for processing. They process it on our behalf under their business API terms, which do not allow them to use it to train their models. We don't use your uploaded material to train AI models either.

AI-generated content can be wrong or incomplete — see our Terms of Service.

We use a small number of service providers. Each receives only what it needs to do its job:

• Supabase — database, sign-in, and storage for uploaded files and images.
• Anthropic and OpenAI — generate notes, answers, quizzes and flashcards; OpenAI also powers Buddy Room voice and speech-to-text.
• ElevenLabs — voice features on the Talk page and Blurting.
• Stripe — payments. Your card details go directly to Stripe.
• Resend — sends account emails and, if you opt in, marketing emails.
• Vercel — hosts the website.
• Google — only if you choose “Continue with Google” on the waitlist form, to fill in your name and email.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a sale or reorganisation of the business (in which case this policy would continue to apply to your information).

Focus mode can embed a Spotify playlist if you choose to add one. That player is Spotify's own and runs under Spotify's privacy practices.

We're based in Canada, and some of our providers store or process data in the United States and other countries. When your information is processed outside your country, we rely on our providers' contractual data-protection commitments (such as Standard Contractual Clauses for data from the EU and UK) to keep it protected. Information stored outside Canada may be accessible to authorities in those countries under their laws.

We don't use advertising or analytics cookies, and we don't track you across other websites. StudyBuddy keeps your sign-in session and preferences in your browser's local storage. Full details are in our Cookie Policy.

• Account and study data: kept while your account is open. Deleting your account in Account settings erases it immediately — your files, notes, flashcards, quizzes, progress and waitlist signup — and cancels any subscription. Copies in our providers' routine backups are removed as those backups expire.
• Payment records: kept for as long as tax law requires (currently six years in Canada).
• Waitlist details: kept until launch invitations are sent, or until you unsubscribe or ask us to delete them.
• Technical logs: kept only as long as needed for security and debugging.

Passwords are handled by our authentication provider using industry-standard hashing. Access to your data is enforced at the database level, so your account can only read and write its own records, and all data is encrypted in transit (HTTPS/TLS). No system is perfectly secure, but if a breach ever puts your information at real risk, we'll notify you and the relevant authorities as the law requires.

Wherever you live, you can ask us to:

• Give you access to, or a copy of, your personal information.
• Correct information that's wrong or incomplete.
• Delete your account and information — do it yourself any time in Account settings (it's immediate), or ask us and we'll do it within 30 days.
• Stop sending you marketing emails (use the unsubscribe link, or ask us).
• Withdraw any consent you've given, without affecting what we did before.

Depending on where you live, you also have these rights:

• Canada: you can challenge our compliance with Canadian privacy law and complain to the Office of the Privacy Commissioner of Canada.
• EU and UK: you can also object to or restrict our processing, ask for your data in a portable format, and complain to your local data-protection authority.
• California and other US states with privacy laws: you have the right to know, delete and correct your information. We don't sell or share personal information, so there is nothing to opt out of, and we won't treat you differently for using your rights.

To use any of these rights, email support@studybuddyapp.io from the address on your account. We'll confirm it's you and reply within 30 days.

You must be at least 13 to use StudyBuddy. If you're under the age of digital consent where you live (for example, up to 16 in some EU countries), a parent or guardian must agree on your behalf, and paid plans require a parent or guardian if you're under 18. If we learn that we've collected information from a child under 13, we'll delete it.

If we change this policy, we'll update the date at the top. For significant changes, we'll tell you by email or in the app before they take effect.

StudyBuddy AI · Toronto, Ontario, Canada · support@studybuddyapp.io