Privacy Policy
Last updated: February 20, 2026
This Privacy Policy explains how StudyGPT ("we", "us", or "our") collects, uses, and protects information about you when you use our Service at studygpt.io.
1. Information We Collect
Information you provide
- Account information: name, email address, and profile photo when you register via email or OAuth (Google)
- Content you create: study plans, chat messages, uploaded files, and exam results
- Payment information: billing details processed by our payment provider (we do not store card numbers)
Information collected automatically
- Usage data: pages visited, features used, and interactions with the Service
- Device data: browser type, operating system, and IP address
- AI interaction data: prompts sent and responses received, used to improve memory and personalisation features
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Personalise your experience using AI memory features
- Process payments and manage subscriptions
- Send transactional emails (account updates, subscription confirmations)
- Analyse aggregate usage patterns to improve the Service
- Comply with legal obligations
3. Legal Basis for Processing (EU/UK Users)
We process your data on the following legal bases:
- Contract: to deliver the Service you signed up for
- Consent: for analytics cookies (you can withdraw at any time)
- Legitimate interest: to improve the Service and prevent abuse
- Legal obligation: where required by law
4. Cookies
We use the following cookies:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
__clerk_* | Authentication session tokens (Clerk) | Session | Strictly Necessary |
sidebar_state | Remembers your sidebar collapsed/expanded preference | 7 days | Functional |
studygpt_consent | Stores your cookie consent choice | 1 year | Strictly Necessary |
ph_* | Analytics — page views, feature usage, session data (PostHog) | 1 year | Analytics (requires consent) |
You can manage your cookie preferences at any time via the panel or your browser settings.
5. Third-Party Services
We use the following third-party services that may process your data:
- Clerk — authentication and user management (Privacy Policy)
- Convex — database and backend infrastructure (Privacy Policy)
- OpenRouter — AI model routing (Privacy Policy)
- Mem0 — AI memory storage (Privacy Policy)
- PostHog — product analytics, hosted in the EU (Privacy Policy)
We do not sell your personal data to third parties.
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. Chat history and study plans are retained until you delete them or close your account. Analytics data is retained for up to 2 years in aggregate form.
7. Your Rights
Depending on your location, you may have the right to:
- Access: request a copy of the data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and associated data
- Portability: request your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: withdraw cookie consent at any time without affecting prior processing
To exercise any of these rights, contact us at info@studygpt.io.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
9. Security
We implement appropriate technical and organisational measures to protect your data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on the Service. Continued use after changes take effect constitutes acceptance of the updated Policy.
11. Contact
For privacy-related questions or to exercise your rights, contact us at info@studygpt.io.