privacy policy

last updated: january 30, 2026

studyall is built by a student, for students. we don't sell your data, we don't run ads, and we keep things simple. this policy explains exactly what data we collect and how we use it.

1. data accessed

studyall accesses the following types of data:

google account data (if you sign in with google):

• email address — used to create and identify your account
• display name — used to personalize your experience
• profile picture — displayed in the app interface

we do not access your google drive, google calendar, google contacts, gmail, or any other google services. we only access the basic profile information provided during google sign-in.

data you provide directly:

automatically collected data:

• ip address — for security and abuse prevention
• device preferences — theme choice, notification settings (stored locally on your device)

2. data usage

we use your data exclusively to provide and improve the studyall service:

• authentication — your email and google account data are used to log you in and identify your account
• personalization — your name is displayed in the app, and your exam board selection determines which study content you see
• progress tracking — your syllabus completion and notes reading progress are stored so you can track your studies across sessions
• ai assistance — your chat messages are sent to ai providers (google gemini or others based on your settings) to generate helpful responses
• security — your ip address helps us detect and prevent abuse

we do not:

• use your data for advertising or marketing
• use your data to train ai models
• profile you for any purpose other than providing the study service
• use google user data for any purpose other than providing the studyall application

3. data sharing

we do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

third-party services we use:

• firebase (google) — provides authentication and database services. your account data is stored on firebase servers. see the firebase privacy policy.
• ai providers — when you use the ai chat feature, your messages are sent to ai providers (such as google gemini) to generate responses. we do not share your personal information (name, email, etc.) with these providers — only the chat content you choose to send.

we may share data if:

• required by law or legal process
• necessary to protect the rights, safety, or property of studyall or its users

4. data storage & protection

your data is stored securely using industry-standard practices:

• encryption in transit — all data transmitted between your device and our servers uses https encryption
• secure authentication — user authentication is handled by firebase authentication, which uses industry-standard security protocols
• database security — your data is stored in firebase firestore with security rules that restrict access to only your own data
• input sanitization — we sanitize user inputs to prevent injection attacks and xss vulnerabilities

local storage: some preferences (theme, notification settings) are stored locally in your browser and are not transmitted to our servers.

data location: firebase servers are located in the united states.

5. data retention & deletion

how long we keep your data:

• your account data and study progress are retained as long as your account is active
• ai chat history is retained to provide conversation continuity within your sessions
• we do not retain data longer than necessary to provide the service

your right to delete:

you can request deletion of your account and all associated data at any time. to delete your data:

• email us at privacy@studyall.io with the subject "data deletion request"
• include the email address associated with your account
• we will delete your data within 30 days of receiving your request

upon account deletion, all your personal data, study progress, and ai chat history will be permanently removed from our systems.

6. your rights

you have the right to:

• access — request a copy of the data we have about you
• correct — update your profile information in the app settings
• delete — request deletion of your account and data (see section 5)
• withdraw consent — stop using the service at any time

to exercise these rights, contact us at privacy@studyall.io.

7. cookies

studyall does not use cookies for tracking or advertising. firebase may use cookies for authentication purposes only.

8. children's privacy

studyall is designed for students of all ages. we do not knowingly collect personal information from children under 13 without parental consent. if you believe a child under 13 has provided us personal information, please contact us and we will delete it.

9. changes to this policy

we may update this privacy policy from time to time. if we make significant changes, we will notify you through the app. continued use after changes means you accept the updated policy.

10. contact

questions or concerns about this privacy policy? contact us:

email: privacy@studyall.io

see also: terms of service