Privacy Policy

Studdie helps students study with their own course material. This policy explains which personal data we process, why, and which rights you have. We aim to work in line with the GDPR.

1. Who is responsible

Studdie is jointly operated by Yusuf Caglar and Nada Atari El Allali. Both act as natural persons in Belgium and together determine the purposes and means of the processing of personal data. They are therefore joint controllers (Art. 26 GDPR) for the personal data processed through the app and website. For privacy questions, contact privacy@studdieapp.com. For general questions: info@studdieapp.com. For help using the app: support@studdieapp.com.

2. Which data we process

- Account data: email address, name, password (stored encrypted by our authentication provider), language preference.

- Study profile: education level, programme and related study preferences you fill in yourself.

- Documents: files you upload yourself (such as courses and notes) and the text processed from them to make the study features work.

- Study data: AI explanations, summaries, quiz attempts, flashcard reviews, study sessions and chat messages you create in the app.

- Security and account events: such as password changes, email changes and sign-out actions, without passwords or tokens.

- Consent records: what you accepted at registration and your email preferences.

We do not ask for a date of birth and we currently use no analytics or advertising tracking.

3. What we use your data for

- Providing the service: account, sign-in, document processing, study features (performance of the agreement).

- Security and abuse prevention: session management and logging of security events (legitimate interest).

- Service-related communication: such as verification and account emails via noreply@studdieapp.com (performance of the agreement).

- Optional emails such as product updates or a newsletter: only with your consent via Email preferences, which you can withdraw at any time.

4. Processors and recipients

- Supabase: authentication, database and file storage.

- Our email provider: sending account and verification emails.

- AI providers: when you use AI features, relevant fragments of your document and your question may be processed by an external AI model (see the AI Processing Policy). OpenAI is a provider that can be used for this.

- Hosting/infrastructure providers: making the website and app available.

We do not sell your data and do not share it for advertising purposes.

5. Retention

- Account, profile and study data: kept for as long as your account exists.

- When you delete your account, your data and files are deleted as described in the Data Storage Policy; security logs linked to you are deleted as well.

- Fully anonymous statistics (such as the number of created and deleted accounts) contain no personal data and are retained.

6. Your rights

You have the right to access, rectification, erasure, restriction, objection and portability. Much of this you can do directly yourself:

- Access and export: via Settings, Privacy.

- Correcting your name or email address: via Settings.

- Deleting your account and data: via the Delete account page.

- Email preferences: via Email preferences.

For other requests, contact privacy@studdieapp.com. We respond within one month at the latest.

7. Security

We use encrypted connections, per-user access control (row level security), optional two-factor authentication and security event logging without passwords or tokens.

8. Minors

Studdie is intended for students aged 13 and over. If you are under 18, you confirm at registration that you have permission from a parent or legal guardian.

9. Changes

We may update this policy. The most recent version is always on this page, with a version number and date.

10. Complaints

Questions or complaints: privacy@studdieapp.com. You also always have the right to lodge a complaint with your data protection authority, such as the Belgian Data Protection Authority (dataprotectionauthority.be).