Privacy Policy

Last Updated: January 2026

1. Introduction

Welcome to StudyEngine ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service").

By using StudyEngine, you agree to the collection and use of information in accordance with this policy. Please read this policy carefully to understand our practices.

2. Information We Collect

We collect information that you provide directly to us and information collected automatically when you use our Service.

2.1 Information You Provide

• Account Information: When you sign in with Google, we collect your name, email address, and profile picture URL.
• Study Data: Books, chapters, study plans, study sessions, and progress information you create within the app.
• Preferences: Your timezone settings, availability schedules, notification preferences, study goals, and reading speed.
• Academic Profile: Optional information about your academic role (student, teacher, researcher, etc.), institution, major, department, academic level, and professional links.
• Device Tokens: When you enable push notifications, we store your device's FCM (Firebase Cloud Messaging) token to send you study reminders and updates.
• Contact Information: If you contact us, we may store your communication and any personal information you provide.

2.2 Information Collected Automatically

• Usage Data: Information about how you interact with our Service, including study session completions, streaks, and achievements.
• Device Information: Device type, operating system, app version, and device name for push notifications and app optimization.
• Log Data: Server logs that may include your IP address, access times, and API endpoints accessed.
• Crash Reports: Anonymous crash and error data to help us improve app stability.

3. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Description
Provide Services	Create and manage your account, generate personalized study schedules, and track your progress.
Smart Scheduling	Use your availability, preferences, and reading speed to automatically generate optimal study sessions.
Push Notifications	Send session reminders, streak alerts, schedule updates, and achievement notifications (configurable in settings).
Study Statistics	Calculate and display your study streaks, achievements, and progress metrics.
Public Profile Discovery	If you enable public profile visibility, allow other users to discover your profile based on academic criteria.
Sync Data	Synchronize your study data across devices.
Improve Service	Understand usage patterns and improve app functionality and user experience.
Security	Detect and prevent fraud, abuse, and security threats.
Customer Support	Respond to your inquiries and provide technical support.

4. Public Profile and Discovery

StudyEngine offers optional public profile features that allow you to connect with other learners:

4.1 Privacy Settings

You have full control over your profile visibility through privacy settings:

• Show Profile Publicly: When enabled, your profile can be discovered by other users searching for learners with similar academic backgrounds.
• Show Stats Publicly: When enabled, your study statistics (streak, books completed, study days) are visible on your public profile.

By default, both settings are disabled, keeping your profile completely private.

4.2 Information Visible on Public Profiles

If you enable public profile visibility, the following information may be visible to others:

• Name and profile picture
• Academic role, level, major, and department
• Institution name and country
• Study statistics (if stats visibility is enabled)
• Bio and research interests (if provided)
• Social or professional links (if provided)

Your email address, detailed study data, and specific books are never shared publicly.

4.3 Profile Discovery

Users can search for public profiles using filters such as:

• Name or keywords
• Academic role (Student, Teacher, Researcher, etc.)
• Academic level (Undergraduate, Graduate, Doctoral, etc.)
• Institution type and country
• Major and department

5. Push Notifications

We use Firebase Cloud Messaging (FCM) to send push notifications. You can control notification types in your preferences:

• Session Reminders: Reminders before your scheduled study sessions.
• Streak Reminders: Daily reminders to maintain your study streak.
• Achievement Notifications: Celebrations when you unlock achievements.
• Weekly Digest: Weekly summary of your study progress.
• Schedule Updates: Notifications when your schedule is regenerated.

You can disable notifications at any time through the app settings or your device settings.

6. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is transmitted using HTTPS and TLS encryption protocols.
• Authentication tokens are securely managed using JWT (JSON Web Tokens) with proper expiration.
• Refresh tokens are stored securely and can be revoked at any time.
• Database connections are encrypted and access-controlled with role-based permissions.
• Regular security audits and updates are performed to identify and address vulnerabilities.
• Push notification tokens are validated and invalid tokens are automatically removed.
• All sensitive data is stored in encrypted form where applicable.
• Access to user data is restricted to authorized personnel only.

Your data is stored on secure cloud servers with backup and disaster recovery capabilities. While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but maintain industry best practices.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Public Profile: If you enable public profile visibility, the information described in Section 4.2 may be visible to other users.
• Service Providers: With trusted third-party services that help us operate our app (e.g., cloud hosting, Firebase for push notifications). These providers are contractually bound to use data only for providing services.
• Legal Requirements: When required by law, court order, or government request.
• Protection of Rights: To protect our rights, privacy, safety, or property and that of our users.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets, with appropriate notice to users.

8. Third-Party Services

Our Service integrates with the following third-party services:

• Google Sign-In: We use Google OAuth for authentication. Google Privacy Policy
• Firebase Cloud Messaging: We use FCM for push notifications. Firebase Privacy Policy
• PostgreSQL Database: Your data is stored in a secure PostgreSQL database hosted on cloud infrastructure.

We are not responsible for the privacy practices of third-party services. Please review their privacy policies.

9. Your Rights and Choices

You have the following rights regarding your data:

• Access: You can access your personal data through the app.
• Update: You can update your profile, preferences, and academic information at any time.
• Privacy Controls: You can control your profile visibility and stats visibility in privacy settings.
• Notification Controls: You can enable or disable specific notification types.
• Device Management: You can view and manage registered devices for push notifications.
• Account Deactivation: You can temporarily deactivate your account.
• Account Deletion: You can permanently delete your account and all associated data.
• Data Export: You can request a copy of your data in a portable format.
• Cookie Preferences: You can control cookies through your browser settings.

To exercise these rights, use the in-app settings or contact us using the information provided below.

10. Children's Privacy

StudyEngine is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately using the contact information below.

11. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services:

• Active Accounts: Data is retained while your account is active.
• Deactivated Accounts: Data is retained but account access is disabled. You can reactivate at any time within 30 days.
• Deleted Accounts: Data is permanently deleted within 30 days, except where we are required to retain it for legal or compliance purposes.
• Push Notification Tokens: Invalid or expired tokens are automatically cleaned up monthly.
• Session Logs: Old notification and session logs may be archived or deleted after 90 days.
• Legal Holds: Data may be retained longer if required by law or legal proceedings.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using our Service, you consent to such transfers.

13. Cookies and Similar Technologies

Our Service may use cookies and similar technologies to enhance user experience. You can control cookies through your browser settings. Note that disabling cookies may affect certain Service features.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending a notification through the app for material changes. Continued use of the Service after changes constitutes acceptance of the updated policy.