Privacy Policy

1. Who We Are

StudyInk, available at studyink.xyz, is the controller of your personal data. Contact us at contact@mail.studyink.xyz for any privacy question or request.

2. Information We Collect

• Account Data: Email, hashed password, date of birth, and parent email where required. Optional profile fields like display name, username, avatar, and pronouns.
• Learning Content: Links, text, documents, and files you submit, plus the lessons, notes, answers, whiteboards, and plans you create.
• Guest Data: A random guest session ID in your browser, plus rate-limit keys tied to it and your connection. Unsaved previews live in your browser only, expire automatically, and are never stored on our servers.
• Usage Data: Progress metrics (XP, streaks, Ink balances), feature usage, and study activity.
• Device and Connection Data: Anonymized device signals (browser characteristics, timezone, coarse screen class) collected at registration for fraud prevention, plus connection addresses used for rate limiting, security, and approximate region analytics.
• Linked Accounts: Basic profile details (name, email, avatar) from third-party sign-in.
• Support Records: Messages you send our support team.

3. How We Use It and Why

• Provide the service (accounts, generation, streaks, rewards): necessary to perform our contract with you.
• Security and fraud prevention (rate limits, abuse detection, multi-account checks): our legitimate interests, balanced against your rights.
• Improvement and analytics (aggregated usage): our legitimate interests; no advertising profiles.
• Support and service messages contract performance and legitimate interests.
• Legal compliance obligations such as takedown handling and breach notification.

4. AI Data Processing

Generation runs through third-party AI providers. Your input is transmitted to the active provider solely to produce the result. We do not authorize providers to train shared models on your personal content. Transcripts come from the video platform for video inputs. Without processing, AI features cannot run for that input.

5. Cookies and Local Storage

A strictly necessary session cookie keeps you signed in, a language cookie stores your locale, and browser local storage holds guest session IDs and unsaved previews. Analytics are privacy-focused with no advertising trackers. Details live on our cookie policy page.

6. Processors and Sharing

We do not sell personal information. Data is processed under contract by external processors:

• Hosting and database provider (accounts, lessons, app data).
• AI processing providers (generation inputs only).
• Sign-in providers (profile details for third-party login).
• Video platform (public transcripts for video inputs).
• Analytics provider (aggregated usage, no ad identifiers).

We also disclose data when required by law, to protect safety and rights, or to act on valid takedown requests. Public lessons you publish are visible to other users by design; new lessons are private by default. Some processors operate outside your country; transfers run under contractual safeguards.

7. Retention

• Account data: Life of the account, then a deletion request window, then permanent removal. Encrypted backups expire on normal rotation shortly after.
• Guest previews: Never stored server-side; browser copies expire automatically.
• Rate-limit and security logs: Short cycle of days to weeks, then dropped.
• Support records: Kept while the case and any follow-up need them.

8. Your Rights

You can request access, correction, deletion, portability, restriction, or objection to processing, and withdraw consent where consent applies. Write to contact@mail.studyink.xyz and we answer verified requests within 30 days, with no penalty for asking. If you disagree with our answer, you can complain to your national data protection authority.

9. Minors

Registration requires a date of birth. Users under 16 must provide a parent or guardian email and get private-by-default profiles. Parents or guardians can contact us to review or delete a child's data, and we act on verified requests promptly.

10. Security

Encryption in transit, hashed credentials, scoped database access rules, and monitoring protect your data. No system is perfect; we notify affected users of confirmed breaches as the law requires.

11. Changes and Contact

We may update this policy at any time without prior notice. Changes take effect immediately on posting here with a new date, and continued use counts as acceptance. Privacy questions or rights requests: contact@mail.studyink.xyz.