Privacy Policy

StudyVector ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why, and your rights under the UK GDPR and EU GDPR. It applies to our website and apps (the "Service").

1. Data controller

StudyVector is the data controller responsible for your personal data. For any privacy request, contact us via our Contact page or email privacy@studyvector.com.

2. Data we collect

• Account data: name, email address, and authentication details when you register.
• Study data: progress, XP, streaks, answers, quiz and flashcard content you create, and exam dates you enter.
• Usage data: pages visited, features used, device type, and approximate location derived from IP address.
• Payment data: handled by Base44 Payments; we receive order status and limited billing identifiers, not your full card details.
• Connections: friend and challenge data, and calendar tokens if you connect a Google Calendar.

3. Why we use your data (lawful basis)

• To provide the Service (contract) — running your account, saving progress, and delivering sessions.
• To improve and secure the Service (legitimate interests) — analytics, bug fixing, and preventing abuse.
• To process payments (contract) — managing Premium subscriptions.
• To send service messages (contract) — reminders, goal nudges, and account notices.
• To send marketing (consent) — only with your opt-in; you can withdraw consent anytime.
• To comply with legal duties (legal obligation) — where required by law.

4. Children & minors

The Service is aimed at students, many of whom are under 18. We do not knowingly collect data from children under 13 without verifiable parental consent. If you are under 18, you should use the Service with a parent or guardian's permission. Parents can request access to, or deletion of, their child's data via our Contact page.

5. Sharing your data

We do not sell your personal data. We share it only:

• With processors who help run the Service (hosting, email, analytics, payments) under contract.
• With your consent (for example, when you connect a calendar or add a friend).
• To comply with legal obligations or protect rights and safety.

6. International transfers

Some processors are outside the UK/EEA. We rely on appropriate safeguards such as UK International Data Transfer Agreements or recognised certification, and only transfer data where it is adequately protected.

7. Retention

We keep your data only as long as needed for the purposes above. Account and study data is kept while your account is active and deleted shortly after you close your account, except where we must keep it for legal, accounting, or security reasons.

8. Cookies & analytics

We use cookies and analytics to understand usage and improve the Service. You can control cookies in your browser. We use analytics tools that may set cookies; where these involve advertising, we ask for consent.

9. Your rights

Under the UK/EU GDPR you have the right to:

• Access your personal data (a copy of what we hold).
• Rectify inaccurate or incomplete data.
• Erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability (receive your data in a structured, machine-readable form).
• Withdraw consent at any time (without affecting processing already done).
• Lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.

To exercise any right, contact us via our Contact page. We respond within one month, as the law requires.

10. Security

We use reasonable technical and organisational measures to protect your data. No method is completely secure, but we work to keep your information safe.

11. Changes to this policy

We may update this Privacy Policy. We will notify you of material changes within the Service or by email. Check the "Last updated" date above.

12. Contact

Questions or privacy requests? Use our Contact page or email privacy@studyvector.com. See our Terms of Service for the rules of using StudyVector.