Privacy policy

The short version

• We keep what StudyHone needs to work: your account, your notes and how your practice is going.
• Parts of your notes and your answers go to AI services to write and mark questions. They don’t use them to train their AI.
• No adverts, no tracking, no selling your data, and no public profiles.
• You can download everything or delete your account yourself, at any time, from your account page.

Who we are

StudyHone is run by Adam Syed, an individual in the United Kingdom, who is the “controller” of your personal data. That means deciding how it’s used and being responsible for looking after it.

Questions or requests about your data: [email protected]

What we collect and why

Your account

Your name, email address and a scrambled (hashed) version of your password, so you can sign in and we can send you sign-in emails. If you sign in with Google, Microsoft or Discord, we get your name, email address and profile picture link from them. We don’t show the picture anywhere.

Your notes

The files you upload, text you paste, web pages you add and topics you search for, plus the text we read from them. We keep the original file so we can read it again if something goes wrong.

Your practice

The questions you’re asked, your answers, how they were marked, your progress, XP, exams and settings, so StudyHone can bring each idea back at the right time.

Sign-in and safety details

Each time you sign in, we record the internet (IP) address and browser you used. We use these to keep accounts secure and to stop people overloading the service.

We use this information to run StudyHone for you, which is our agreement with you (UK GDPR Article 6(1)(b)), and to keep it secure and stop misuse, which is our legitimate interest (Article 6(1)(f)). Please don’t put other people’s personal details, or sensitive details about yourself, in your notes.

Who helps us run StudyHone

These companies process data for us, only to provide StudyHone, under contracts that protect it:

• Railway hosts the website and database. Your data is stored on servers in the EU.
• AI service providers write questions from your notes, mark your answers, explain questions when you ask, and search the web when you add a topic. They get only the parts of your notes and answers each task needs, never the name or email address on your account. They don’t use your data to train their AI, and may keep it for a period set by their own policies, for example to check for abuse.
• Resend sends our emails, such as sign-in and password-reset links.
• Cloudflare runs our web address (DNS).
• Google, Microsoft and Discord only if you choose to sign in with them. Their own privacy policies cover what they do.

Some of these companies are in the United States. When your data goes outside the UK, it’s protected by the UK’s approved safeguards, such as the UK–US data bridge or the UK’s standard contract terms.

If you share a set of notes with a link, anyone with that link can see and copy those notes. Your answers and progress are never shared. You can stop sharing at any time.

How long we keep it

• Everything about your account stays until you delete it. Deleting notes removes them and what you learned from them straight away.
• When you delete your account, your data is removed from our database straight away. Any copies in backups are removed when those backups expire. We keep a record of what the AI cost each day, with your account removed from it.
• A sign-in record (internet address and browser) is kept until you sign out on that device or delete your account. A sign-in you don’t use for 7 days stops working.

Children

StudyHone is for people aged 13 and over. If you’re under 13, please don’t use it. If we find out an account belongs to someone under 13, we’ll delete it. We follow the UK’s Children’s Code: privacy is set high by default, we don’t track you, show adverts or use your data to keep you hooked, and nothing about you is public.

Cookies

We use one cookie to keep you signed in, and short-lived ones while you sign in with Google, Microsoft or Discord. They’re needed for StudyHone to work, so we don’t ask first. We don’t use cookies for adverts or tracking.

Your rights

Under UK data protection law, you can:

• get a copy of your data: use Export your data on your account page, or email us;
• have wrong information corrected;
• have your data deleted: use Delete this account on your account page;
• object to, or ask us to limit, how we use your data;
• take your data to another service (the export is in standard JSON and CSV files).

Email [email protected] and we’ll reply within one month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Keeping it safe

Connections are encrypted, passwords are hashed, sign-in tokens from Google, Microsoft and Discord are encrypted, and every account can only reach its own data. No system is perfectly secure, so if something goes wrong that affects you, we’ll tell you.

Changes

If we change this policy, we’ll update the date at the top. If a change matters, we’ll tell you before it happens. See also our terms.