1. Introduction
MyStdy ("we", "us", "our") is a lifelong learning platform designed to support continuous personal, academic, and professional growth over extended periods of time.
Unlike short-term educational tools, MyStdy is intentionally built as a long-memory learning companion. This Privacy Policy explains how and why we process personal data, how long it may be retained, and how you remain in control at all times.
Our jurisdictional baseline is the EU General Data Protection Regulation (GDPR), applied globally to all users regardless of location.
2. What We Collect
2.1 Information You Provide
- Account information — name, email address, profile photo, handle, and academic details you provide during signup and onboarding.
- Learning content — posts, notes, reflections, journals, and uploaded study materials.
- Study activity — study sessions, focus timers, goals, schedules, and learning routines you create.
- AI interactions — conversations with AI tutoring features (only when Lifelong Learning Memory Mode is enabled).
- Consent preferences — your choices about optional features, marketing, and data retention.
2.2 Information Collected Automatically
- Device and browser information — device type, operating system, and browser version for compatibility.
- Usage patterns — preferred study times, pacing, and topic progression within the platform.
- Security data — coarse IP-based location for fraud prevention and session security.
2.3 What We Never Collect
MyStdy does not collect or process:
- Cross-website browsing behaviour
- Third-party app activity
- Device fingerprinting
- Advertising or profiling data
- Location tracking beyond coarse IP-based security checks
- Behavioural data unrelated to learning within the platform
3. How We Use Your Data
We process personal data solely to:
- Provide and improve MyStdy's core learning features
- Support reflection and progress tracking over time
- Enable AI-assisted learning (only with your explicit consent)
- Generate personalised insights based on your study patterns
- Protect your account and prevent abuse
- Communicate service updates (and marketing only with consent)
4. Lawful Basis for Processing
Under GDPR Article 6, we process data on the following bases:
- Contract (Art. 6(1)(b)) — account management, content storage, access to learning tools.
- Explicit Consent (Art. 6(1)(a)) — Lifelong Learning Memory Mode, advanced AI personalisation, optional analytics, marketing communications, and institutional or mentor access.
- Legitimate Interest (Art. 6(1)(f)) — platform security, abuse prevention, and core service improvement that does not override your rights.
5. Lifelong Learning Memory Mode
Lifelong Learning Memory Mode is an explicit, opt-in feature that lets you preserve and analyse your learning history over extended periods — potentially for life.
This feature is off by default. When enabled, we may retain learning content, AI interactions, and longitudinal insights for as long as you choose. You can enable, disable, export, summarise, or delete this data at any time from Settings.
6. Data Retention
We apply relevance-based retention, not arbitrary deletion timelines.
- Active accounts — learning data is retained continuously while your account is active, justified by the ongoing learning purpose.
- Account deletion — you may choose immediate full erasure, or a grace retention period to allow return. After your selected period, all personal data is permanently deleted or irreversibly anonymised.
- Derived data — raw data may be summarised with personal identifiers removed, supporting both learning continuity and privacy risk reduction.
7. AI & Learning Intelligence
AI features in MyStdy are designed to:
- Learn with you, not about you
- Operate transparently and explain their reasoning
- Never make legal, academic, or life-impacting decisions autonomously
- Use only in-platform learning data
- Avoid personal identifiers when interacting with AI providers
You can clear your AI history at any time from Settings.
8. Sharing & Third Parties
We do not sell your personal data. We share data only in these limited circumstances:
- Service providers — hosting, email delivery, and infrastructure partners who process data on our behalf under strict agreements.
- AI providers — prompts are sent without personal identifiers where possible. AI memory is stored only on MyStdy infrastructure.
- Legal requirements — when compelled by law, regulation, or valid legal process.
- With your consent — institutional sharing or mentor access, only when you explicitly opt in.
9. Your Rights
You may exercise the following rights at any time:
- Access — view what data we hold about you
- Rectification — correct inaccurate data
- Erasure — delete individual items or your entire account
- Restriction — limit how your data is processed
- Portability — export your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — revoke any consent at any time without affecting prior processing
These rights are actionable via in-app controls in Settings → Data & Export or by contacting us at privacy@mystdy.com.
10. Age Requirements
MyStdy requires users to be at least 16 years old. We verify age during signup and do not knowingly collect data from anyone under 16. If we learn that data has been collected from a child under 16, we will delete it promptly.
11. Security
We implement:
- Encryption in transit and at rest
- Strict internal access controls
- Row-level security on all database tables
- Regular audits and monitoring
- Data protection impact assessments for high-risk features
Privacy is embedded at the architectural level (GDPR Article 25).
12. Cookies & Local Storage
We use strictly necessary cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. Optional analytics cookies are only set with your explicit consent.
13. Changes to This Policy
As MyStdy evolves, new data uses will not be silently introduced. Material changes will be highlighted, and new consents will be requested where required. We will notify you of significant changes via email or in-app notification.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
- Email: privacy@mystdy.com