Privacy Notice

1. Who we are

StudyFlow is operated by Omari Campbell, who is the data controller for the personal data processed through the service.

2. Data we collect

• Account data — email address, display name, login credentials.
• Content you create — notes, folders, flashcard sets, quizzes, and writing analyses.
• Support messages — if you contact us.
• Usage data — feature usage counts, device identifiers, and IP address, used for security and plan enforcement.

Payment details are collected and processed directly by Paddle; we never see your full card number.

3. How we use your data and legal bases

• To create and manage your account and provide the service (contract performance).
• To enforce usage limits and prevent fraud and abuse (legitimate interests).
• To improve the product (legitimate interests).
• To respond to support requests (contract performance / legitimate interests).
• To send marketing where you have opted in (consent).
• To comply with legal obligations (legal obligation).

4. Who we share data with

• Service providers and subprocessors that host and operate the service (cloud hosting, analytics, support tooling).
• Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. AI processing

Text you submit to AI features is processed by our AI provider solely to generate your results. Your saved content is private to your account and is not used to train models.

6. Children's privacy

StudyFlow is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete it. Schools or districts that use StudyFlow should ensure their use complies with applicable student-privacy laws and institutional policies.

7. Retention

We keep personal data for as long as your account is active or as needed to provide the service. When data is no longer needed it is deleted or anonymised. Deleting your account removes your saved content.

8. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, or port your data, to object to processing, and to withdraw consent. You may also complain to your local data protection authority. To exercise any right, contact us; we respond within one month.

9. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your personal data.

10. Cookies

We use essential cookies and local storage to keep you signed in and remember your theme preference. You can clear these through your browser settings at any time.

11. Contact

Privacy questions can be sent to the data controller, Omari Campbell, via the StudyFlow support channel.