Privacy Policy

1. Introduction

At Study Van, we respect your privacy and are committed to protecting your personal data. This policy explains how we look after your data and your rights.

2. Data we collect

We collect and process the following categories of personal data:

• Identity: username, display name, gender preference, profile image.
• Contact: email address.
• Technical: IP address, browser, device, session data.
• Profile: preferences, theme, study-related configuration.
• Usage: sessions, focus time, notes, tasks, diary, interactions.
• Feedback: support and feedback submissions.
• Payment: subscription info (processed by Stripe).

Google OAuth: when you sign in with Google, we receive your email, name, and profile picture. We don't store your password or access your other Google services.

Chat messages: messages sent in study groups are temporarily processed for delivery but are automatically deleted after 7 days.

3. How we use your data

• To provide and maintain our service
• To notify you about changes
• To enable interactive features
• To provide customer support
• To gather analytics and improve the service
• To detect, prevent, and address technical issues

4. Data security

We use appropriate measures to prevent your data from being accidentally lost, used, or accessed in an unauthorized way. Access is limited to those with a legitimate need.

5. Cookies

We use cookies and similar technologies to provide core functionality. You can refuse them in your browser, though some features may stop working.

6. Data retention

• Account: kept while active; 30 days after deactivation for potential reactivation.
• Study data: kept while your account is active.
• Messages: auto-deleted after 7 days.
• Session data: up to 90 days for security.
• Legal: some data may be retained longer if required by law.

After account deletion, all personal data is removed within 30 days except where retention is legally required.

7. Your rights (GDPR)

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data.
• Restrict processing: limit how we use your data.
• Portability: get your data in a machine-readable format.
• Object: object to processing based on legitimate interests.
• Withdraw consent: at any time.

8. Legal basis for processing

• Contract: to provide our services.
• Consent: for marketing and optional features.
• Legitimate interest: for security and improvement.
• Legal obligation: to comply with applicable laws.

9. International transfers

Your data may be processed in countries outside your residence with appropriate safeguards in place, including standard contractual clauses where applicable.

10. Third-party links

Our service may contain links to other websites. We have no control over them and recommend reviewing their privacy policies.

11. Changes to this policy

We may update this policy from time to time. We'll post the new version here and update the date at the top.

12. Contact

Questions about this policy? Contact us.