Student OS

1. Who We Are

The Student OS application (the “App”) is operated by Dan Bokete, a sole trader based in Ireland (“we”, “us”, “our”). We are the data controller for the personal data described in this policy, and we process it in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. You can contact us about privacy at privacy@studentos.co. A postal address is available on request.

2. What We Collect

• Account data: your name, email address, profile picture, and Google account ID, plus the sign-in tokens Google issues when you sign in with Google. We never receive or store a password.
• Sign-in data: the IP address and browser of each signed-in session.
• Billing data: if you subscribe to Pro, your Stripe customer ID, plan, subscription status, and billing dates. Stripe collects your card details; we never see them.
• Study content: everything you create or upload, such as files, notes, flashcards, questions, answers, AI feedback, subjects, exams, tasks, and calendar entries, including text we extract from your uploads.
• Activity and usage data: your reviews, attempts, and study sessions, and how much of your plan’s allowances and storage you use.
• Analytics and diagnostics: if you consent, how you use the App and technical errors you encounter, linked to your account. The text of your content is masked and not collected. If you decline, we only count anonymous visits to our public pages, without cookies. Either way, technical errors you encounter and errors on our servers are reported so we can fix them; without your consent, these reports are anonymous, use no cookies, and are not linked to your account.

Your content may include personal data about other people. You are responsible for having a lawful basis to upload it.

3. Why We Use It (Legal Bases)

• Contract: to run your account, provide the App’s features (including AI features), sync your data, and bill your Pro subscription.
• Legitimate interests: to keep the App secure, enforce usage limits, prevent abuse, fix errors, count anonymous visits, and calculate aggregate statistics. You can object by contacting us.
• Legal obligation: to keep billing and tax records and respond to lawful requests.
• Consent: for optional analytics and diagnostics. You can refuse without losing access to the App, and withdraw consent at any time under Settings > Privacy or with the Cookie settings link at the bottom of our public pages.

4. AI Features

• Generated questions, flashcards, and feedback: we send the relevant study material and, for answer checks, your answer to an AI provider through OpenRouter, and save the result to your account.
• “Explain with AI”: opens the assistant you choose (such as Claude, ChatGPT, or Perplexity) in a new tab with your selected text. This goes directly from your browser to that provider, under its own terms, and we do not receive it.
• Dictation: uses your browser’s speech recognition, which may send your voice to your browser vendor to transcribe. We only receive the resulting text, never audio.

5. Who We Share It With

We do not sell your data. We share it only with service providers that help us run the App, under data processing agreements:

• hosting, networking, database, file storage, and document conversion providers;
• AI processing (OpenRouter and the model providers it routes requests to);
• rate limiting and abuse prevention;
• analytics and error tracking (PostHog Cloud EU);
• Google, for sign-in;
• Stripe, for payments. Stripe is also an independent controller for fraud prevention and its own legal obligations (see the Stripe Privacy Policy).

A current list of our providers is available on request.

6. International Transfers

Most of our processing happens in the European Union. Some providers, including AI providers, process data outside the European Economic Area. Where they do, we rely on the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

7. Data on Your Device

So the App works offline, it keeps a copy of your data and any unsynced changes in your browser. Signing out deletes them from that device.

8. How Long We Keep It

• Your account and content: while your account is active. Items you delete are permanently removed after a short recovery period.
• After you delete your account: removed within 30 days, except data we must keep by law.
• Billing records: as long as tax law requires.
• Analytics and diagnostics: up to 12 months.

To delete your account, email us at privacy@studentos.co from the address linked to it.

9. Your Rights

You can ask to access, correct, delete, or export your data, restrict or object to how we process it, and withdraw consent at any time. Contact us at privacy@studentos.co. You can also complain to the Data Protection Commission in Ireland (dataprotection.ie) or your local data protection authority.

10. Cookies and Similar Technologies

• Essential: cookies that keep you signed in, and browser storage the App needs to work offline and remember your preferences. These do not need consent.
• Optional analytics: PostHog cookies and browser storage, used only if you consent and kept for up to 12 months. If you decline, nothing is stored apart from your choice.
• Stripe: sets its own cookies on its checkout and billing pages.

We do not use advertising cookies. You can change your choice at any time in the App, under Settings, Privacy.

11. Security

We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No system is completely secure, so please keep your Google account and devices secure too.

12. Children

The App is for users aged 16 and over. Where a user is below the age of digital consent in their country, we require consent from a parent or guardian. If you believe a child has given us data without it, contact us and we will delete it.

13. Changes to This Policy

We may update this policy. If we make material changes, we will notify you in the App or by email and update the date above.