Privacy Policy

Study Slay is an AI study assistant that turns lectures, documents, links and recordings into study notes, flashcards, quizzes and chat answers. We are the controller of the personal data described in this policy, and you can reach us at student@studyslay.com.

This policy applies to the website, the web app and the e-mails we send. It does not cover third-party sites we link to (for example a YouTube video you add as a source) or the services of your school or university.

We collect only what the service needs. Most of it is material you choose to upload.

You can use Study Slay without a microphone, without the onboarding answers and without a paid plan. Recording in the app asks your browser for microphone permission each time; we never record in the background.

We use personal data for the following purposes. Where the GDPR or UK GDPR applies, the legal basis is given in brackets.

• Providing the service: storing your material, transcribing audio, generating notes, flashcards, quizzes and translations, answering chat questions, tracking your progress and syncing across devices (performance of our contract with you).
• Account and security: signing you in, keeping sessions valid, enforcing plan limits, detecting abuse, fraud and attacks (contract and our legitimate interest in a secure service).
• Payments: starting and managing subscriptions and trials through Stripe, and keeping the records tax law requires (contract and legal obligation).
• Transactional e-mail: sign-in links, e-mail confirmation, receipts and notices about your subscription or important changes to the service (contract). We do not send marketing e-mail unless you ask for it, and you can opt out at any time.
• Improving the product: understanding which features are used, where people get stuck and where generation fails, through usage analytics in Mixpanel and aggregated data (legitimate interest; you can object with the switch in Settings).
• Support: answering your messages and resolving problems with your account (contract and legitimate interest).
• Legal: complying with the law, responding to lawful requests and protecting our rights and the rights and safety of users (legal obligation and legitimate interest).

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use your study material, recordings, notes or chat messages to train artificial intelligence models, ours or anyone else's. We do not make decisions about you by automated means that have legal or similarly significant effects.

Study Slay generates its output with models provided by OpenAI through OpenAI's API. To do that we send the text extracted from your material (and the audio of recordings, for speech-to-text) together with our instructions, and receive the notes, cards, questions, translations or chat answer back.

Under OpenAI's API terms, OpenAI does not use this data to train its models. OpenAI may keep API inputs and outputs for a limited period (currently up to 30 days) to detect abuse and then deletes them. The processing takes place on OpenAI's servers in the United States.

Only the material needed for the request is sent: for a chat answer that is the note you are chatting in and your recent messages in that chat; for a translation it is the notes being translated. Your e-mail address, name and payment details are never part of these requests.

Generated output can contain mistakes. It is meant as a study aid and you remain responsible for checking it against your course material.

We rely on a small number of providers that process data on our behalf under contracts that limit their use of it to providing their service to us.

We may add or replace providers; we will keep this list current. We also disclose data when the law requires it, to enforce our terms, or to protect the rights, property or safety of Study Slay, our users or others. If Study Slay is involved in a merger, acquisition or sale of assets, your data may be transferred as part of that transaction and the new operator will be bound by this policy.

Your data is stored in the United States and may be processed in other countries where our providers operate. When we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards recognised by law: the EU Standard Contractual Clauses and the UK International Data Transfer Addendum in our contracts with providers, and, where a provider is certified, the EU-US, UK and Swiss-US Data Privacy Frameworks. You can ask us for details of the safeguards that apply to a specific provider.

Your notes are private by default. If you turn on sharing for a note, we create a link that shows the note's title, summary and study notes to anyone who has the link, without signing in. Shared pages are marked so that search engines do not index them, but a link can still be forwarded by anyone who receives it. Turn sharing off in the note's Share and Export dialog and the link stops working immediately.

Exports (PDF and text) are files you download; what you do with them is up to you.

Deleting your account from Settings permanently removes your profile, notes, files, recordings, quizzes, flashcards, chat history and share links, cancels any subscription and deletes your sign-in identity. This cannot be undone.

We protect your data with measures appropriate to its sensitivity: encryption in transit (TLS) and at rest; row-level security in the database so that an account can only read and change its own rows; private file storage where every file is addressable only by its owner; secrets and API keys kept on the server side in a vault, never in the browser; signed, time-limited sessions; and least-privilege access for the people who operate the service.

No system is perfectly secure. If we learn of a breach that affects your personal data we will tell you and the relevant authority as the law requires.

Most of what you may want to do is available directly in the app:

• Read, edit or delete any note, source, recording, folder or chat message.
• Export notes, flashcards and quizzes as PDF or text.
• Change your onboarding answers, notes language and other preferences in Settings.
• Manage or cancel your subscription in Settings (the customer portal is provided by Stripe).
• Turn usage analytics off with the switch in Settings. We also honour Do Not Track and Global Privacy Control signals from your browser.
• Delete your account in Settings.

Depending on where you live, the law also gives you rights over your personal data. If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access your data, to have it corrected or deleted, to restrict or object to processing based on our legitimate interests, to receive a copy in a portable format, to withdraw consent where processing is based on consent, and to lodge a complaint with your data protection authority. If you are a resident of California or another US state with a privacy law, you have the right to know what we collect, to delete it, to correct it, to opt out of the sale or sharing of personal data (we do neither) and not to be discriminated against for exercising these rights. We treat Global Privacy Control signals as an opt-out request where one applies.

To exercise a right that is not available in the app, write to student@studyslay.com from the e-mail address on your account. We answer within 30 days (45 days where US state law allows) and may ask you to confirm your identity first. You can also authorise someone to make a request on your behalf.

We use only strictly necessary cookies: the session cookies set when you sign in, which keep you signed in and protect your account. They are not used for advertising and we do not run advertising or cross-site tracking cookies.

For usage analytics, Mixpanel stores a small identifier in your browser's local storage so that the screens you open can be counted as one visit. Analytics is on by default and can be switched off in Settings; we also respect the Do Not Track and Global Privacy Control signals, in which case nothing is sent.

The app also keeps a few things in your browser's local storage: your haptics preference, the sign-in method you used last (so we can highlight it), and, while you record a lecture, a safety copy of the audio that has not yet been uploaded. That copy lets you recover a recording if the tab closes; it stays on your device only, is removed once the recording is uploaded or discarded, and expires after 14 days. Clearing your browser's site data removes all of this.

Study Slay is for students aged 13 and over. Where local law sets a higher age for consenting to online services without a parent (16 in parts of the European Union), that higher age applies. We do not knowingly collect personal data from children below that age; if you believe we have, write to us and we will delete it.

We may update this policy as the service or the law changes. The effective date at the top shows the current version. For material changes we will notify you by e-mail or with a notice in the app before they take effect. The previous version is available on request.

Privacy questions and requests: student@studyslay.com. Please include the e-mail address of your Study Slay account so we can find it.