High Signal · Zero Clutter

Privacy Policy

Study.Buddies is a focused study tool, not an advertising business. We collect only what the platform needs to function, and nothing we'd have to write a paragraph here to justify.

Operated by Abdullah Mahmood (trading as A&M Apps).

Last updated: 31 August 2026

Zero Public AI Training

Your personal notes, audios, and files are never used to train public foundation AI models.

Strict User Isolation

Row-Level Security (RLS) and signed URLs ensure only your account can ever access your data.

Zero Ads or Data Brokers

We do not display external advertising, sell personal information, or track you across apps.

Instant Export & Full Erasure

Export your materials to PDF/Markdown anytime or permanently delete your account in 1-click.

Quick Section Navigation

1. What We Store & Don't 2. Data Security & Isolation 3. Third-Party Processors 4. Retention & Deletion 5. GDPR & User Control 6. Children 7. Data Controller & Contact

What we store

Your account: Email address, display name, and avatar if you choose to add one.
Your material: Notes, lecture audios, scanned textbook pages, courses, flashcards, and quizzes.
Your activity: Study sessions, Pomodoro focus blocks, and quiz accuracy for progress analytics.
Your AI usage: Feature run logs and compute meter records to calculate credit allowances.
Subscription tier: Store product identifier and active status. We never see or store your credit card numbers.

What we don't do

No selling data: We never sell, rent, or trade your personal information or notes to third parties.
No third-party ads: We display zero external ads and never share your study history with advertisers.
No uninvited reading: We do not inspect your notes for any purpose other than executing features you explicitly trigger.
No cross-app tracking: We do not build advertising profiles or track your activity across other apps or websites.

2. Where your data lives & security

We employ enterprise-grade storage, strict database partition policies, and zero-trust transport:

🛡️ Database Encryption & RLS

Your account, notes, and activity are stored with Supabase, encrypted in transit (TLS 1.3) and at rest (AES-256). Row-Level Security (RLS) guarantees every database query is cryptographically scoped strictly to your account. Files saved before August 2026 may still sit in Supabase storage, under the same protection.

☁️ Object Storage & Signed URLs

Lecture recordings, scans, and imported PDFs are stored in Cloudflare R2 private buckets. Media is never public; it can only be accessed through short-lived signed URLs generated on-demand for authenticated requests. Profile photos are served from a public link, so treat one as public.

Administrative Access Disclosure: Encrypted at rest protects the stored copy. It does not mean the data is unreadable to us: Study.Buddies can reach stored data through administrative tools, and does so only to keep the service running and to answer support requests.

3. Who else processes your content

These are the only third-party infrastructure and AI model providers your content reaches, and strictly for the designated technical purpose:

Processor	What it receives	Technical Purpose
Supabase	Account credentials, notes, usage records	Hosting, PostgreSQL database, authentication & RLS security
Cloudflare (R2)	Lecture recordings, scanned pages, imported files	Private object storage, served strictly through short-lived signed URLs
Google (Gemini API)	The page scan, PDF or note text for the active request	Reading handwritten & optical scans, PDFs, flashcards, search, AI companion
xAI (Grok)	The lecture transcript or extracted document text for the active request	Writing structured notes, key terms, and practice quizzes
Anthropic (Claude)	The document or note text for the active request	PDF text extraction, and standby failover when another provider is unavailable
Groq	The note text for the active request	Low-latency inference for quizzes and flashcards during heavy load
Deepgram	The lecture audio file you explicitly chose to transcribe	High-accuracy speech-to-text transcription of completed recordings
Google / Apple Sign-In	Email and full name (only if you choose OAuth sign-in)	Third-party single sign-on authentication
Apple / Google Play	Subscription purchase tokens & billing status	Processing, verifying, and renewing subscription payments
Vercel Analytics / Google Analytics	Pages visited, device & browser type — no account or note content	Understanding site traffic. Never sold, and never linked to your notes.

Strict Scope Principle: Only data strictly required for the immediate request is dispatched (e.g., the specific note or audio clip being transcribed). Your study materials are never used to train public foundation models.

4. Data retention & deletion

Your content stays until you choose to delete it, or until you delete your account. Deleting a note, recording, course, or flashcard deck permanently removes the database record and any associated cloud media files.

AI usage records are retained for up to 24 months solely for billing reconciliation and credit metering. They record which feature was executed and compute cost; they do not store the text of your notes.

6. Children & Young Learners

Study.Buddies is rated 4+ and is suitable for users of all ages. We protect the privacy of all our users, including young learners. If parents or guardians have any questions about data handling, they can contact us by email at abdullahm.apps@gmail.com.

7. Contact & Data Controller

A&M Apps is a trading name of Abdullah Mahmood, acting as Data Controller under UK & EU data protection law. For inquiries regarding data protection:

abdullahm.apps@gmail.com Visit Support & FAQ Read Terms of Use