1. Who we are
StudyTok (“StudyTok”, “we”, “us”) is a flashcard study app that turns photos of notes into flashcards with AI, schedules reviews with spaced repetition, and optionally backs up and syncs your decks to your account. We are the controller of the personal data described in this policy. You can reach us at hello@studytokapp.com.
2. Information we collect
Account information
An account is optional. If you create one, we store your email address, display name, and either a salted password hash (email sign-up) or the unique identifier issued by Apple or Google (Sign in with Apple / Google Sign-In). We never see your Google or Apple password. When you sign in with Google we receive your Google account identifier, email address, and name; with Apple we receive an identifier and, if you allow it, your email address and name.
Study content you sync
If you sign in and use cloud sync, your decks, flashcards, study progress and statistics, and app preferences are uploaded to our servers so they can be restored on a new device. Without an account, this data stays on your device only.
Photos and images you scan
When you scan notes, the photo is sent to our server and on to our AI provider to generate flashcards. The app asks for camera or photo-library permission only when you choose to scan. We do not keep the images after the cards have been generated; we store only the resulting text cards if you save them, plus counts such as how many pages and cards were generated.
Usage and device data
We record product events such as app opens, onboarding completion, study sessions completed, paywall views, purchase and restore attempts, reminder settings, and scan counts and outcomes. These events are linked to an app user identifier (the subscription-service user ID, which is a random identifier for anonymous users and your account ID when you are signed in), together with your platform (iOS/Android), app version, and a daily scan counter used to enforce usage limits. We do not store the content of your scans or cards in these events.
The app also uses Google Firebase Analytics to measure installs and in-app events (for example first open, onboarding completion, and purchases). Firebase may collect the device’s advertising identifier (Android Advertising ID / iOS IDFA where permitted), device and app information, and an app-instance identifier. This is used for app analytics and to measure the performance of our advertising campaigns. You can reset or opt out of your advertising identifier in your device settings.
Purchase information
Subscriptions are processed by Apple or Google. We do not receive your payment card details. Our subscription provider, RevenueCat, receives your app user identifier, purchase receipts, and subscription status so that your entitlement can be verified and restored. Your subscription belongs to your Apple ID or Google Play account, not to your StudyTok account.
Reminders
If you enable study reminders, notifications are scheduled locally on your device. We do not collect a push-notification token for them.
3. How we use information
- To provide the app: create your account, authenticate you, generate flashcards from your scans, and sync or restore your decks.
- To process subscriptions, verify your entitlement, and restore purchases.
- To enforce fair-use limits (daily scan allowance) and prevent abuse and fraud.
- To understand how the app is used, fix problems, and improve features.
- To measure the effectiveness of our own advertising (install attribution and conversion measurement).
- To respond to support requests and comply with legal obligations.
Our legal bases (where GDPR or similar laws apply) are performance of our contract with you (providing the app), our legitimate interests (security, abuse prevention, product improvement and measurement), your consent where required (for example advertising identifiers and device permissions such as camera), and compliance with legal obligations.
We do not sell your personal data and we do not use your study content or photos for advertising.
5. AI processing of your scans
Photos you scan, and any text derived from them, are transmitted over an encrypted connection to our server and then to Anthropic’s API solely to generate flashcards for you. Do not scan highly sensitive personal data such as government IDs, passwords, or other people’s health records. We do not use your scans to build advertising profiles or sell them to data brokers.
6. Google user data
If you choose “Continue with Google”, StudyTok requests only the basic profile scopes (openid, email, profile). We use your Google account identifier, email address, and name only to create and sign you in to your StudyTok account. We do not request access to your Gmail, Drive, Calendar, contacts, or any other Google service data, we do not share Google user data with third parties except the service providers listed above as needed to operate the app, and we do not use it for advertising. StudyTok’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. Retention and deletion
We keep account data, synced decks, and cards for as long as your account exists. You can delete your account at any time inside the app (Account → Delete account). Deletion permanently removes your account record, active sessions, your cloud backup (decks, cards, and sync state), and the usage counters linked to your account from our servers. Flashcards already stored on your own device remain on the device until you remove them or uninstall the app. Deleting the app does not cancel a subscription — cancel it in the App Store or Google Play.
You can also request deletion by emailing hello@studytokapp.com from the address on your account. Residual copies in routine backups are overwritten in the ordinary course. Data held by Apple, Google, RevenueCat, and Firebase is governed by their own retention policies; anonymous or aggregated analytics may be kept after deletion, as they can no longer be linked to you. Where the law requires us to keep certain records (for example for tax or fraud prevention), we keep only what is required.
8. Your choices and rights
- Use without an account: you can use the app without signing in; your cards then stay on your device.
- Permissions: camera, photo library, and notification permissions can be turned off at any time in your device settings.
- Advertising identifier: you can reset or limit it in your device settings.
- Access, correction, deletion, portability, objection: depending on where you live (for example under the GDPR/UK GDPR or the CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. Email us to exercise these rights; we will respond within the period required by law.
- Complaints: you may lodge a complaint with your local data-protection authority.
We do not discriminate against you for exercising your privacy rights.
9. Security
Data is transmitted over encrypted connections (HTTPS/TLS). Passwords are stored only as salted hashes, and sessions can be revoked. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Please keep your account credentials safe and see our Terms about keeping your own backups.
10. Children
StudyTok is not directed to children under 13 (or under 16 where that is the applicable digital age of consent), and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
11. International transfers
Our providers (for example Anthropic, Google, RevenueCat, Apple) may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses or the provider’s certification under recognized transfer frameworks.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date above will change, and for material changes we will give notice in the app or on this website before they take effect where required by law.
13. Contact
Questions, requests, or complaints about privacy: hello@studytokapp.com. Our website is https://studytokapp.com/, and the app identifier is com.studytokapp.