Skip to content

Privacy Policy

Last updated: August 16th, 2026

This Privacy Policy describes StudyPolar's policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

We do not sell Your personal information, and we do not license or share it with data brokers, advertising networks, or any other third party for their own commercial purposes.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to NextForLab, the Dutch sole proprietorship that operates StudyPolar, established at Cruquiuskade 251, 1018 AM Amsterdam, Netherlands. NextForLab is the controller of Your Personal Data.
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
  • Country refers to: Netherlands
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the StudyPolar website and mobile applications.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used. Our Service Providers are listed under "Service Providers We Use" below.
  • Study Material means the documents, images, text and other files You upload to the Service in order to generate practice questions.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Website refers to StudyPolar, accessible from https://studypolar.com
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Profile picture, where You choose to sign in with a third-party provider
  • Your display name, the name other students can see (see "Social Features" below). When You create an account, We set it from the name Your sign-in provider gives Us or, failing that, from the part of Your email address before the @. You can change it at any time in the app, and We encourage You to pick a nickname if You would rather not show Your real name.
  • Usage Data

Study Material You Upload

When You use the Service to generate practice questions, You upload Study Material such as lecture notes, slides, PDFs and photographs of course material. This content is stored in Our database on Your behalf, is private to Your account, and is used solely to generate questions for You and to operate the Service.

Study Material is kept until You delete it or delete Your account. You can delete it yourself at any time from within the Service.

Things You Write in the App

The Service stores, as part of Your private account data: the answers You give to practice questions and how You scored, Your conversations with the AI tutor, Your study progress (XP, levels, streaks and review schedule), the length of Your focus sessions, and any feedback You send us (together with the email address on Your account, so We can reply).

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Sign in with Google

If You choose to sign in with Google, Google shares a limited set of information with Us. This section describes exactly how We handle it, in line with the Google API Services User Data Policy, including the Limited Use requirements.

  • What We receive. Your name, Your email address, Your profile picture, and Your Google account identifier. We request only the basic `email`, `profile` and `openid` scopes. We never request access to Your Gmail, Drive, Contacts, Calendar or any other Google service.
  • How We use it. Solely to create and authenticate Your StudyPolar account, to display Your name in the app, and to contact You about Your account.
  • Where it is stored. In Our authentication and database provider, Supabase, described below.
  • What We never do. We do not sell or transfer this data to third parties. We do not use it for advertising, and We do not allow humans to read it except where required to resolve a support request You have raised, to investigate abuse or a security incident, or where required by law.
  • How to revoke access. You can remove StudyPolar's access at any time from Your Google Account permissions page. You can also delete Your StudyPolar account entirely from within the app, which removes Your data as described under "Delete Your Personal Data".

StudyPolar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sign in with Apple

If You choose to sign in with Apple, the same principles apply:

  • What We receive. Your name (only the first time You sign in; Apple sends it once), Your email address (or, if You choose "Hide My Email", an Apple relay address that forwards to You), and Your Apple account identifier.
  • How We use it. Solely to create and authenticate Your StudyPolar account, to display Your name in the app, and to contact You about Your account.
  • Where it is stored. In Supabase, described below.
  • How to revoke access. You can stop using Apple to sign in to StudyPolar at any time from Your Apple ID settings under "Sign in with Apple", or delete Your StudyPolar account entirely from within the app.

Voice Input

You can dictate answers and tutor messages instead of typing them. Here is exactly what happens:

  • Dictation runs only at Your initiation: audio is captured solely after You tap the microphone button and only until You stop dictation, and You can always type instead.
  • Your speech is converted to text by Your device's or browser's built-in speech recognition. That conversion is performed by Apple (on iPhone, iPad and Safari) or Google (on Android and in Chrome), and Your audio may be transmitted to their servers and handled under their own privacy policies, which may include use to improve their speech recognition services. See the Apple Privacy Policy and the Google Privacy Policy.
  • StudyPolar never receives, stores, or has access to Your audio. Only the resulting text, which You can review and edit before submitting, reaches Us, and We handle it exactly like a typed answer.

Apple and Google act here under their own terms, at Your request, and not as Our Service Providers, which is why they appear in this section rather than in the Service Provider list below.

How We Use Artificial Intelligence

StudyPolar uses Google's Gemini API to turn Your Study Material into practice questions.

  • The text and images You upload are sent to the Gemini API for the sole purpose of generating questions, summaries and explanations for You.
  • Google processes this content as Our service provider under the paid tier of the Gemini API. Google does not use Your uploads or the questions generated from them to train or improve its models, and does not make them available for human review, except where necessary to investigate abuse or to comply with the law. See the Google Gemini API Additional Terms of Service.
  • We do not use Your Study Material or Your Personal Data to train Our own models, and We do not provide it to any third party for the training of theirs.

Social Features: What Other Students Can See

Some parts of StudyPolar are shared with other users. This is the complete list; nothing else about You is visible to anyone.

The leaderboard

The ranking screen shows the top students by lifetime XP to signed-in users. What it shows about You: Your display name, Your chosen avatar artwork, and Your XP total. It never shows Your email address, Your Study Material, Your answers or anything else. Participation is automatic when You have an account. If You would rather not be recognisable, change Your display name to a nickname at any time in the app, and the leaderboard updates with it. Deleting Your account removes You from the leaderboard entirely.

We rely on Our legitimate interest in providing a shared study experience for this feature, and You have the right to object (see "Your Privacy Rights").

Your invite circle

If someone signs up with Your invite code (or You with theirs), You each appear in the other's "friends" view with display name, avatar and XP total. This is limited to people connected through an invite code. It is never public.

Invite a friend

When You invite someone, the app hands a link containing Your invite code to Your device's share menu: You choose the app, the message and the recipient, and We never see any of it. We never access Your contacts; the apps do not even request that permission. We store nothing about a person who was invited but never signs up: no email, no name, nothing.

To prevent abuse of invite rewards (such as people inviting themselves), each redemption attempt is recorded together with an IP address and a device identifier. We use this solely to detect fraudulent redemptions, on the basis of Our legitimate interest in preventing abuse, and never to track You.

Product Analytics

We use PostHog, hosted in the European Union (Frankfurt), to understand how the Service is used: which screens are opened, whether an exam generation succeeded, and where people drop out of the subscribe flow. What We deliberately do not do:

  • We record a small, fixed set of events: never Your Study Material, Your answers, Your chat messages, Your name or Your email.
  • No session recording: We never capture what You see or type on screen.
  • After You sign in, events are linked to Your account identifier so We can count real users; before that, You are anonymous.
  • On the Website, PostHog stores a small identifier in Your browser to recognise the same visitor across pages.

Error Reporting

When something in the app breaks, technical details of the error (stack trace, device model, app version, and possibly Your account identifier and IP address) are sent to Sentry so We can fix it. Sentry never receives Your Study Material. Error reports expire automatically under Sentry's retention schedule.

Payments

  • On the Website, payments are processed by Stripe. Stripe receives Your email address and Your payment details; We never see or store Your card number.
  • In the mobile apps, subscriptions are purchased through the App Store or Google Play, which process Your payment under their own terms. We use RevenueCat to know which subscription Your account has; RevenueCat receives Your account identifier and Your purchase history, never Your payment details.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain our Service, including to monitor the usage of our Service.
  • To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
  • For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
  • To contact You: To contact You by email regarding updates or informative communications related to the functionalities, products or contracted services, including security updates, when necessary or reasonable for their implementation.
  • To manage Your requests: To attend and manage Your requests to Us.
  • To keep the Service secure and reliable: to detect, prevent and investigate technical faults, abuse and fraud.
  • For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
  • For other purposes: We may use aggregated or anonymized information for data analysis, identifying usage trends and evaluating and improving our Service. Such information cannot be used to identify You.

We may share Your personal information in the following situations:

  • With other users: the specific, limited items described under "Social Features" above: Your display name, avatar and XP on the leaderboard and in Your invite circle. Nothing else We hold about You is ever visible to another user.
  • With Service Providers: We may share Your personal information with the Service Providers listed below, strictly so that they can perform their function on Our behalf and under contract with Us.
  • For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
  • For legal reasons: As described under "Disclosure of Your Personal Data" below.
  • With Your consent: We may disclose Your personal information for any other purpose with Your explicit consent.

Service Providers We Use

We rely on a small number of third-party processors to run the Service. Each processes data only on Our instructions and under contract with Us.

  • Supabase: our database, authentication and file storage provider. It stores Your account details and Your Study Material. See the Supabase Privacy Policy.
  • Google: the Gemini API, used to generate practice questions from Your Study Material, and Sign in with Google, where You choose to use it. See the Google Privacy Policy.
  • Railway: the hosting platform that runs our website, backend servers and document conversion. See the Railway Privacy Policy.
  • Sentry (Functional Software, Inc.): error and performance monitoring, hosted in the United States. It receives technical diagnostic data when something goes wrong, which may include Your account identifier and IP address. It does not receive Your Study Material. See the Sentry Privacy Policy.
  • PostHog: product analytics, hosted in the European Union. See "Product Analytics" above and the PostHog Privacy Policy.
  • Stripe: payment processing on the Website. See the Stripe Privacy Policy.
  • RevenueCat: subscription management for the mobile apps. See the RevenueCat Privacy Policy.
  • Expo: delivery of app updates to the mobile apps. When the app checks for an update, Expo's servers receive standard connection data such as Your IP address and app version. See the Expo Privacy Policy.

We do not use advertising networks.

We Do Not Sell Your Personal Information

We do not sell, rent, or license Your personal information, and We do not share it for cross-context behavioural advertising. This includes any US state privacy law definition of "sale" or "sharing" under the California Consumer Privacy Act (as amended by the California Privacy Rights Act) and similar laws.

We do not, and will not, license Your Personal Data or Your Study Material to any third party for use in developing, training, tuning or evaluating artificial intelligence or machine learning models.

Your Privacy Rights

Depending on where You live, You may have the following rights. You can exercise any of them by emailing hello@studypolar.com, and We will respond within the period required by applicable law.

  • Access. Request a copy of the personal information We hold about You.
  • Correction. Ask Us to correct inaccurate or incomplete information. You can also edit Your profile directly in the app.
  • Deletion. Ask Us to delete Your personal information. You can also delete Your account yourself from within the app.
  • Portability. Receive Your personal information in a structured, commonly used, machine-readable format.
  • Objection and restriction. Object to, or ask Us to restrict, certain processing of Your personal information, including the leaderboard described under "Social Features".
  • Withdraw consent. Where We rely on consent, withdraw it at any time without affecting processing carried out beforehand.
  • Complain. Lodge a complaint with Your local supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

Non-discrimination. We will not discriminate against You for exercising any of these rights.

Our Legal Bases for Processing

Where the General Data Protection Regulation applies, We process Your personal information on the following bases: performance of a contract with You, in order to provide the Service, including storing Your Study Material, generating questions, and managing Your subscription; legitimate interests, in order to keep the Service secure and reliable (error reporting, fraud and abuse prevention), to understand how the Service is used (product analytics as described above), and to provide the shared study features described under "Social Features"; consent, where We ask for it; and legal obligation, where the law requires Us to retain or disclose information, such as the tax retention described below.

Retention of Your Personal Data

We keep Your Personal Data no longer than needed. In concrete terms:

  • Your account, Study Material, questions, answers, chat, progress and streaks: kept for as long as Your account exists, and deleted when You delete Your account or the item itself.
  • Guest sessions: if You try StudyPolar without signing up, the temporary account and anything You uploaded are automatically deleted after about 7 days.
  • Purchase and transaction records: retained for up to 7 years after the transaction, as required by Dutch tax and accounting law. These records contain the transaction, amount and date, and never Your Study Material.
  • Invite anti-abuse records (IP address and device identifier per redemption attempt): kept as long as necessary to detect and prevent abuse of invite rewards.
  • Error reports: expire automatically under Sentry's retention schedule.
  • Analytics events: retained by PostHog; You may ask Us to delete the events linked to Your account.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to, and maintained on, computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Some of Our Service Providers are established outside the European Economic Area, including Sentry, Stripe, RevenueCat and Expo in the United States. Where personal information is transferred outside the EEA, We rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

The Service gives You the ability to delete Your account from within the app. Doing so permanently removes Your profile, Your Study Material, Your generated questions, Your answer history, Your chat, Your progress and Your leaderboard presence from Our systems. You may additionally ask Us at hello@studypolar.com to delete analytics and error records linked to Your account identifier held by Our processors.

Step-by-step instructions, the full list of what is deleted, and the records We are required to keep are set out on our Delete your account page.

You may also update or amend Your information at any time by signing in to Your Account and visiting the account settings section. You may also contact us at hello@studypolar.com to request access to, correct, or delete any personal information that You have provided to Us.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so, such as records required for tax or accounting purposes.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Children's Privacy

Our Service is not directed to children under the age of 16, and We do not knowingly collect personally identifiable information from anyone under 16. We do not currently ask for Your age when You create an account. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from a child under 16 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

For material changes, We will notify You via email and/or a prominent notice on Our Service before the change becomes effective, and We will update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: