Privacy Policy

Study Cafe Online ("Study Cafe Online", "we", "us", "our") operates the Study Cafe Online website and study tools. For the personal data described in this notice, Study Cafe Online is the data controller — we decide how and why your data is processed. For payment and order data, our reseller Paddle.com acts as Merchant of Record and handles that data under its own privacy terms.

• Account data — your email address, name/display name, and sign-in credentials (or Google profile basics if you sign in with Google).
• Study content — the images and YouTube links you submit, and the notes, quizzes, tests, flashcards, and feed questions generated from them.
• Usage data — actions you take in the Service (such as note sets generated or feed time used) so we can enforce plan limits and improve the product.
• Support messages — anything you send us when you ask for help.
• Technical data — device and browser type, approximate identifiers such as IP address, and error logs used for security and debugging.

Payment card details are collected and processed by Paddle, not by us — we never see or store your full card number.

• Providing the Service — creating your account, generating and storing your study sets, syncing them across devices, and applying your plan's limits (performance of our contract with you).
• Security and fraud prevention — protecting accounts and the Service (our legitimate interests).
• Product improvement — understanding aggregate usage to make the Service better (our legitimate interests).
• Customer support — responding to your requests (performance of contract / legitimate interests).
• Legal obligations — where we must keep or disclose records by law.
• Marketing — only with your consent where required, and you can opt out at any time.

• Service providers — hosting, database, authentication, and AI processing providers that help us run the Service, bound by data-processing terms.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where disclosure is required by law.

We do not sell your personal data.

Some of our service providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses to protect your data.

We keep your personal data for as long as your account is active and as needed to provide the Service. When data is no longer needed — for example after account deletion, subject to legal retention duties — we delete or anonymise it.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. If you are in the UK/EEA, we respond to requests within one month, and you have the right to complain to your data protection supervisory authority. To exercise any right, contact us through your account page.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level security rules that keep each account's study content private to that account.

We use essential cookies and local storage to keep you signed in and remember your preferences (such as your Spotify dock and in-progress study state). We do not use third-party advertising cookies. You can clear these through your browser settings, though sign-in and saved preferences will stop working.

We may update this notice from time to time and will post the new version here with an updated date. Questions about privacy? Contact us through your account page.