1. Who we are
StudyWith ("we", "us", "our") is an AI-powered tutoring service. We help students learn through guided Socratic questioning rather than providing direct answers. Our service is operated from Ireland and is subject to European data protection law (GDPR).
2. What data we collect
We collect the following categories of personal data:
- •Account data: Your email address and password (hashed), used to create and secure your account.
- •Session content: The assignments, questions, and messages you submit during tutoring sessions, stored so you can review them later.
- •Usage data: Session timestamps, scores, and learning receipts generated at the end of each session.
- •Preferences: Settings such as your chosen tutor avatar and daily goal, stored in your account profile.
- •Billing data: If you subscribe, payment is handled by Stripe. We never store card numbers. We receive a customer ID and subscription status from Stripe.
3. How we use your data
- •To provide the tutoring service and save your session history.
- •To generate learning receipts and track your progress over time.
- •To manage your account and subscription.
- •To send transactional emails (e.g. password resets, email verification).
- •To improve the service based on aggregated, anonymised usage patterns.
We do not sell your data. We do not use your session content to train AI models.
4. Third-party services and data transfers
We use the following third-party providers to operate the service:
- •Supabase — database and authentication. Your account data and session history are stored on Supabase infrastructure (AWS, EU region). Supabase is compliant with GDPR as a data processor.
- •Groq — AI inference. The content of your tutoring sessions (messages and assignment text) is sent to Groq's API to generate tutor responses in real time. Groq processes this data as a data processor under its Terms of Service and does not use customer data submitted via API to train its models. Data is processed in the United States under standard contractual clauses. You can review Groq's privacy policy at groq.com.
- •Stripe — payment processing. Billing is handled entirely by Stripe. We do not see or store your card details. Stripe is PCI-DSS compliant.
- •Resend — transactional email. Email addresses are shared with Resend solely to send account-related emails (confirmations, password resets). Resend does not use this data for marketing.
- •PostHog — product analytics. We collect anonymised usage events (e.g. pages visited, buttons clicked) to understand how the service is used. No session content is included. PostHog is hosted in the EU.
Where personal data is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards such as standard contractual clauses (SCCs) approved by the European Commission.
4a. Data protection and legal basis (GDPR Articles 13 & 14)
We are the data controller for personal data collected via StudyWith. We process your data on the following legal bases under GDPR Article 6:
- •Contract performance (Article 6(1)(b)): We process your email address, session content, and usage data in order to provide the tutoring service you signed up for.
- •Legitimate interests (Article 6(1)(f)): We process anonymised analytics data to improve the service. Our legitimate interest does not override your rights.
- •Legal obligation (Article 6(1)(c)): We may retain billing records as required by Irish and EU tax law.
You have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at dataprotection.ie if you believe your data rights have not been respected.
5. Data retention
Your account data and session history are retained for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days. You can request deletion at any time by contacting us or using the delete account option in Settings.
6. Your rights
Under GDPR, you have the right to:
- •Access the personal data we hold about you.
- •Correct inaccurate data.
- •Request deletion of your data.
- •Object to or restrict processing.
- •Data portability — receive a copy of your data in a machine-readable format.
To exercise any of these rights, contact us at the address below.
7. Cookies
We use essential session cookies to keep you logged in. We do not use tracking cookies or advertising cookies. No third-party analytics scripts are loaded on this site.
8. Children
StudyWith is intended for users aged 13 and over. If you are under 16, you should have parental or guardian consent to use this service. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice in the app. Continued use of the service after changes constitutes acceptance of the updated policy.