How we collect, use and protect your data. Last updated: 7 March 2025.
StudyFlow ("we", "us", "our") is an AI-powered study companion operated from Belgium. Our application is available at app.studyflow.courses. For privacy-related questions, contact us at info@studyflow.courses.
We collect the following categories of personal data:
Account data
Name, email address, profile picture (from Google/Microsoft SSO)
Purpose: Authentication, account management
Course materials
PDFs, images, custom prompts you upload
Purpose: Generating AI study content
Generated content
Summaries, exam questions, study plans, quiz results
Purpose: Providing the service
Usage data
Token consumption, feature usage, login timestamps
Purpose: Service improvement, subscription enforcement
Payment data
Subscription tier, Stripe customer ID
Purpose: Payment processing (Stripe handles card details — we never see or store them)
Preferences
Education level, language, role, study settings
Purpose: Personalising AI output
Cookie consent
Your cookie preference choice
Purpose: Remembering your consent decision
Provide the service
Process your course materials with AI, generate study content, manage your account and subscription.
Improve the product
Aggregate, anonymised usage statistics help us understand which features are used most.
Communicate
Transactional emails (account confirmation, password reset) and optional product updates via Resend.
Legal compliance
Fulfil legal obligations under EU/Belgian law.
When you upload course materials or request AI-generated content, your data is sent to Anthropic (Claude API) for processing. Anthropic's data handling is governed by their privacy policy.
Database — Hosted on Supabase (PostgreSQL) with row-level security, encrypted at rest and in transit.
File storage — Uploaded files stored in Supabase Storage with access policies per user.
Application hosting — Fly.io (EU region).
Authentication — Supabase Auth with OAuth 2.0 (Google, Microsoft). Passwords are hashed with bcrypt.
Payments — Processed by Stripe. We store only Stripe customer IDs, never card details.
We use the following types of cookies:
Essential cookies
Required for authentication and basic functionality. These cannot be disabled.
Analytics cookies
Help us understand how visitors use the website. Only set if you consent.
You can manage your cookie preferences at any time using the cookie banner or by clearing your browser cookies.
Under the General Data Protection Regulation (GDPR), you have the right to:
Access
Request a copy of your personal data.
Rectify
Correct inaccurate data.
Erase
Request deletion of your account and associated data.
Port
Receive your data in a machine-readable format.
Object
Object to processing for specific purposes.
Withdraw consent
Withdraw cookie or marketing consent at any time.
To exercise any of these rights, email info@studyflow.courses. We will respond within 30 days.
Supabase
EUDatabase, auth, storage
Anthropic (Claude)
USAI processing
Stripe
US/EUPayment processing
Resend
USTransactional email
Fly.io
EUApplication hosting
StudyFlow is intended for students aged 16 and older. We do not knowingly collect data from children under 16. If you believe a child has created an account, please contact us and we will delete it promptly.
We may update this privacy policy from time to time. Material changes will be communicated via email or an in-app notification. The "last updated" date at the top reflects the most recent revision.
For questions, requests or complaints about this privacy policy, reach us at:
info@studyflow.coursesGet AI-powered summaries, exam questions and adaptive quizzes that turn dense PDFs into a complete study system in minutes. Built by students, free to start.
Get Started — It's Free