Privacy Policy

1. Introduction

Welcome to StudySync ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our StudySync mobile application and web platform (collectively, the "Service").

By using StudySync, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you sign in to StudySync using Google Authentication, we collect:

• Google Account Information: Your name, email address, and profile picture from your Google account
• User ID: A unique identifier generated by Firebase Authentication

2.2 User-Generated Content

We store content that you create within the app:

• Notes: Title, content, timestamps, and user ID for notes you create
• Chat Messages: Messages you send in study sessions, including username, message content, and timestamps
• Session Data: Information about study sessions you create or join

2.3 Usage Data

We automatically collect certain information when you use the Service:

• Session Information: Session codes, timestamps, timer settings, and participant counts
• Device Information: Device type, operating system, browser type (collected by Firebase)
• Usage Statistics: Number of sessions created, session duration, and feature usage

2.4 Information We Do NOT Collect

• We do NOT collect your precise location data
• We do NOT collect payment information (the app is free)
• We do NOT collect contacts or phone numbers
• We do NOT track you across other apps or websites

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 To Provide and Maintain the Service

• Authenticate your identity using Google Sign-In
• Sync your notes across devices
• Enable real-time collaboration in study sessions
• Display your name and profile picture to other session participants

3.2 To Improve the Service

• Analyze usage patterns to improve features
• Monitor app performance and fix bugs
• Develop new features based on user needs

3.3 Security and Abuse Prevention

• Enforce rate limits to prevent spam and abuse
• Clean up expired sessions automatically
• Protect against unauthorized access

4. How We Share Your Information

4.1 With Other Users

When you join a study session, other participants can see:

• Your name (from Google account)
• Your profile picture (from Google account)
• Messages you send in the session chat

4.2 With Service Providers

We use third-party services to operate StudySync:

• Google Firebase: Authentication, cloud storage (Firestore), and real-time database hosting
• Google Cloud Platform: Backend infrastructure and data storage

These providers are bound by their privacy policies and data processing agreements.

4.3 What We Do NOT Share

• We do NOT sell your personal information to third parties
• We do NOT share your data with advertisers
• We do NOT provide your information to data brokers
• Your notes are NEVER shared with other users or third parties

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored securely using Google Firebase services:

• Firestore Database: Personal notes (isolated per user)
• Realtime Database: Study sessions, chat messages, and timer sync
• Firebase Authentication: User authentication tokens and profile data

Data is stored in Google's secure data centers with industry-standard encryption.

5.2 Security Measures

• Authentication: Secure Google OAuth 2.0 authentication
• Database Rules: Strict Firebase security rules prevent unauthorized access
• User Isolation: Your notes are only accessible by you
• Data Validation: Input validation to prevent injection attacks
• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest

5.3 Data Retention

• Notes: Stored until you delete them
• Sessions: Automatically deleted after 6 hours of inactivity
• Chat Messages: Deleted when the session ends
• Account Data: Retained until you request deletion

6. Your Privacy Rights

6.1 Access and Control

You have the following rights regarding your data:

• Access: You can view all your notes and data within the app
• Edit: You can edit or update your notes at any time
• Delete: You can delete individual notes or your entire account
• Export: You can copy your notes for personal backup

6.2 Account Deletion

To delete your account and all associated data:

1. Contact us at support@studysync.app
2. We will permanently delete your account within 30 days
3. Deleted data cannot be recovered

6.3 Data Portability

You can request a copy of your data in a structured, machine-readable format by contacting us at support@studysync.app

7. Children's Privacy

StudySync is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

8. Third-Party Services

8.1 Google Services

StudySync uses Google services for authentication and data storage. Your use of Google services is subject to Google's Privacy Policy:

• Google Privacy Policy: https://policies.google.com/privacy
• Firebase Privacy Policy: https://firebase.google.com/support/privacy

8.2 No Third-Party Tracking

We do NOT use:

• Third-party analytics (beyond Firebase)
• Advertising networks or tracking pixels
• Social media plugins that track you
• Cross-site tracking cookies

9. International Data Transfers

Your data may be transferred to and stored on servers located outside your country of residence. By using StudySync, you consent to the transfer of your information to countries that may have different data protection laws than your country.

We rely on Google Firebase's global infrastructure, which complies with international data protection regulations including GDPR and CCPA.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending an in-app notification (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Legal Compliance

11.1 GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

11.2 CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of sale of personal information (we do NOT sell your data)
• Right to non-discrimination for exercising your rights

12. Cookies and Tracking

StudySync uses minimal cookies and local storage:

• Authentication Cookies: To keep you signed in (via Firebase)
• Local Storage: To save your timer settings and preferences
• Session Storage: To maintain your current session state

We do NOT use tracking cookies for advertising or analytics purposes.