Back to StudyClock

    Privacy Policy

    Last updated: April 1, 2026

    At StudyClock, we take your privacy seriously. This policy explains exactly what data we collect, why we collect it, and how you can control it. We believe in plain language — no legal jargon.

    The short version

    • We never sell your data.
    • We do not record your screen, mouse movements, or keystrokes.
    • Analytics are aggregate and anonymised (Google Analytics only).
    • Payments are handled by Lemon Squeezy — we never see your card.
    • You can delete your account and all your data at any time.

    Information We Collect

    Information you provide

    • Account details: name, email address, and profile photo (Google or email sign-up via Firebase Auth)
    • Profile customisation: username, display name, bio
    • Content you create: study notes, tasks, timer packages, drawing board content
    • Payment information: handled entirely by Lemon Squeezy — we never see or store your card details
    • Feedback or support messages you send us

    Information collected automatically

    • Page views and navigation paths (via Google Analytics — anonymised, no session recording)
    • Browser type, operating system, and device category
    • Approximate country/region (from IP address — not stored individually)
    • Feature usage events: timer starts, session completions, badge unlocks (event names only, no content)
    No session recording. We do not record your screen, mouse movements, or keystrokes. Analytics are aggregate and anonymised.

    How We Use Your Information

    • Provide and operate the StudyClock platform (timers, rooms, notes, analytics, AI tools)
    • Authenticate your account securely via Firebase
    • Process subscription and credit pack payments via Lemon Squeezy
    • Send important service notifications (billing receipts, password resets)
    • Understand aggregate usage trends to improve features
    • Detect and prevent abuse or fraudulent activity
    • Respond to support enquiries

    Third-Party Services

    We work with a small set of carefully chosen third parties:

    Firebase (Google)Authentication, user identity
    PostgreSQL (hosted)Encrypted user data storage
    Lemon SqueezyPayment processing — PCI compliant
    Google AnalyticsAnonymous aggregate usage data
    Google Tag ManagerAnalytics tag management
    AWS S3Note attachments & OCR uploads
    Anthropic / OpenAI / Google AIAI Tools features (content not stored beyond your saved items)

    We do not sell, rent, or trade your personal information to any third party for marketing purposes.

    Data Storage & Security

    Your data is stored on encrypted PostgreSQL databases. All communication between your browser and our servers uses TLS (HTTPS). Authentication tokens are verified server-side on every request via Firebase Admin SDK with revocation checking enabled.

    Payments are processed exclusively by Lemon Squeezy — we never receive, handle, or store your payment card details.

    No method of transmission over the Internet is 100% secure. We implement appropriate technical and organisational safeguards, but cannot guarantee absolute security.

    Cookies & Analytics

    We use a minimal set of cookies:

    • Essential cookies: Authentication session tokens — required for login to work.
    • Analytics cookies: Google Analytics sets anonymised cookies (_ga, _gid) to count visits and measure feature usage. No personal data is attached.
    • Preference cookies: localStorage entries for your timer settings, ambient presets, and UI preferences — stored locally in your browser, never sent to third parties.

    You can opt out of Google Analytics personalisation at Google Ads Settings. Essential cookies cannot be disabled without breaking authentication.

    Your Privacy Rights

    You have the following rights regarding your personal data, regardless of your location:

    • Access — request a copy of the data we hold about you
    • Correction — ask us to fix inaccurate data
    • Deletion — request that your account and associated data be deleted
    • Portability — export your study session history and notes
    • Objection — opt out of analytics tracking via your browser or Google settings
    • Withdraw consent — close your account at any time from the settings page

    To exercise any of these rights, email us at mb.dev08@gmail.com. We respond within 30 days.

    Children's Privacy

    StudyClock is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has created an account, please contact us and we will promptly delete the account and associated data.

    Changes to This Policy

    We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify registered users via an in-app notification or email. Continued use of StudyClock after changes take effect constitutes acceptance of the revised policy.

    Questions about this policy?

    We're happy to explain anything in more detail.

    mb.dev08@gmail.com