Privacy Policy
Last updated:
This policy explains what data Studuo collects, why we collect it, who we share it with, and what rights you have over your information. We keep it plain — no legalese.
1. Who we are
Studuo (studuo.live) is an online study platform that matches students with study buddies and provides shared Pomodoro study rooms. We are operated as an independent project. Questions? Email studuo.app@gmail.com.
2. What data we collect
We collect the minimum needed to run the service:
- Email address — collected when you register or log in. Used solely for authentication (magic link / password login). We do not send marketing emails.
- Username — the display name you choose in your profile. Visible to your study buddy inside a shared room.
- Study streak & session count — number of consecutive study days and total Pomodoro sessions completed. Used to display your streak on the dashboard.
- Friend connections — if you send or accept a friend request, we store the pair of user IDs. You can remove friends or delete your account to erase this.
- Presence data — while you are in a study room we broadcast your username and room ID via Supabase Realtime so your buddy can see you online. This is ephemeral and is not stored after you leave.
- Feedback messages — if you submit feedback via the widget, we store the message text, the type (bug / suggestion / question), the page you were on, and your email if you provided it. This is entirely optional.
- Account metadata — date your account was created, stored automatically by Supabase Auth.
We do not collect payment information, device fingerprints, IP addresses beyond what Supabase logs automatically for security, or any data from minors under 13.
3. Local storage (not transmitted)
Several preferences are saved directly in your browser using localStorage. This data never leaves your device and we cannot access it:
- Timer state (focus / break duration, running/paused)
- Notepad contents inside the study room
- Panel layout preferences
- Whether you have dismissed the streak modal today
- Cookie banner dismissal
4. Cookies
Studuo uses strictly necessary cookies only. These are set by Supabase to keep you logged in across page refreshes (a session token). They are not used for advertising, tracking, or analytics.
Because these cookies are essential for the service to function, we do not require opt-in consent for them under current EU/UK cookie guidance. You can block them in your browser, but doing so will prevent you from staying logged in.
We do not use Google Analytics, Facebook Pixel, or any third-party tracking pixels.
5. Third-party services
We rely on two infrastructure providers:
- Supabase (supabase.com) — our database, authentication, and real-time messaging provider. Your email, username, and study data are stored in a Supabase Postgres database hosted on AWS (EU region). Supabase is GDPR-compliant and acts as a data processor under a Data Processing Agreement.
- Vercel (vercel.com) — hosts and serves the Studuo web application. Vercel may log standard server access logs (IP, user agent, request path) for up to 30 days for security and performance purposes. We do not export or analyze these logs.
No data is sold to or shared with any other third party.
6. Data retention
We retain your data for as long as your account is active. If you delete your account, all data associated with it (email, username, streaks, friend connections) is permanently deleted within 24 hours. Feedback messages are retained for up to 12 months to help us improve the product; deleting your account does not automatically delete anonymous feedback you submitted.
7. Your rights (GDPR)
If you are in the EU or UK, you have the following rights:
- Access — request a copy of the data we hold about you.
- Rectification — update your username in your profile settings at any time.
- Erasure — delete your account from your profile page. This permanently erases all your data.
- Portability — request your data in a machine-readable format.
- Objection / restriction — contact us to restrict how we process your data.
To exercise any right, email us at studuo.app@gmail.com. We will respond within 30 days.
8. Children
Studuo is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have inadvertently done so, contact us and we will delete it immediately.
9. Changes to this policy
If we make material changes we will update the "Last updated" date at the top of this page and, where reasonably possible, notify registered users by email. Continued use of Studuo after a change constitutes acceptance of the revised policy.
10. Contact
Questions, data requests, or concerns: studuo.app@gmail.com
© 2026 Studuo — Terms of Service