terms

Privacy Policy

EStudy Ltd (“Company,” “we,” “us,” or “our”) operates the StudyDex platform (website, mobile app, and related services) – an educational technology service providing learning resources and progress tracking for students, teachers, tutors, parents, and schools. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

1. What information do we collect?

1.1 Personal information you disclose to us. We collect personal information that you voluntarily provide when you register, use the Platform, or contact us. This may include:

  • Email addresses
  • Usernames and passwords
  • Names (of students, parents, teachers, tutors, school admins)
  • Contact preferences
  • Billing addresses and payment information (processed by third-party payment processors)
  • Phone numbers (optional)
  • Mailing addresses (for institutional billing)
  • Student progress data (e.g., quiz scores, assignment submissions, time spent on tasks)
  • Class rosters and group information (provided by schools or teachers)

1.2 Sensitive Information. We do not intentionally collect sensitive information (e.g., racial or ethnic origin, political opinions, health data). However, student performance data may be considered educational record information and is protected under applicable laws (FERPA, GDPR).

1.3 Payment Data. All payment transactions are processed by secure third-party providers such as Stripe or PayPal. We do not store full credit card numbers on our servers. Please review the privacy policies of our payment processors.

1.4 Social Media Login Data. If you choose to register using social media accounts (e.g., Google, Microsoft), we may receive your name, email address, and profile picture from that provider. You can control these permissions in your social media account settings.

1.5 Accuracy of Information. You must provide true, accurate, and complete information and notify us of any changes.

1.6 Information automatically collected. When you use the Platform, we automatically collect device and usage data (IP address, browser type, operating system, pages visited, time stamps, and referring URLs). This helps us maintain security, analyse trends, and improve performance.

1.7 Cookies and tracking technologies. We use cookies and similar technologies (web beacons, pixels) to remember preferences, analyse usage, and deliver relevant content. You can manage cookie preferences in your browser settings. For more details, see our Cookie Policy.

1.8 Log and device data. We collect log files (IP address, browser type, access times) and device data (hardware model, unique device identifiers, mobile network information) to diagnose problems and prevent fraud.

1.9 Location data. We may collect approximate location based on IP address. You can disable location services on your device, but some features may be affected.

2. How do we process your information?

We process your personal information for the following purposes:

  • To create and manage user accounts (students, teachers, tutors, parents, schools).
  • To provide educational services: deliver learning resources, track progress, generate reports, and enable teacher/tutor feedback.
  • To facilitate communication between students, parents, teachers, and tutors (e.g., messaging, assignment notifications).
  • To process payments and manage subscriptions.
  • To respond to support inquiries and technical issues.
  • To send administrative information (policy changes, security alerts).
  • To analyse usage trends and improve the Platform’s features and performance.
  • To protect the security and integrity of the Platform (fraud detection, abuse prevention).
  • To comply with legal obligations (e.g., court orders, regulatory requests).
  • To send marketing communications only with your consent (you may opt out at any time).

3. What legal bases do we rely on to process your information?

For users in the EEA, UK, or Switzerland: We rely on the following legal bases under GDPR/UK GDPR:

  • Consent: Where you have given clear consent (e.g., for marketing emails or optional data sharing). You can withdraw consent at any time.
  • Contract performance: Processing necessary to provide our educational services, manage your account, and process payments.
  • Legitimate interests: To improve our Platform, prevent fraud, and ensure security, provided your rights do not override those interests.
  • Legal obligation: To comply with laws (e.g., tax records, data retention, court orders).
  • Vital interests: In rare cases to protect someone’s physical safety.

For Canadian users: We process based on express or implied consent, unless exceptions apply (e.g., legal investigation, fraud prevention).

For US schools (FERPA/COPPA): We process student data as a “School Official” with legitimate educational interest under FERPA. For children under 13, we rely on verifiable parental consent obtained by the school or parent.

4. When and with whom do we share your personal information?

4.1 Third-party service providers. We may share data with vendors who help us operate the Platform, including:

  • Cloud hosting and data storage (e.g., AWS, Google Cloud)
  • Payment processors (Stripe, PayPal)
  • Analytics and performance monitoring (e.g., Mixpanel, Google Analytics)
  • Customer support tools (e.g., Zendesk)
  • Email and communication services
  • Security and fraud prevention services

All third parties are contractually bound to protect your data and use it only for the purposes we specify.

4.2 Schools, teachers, and tutors. If you are a student using the Platform through a school, teacher, or tutor, your progress data will be shared with that authorised educator or institution for educational purposes. Parents may also access their child’s data.

4.3 Business transfers. If StudyDex is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you of any such change.

4.4 Legal requirements. We may disclose your information if required by law (e.g., subpoena, court order) or to protect our rights, safety, or property.

4.5 Other users. Certain features (e.g., class discussion boards, shared assignments) may allow other users (classmates, teachers, tutors) to see your contributions. You should not post sensitive personal information in public areas.

5. What is our stance on third-party websites?

The Platform may contain links to external websites (e.g., YouTube videos, Google Drive documents). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any information.

6. Do we use cookies and other tracking technologies?

Yes. We use cookies to remember login sessions, understand how you use the Platform, and display relevant content. You can manage cookies through your browser settings. Disabling cookies may affect some features. For full details, please see our Cookie Policy (available on the Platform).

7. How do we handle social logins?

If you choose to log in using Google, Microsoft, or other single sign-on providers, we receive your name and email address from that provider. We use that information to create your account. Please review your social media provider’s privacy policy.

8. Is your information transferred internationally?

Our servers are located in United Kingdom. If you access the Platform from outside that country, your data may be transferred across borders. For EEA/UK users, we implement Standard Contractual Clauses or other approved safeguards to ensure adequate protection. You can request a copy of these safeguards by contacting us.

9. How long do we keep your information?

We retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by law (e.g., tax records, student data retention laws).

  • Account data is kept while your account is active.
  • After account deletion, we may retain anonymised or aggregated data for analytics, and we may keep certain records for legal compliance (e.g., payment records for 7 years).
  • Schools may request deletion of institutional data upon termination of their contract.

10. How do we keep your information safe?

We implement technical and organisational measures including encryption (TLS for data in transit, AES-256 for data at rest), access controls, regular security testing, and employee training. However, no method of transmission over the internet is 100% secure. You use the Platform at your own risk.

11. What are your privacy rights?

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data (subject to legal exceptions).
  • Restriction: Limit how we process your data.
  • Data portability: Receive your data in a structured, machine-readable format.
  • Object: Object to processing based on legitimate interests or direct marketing.
  • Withdraw consent: Where consent is the legal basis, you may withdraw it at any time.

To exercise your rights, contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France, or your state attorney general in the US).

Opting out of marketing: You can unsubscribe from promotional emails by clicking the “unsubscribe” link in any such email or by adjusting your account notification settings.

Account deletion: You may delete your account via your settings page. Some residual data may be retained for legal or security purposes.

12. Controls for do-not-track features

Our Platform does not currently respond to Do-Not-Track (DNT) signals because no uniform standard has been adopted. We may revisit this as standards evolve.

13. Do California residents have specific privacy rights?

Yes. California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, to request deletion, and to opt out of “sales” of personal information. We do not sell student data or any personal information. For a detailed CCPA notice, please see our California Privacy Policy (available on request).

14. Do we make updates to this policy?

We may update this Privacy Policy from time to time. The “Last Updated” date will change. Material changes will be notified via email (for registered users) or through a notice on the Platform. Continued use after changes constitutes acceptance.

15. How can you contact us about this policy?

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Estudy Ltd
Email: [email protected]

For schools and institutions: please also refer to your Data Processing Agreement (DPA) with us.

16. How can you review, update, or delete the data we collect from you?

You can review and update most of your personal information by logging into your account settings. To request deletion or to access data not available through the dashboard, please email [email protected]. We will verify your identity before processing such requests.

Last updated: 4th April 2026