Privacy Policy

Depending on the features you use, StudyH may process:

• Account and authentication: account identifiers, email, authentication information and the data needed to keep access working.
• Materials and study history: materials you upload or create, folders, boards, flashcards, questions, answers, performance signals and history.
• Payments and transactions: the plan chosen, payment status, transaction identifiers, receipts and the information needed for billing. Full card data is handled by the payment provider.
• Support: messages, attachments, contact data and anything you include in a request.
• Logs and security: IP address, device, browser, access times, errors and the signals needed for security.
• Analytics and cookies: events, metrics and identifiers of cookies or similar technologies when the tool is enabled.
• Local data: information in the browser's localStorage, such as sessions and synchronization, besides the copy tied to the account.
• AI content: texts, files, answers or other material sent for AI generation or evaluation. In current operation, the provider is DeepSeek.

Avoid sending sensitive data or third-party information without permission. StudyH does not ask for sensitive data for normal use.

The bases below are indicative. The applicable basis may depend on the context, the feature used and the law in force.

• Account and delivery of the service: creating and keeping the account, authenticating, hosting study data, synchronizing and offering the features you contracted — performance of a contract.
• Billing and legal obligations: processing payments, providing receipts, reconciling transactions and meeting obligations — performance of a contract and legal obligation.
• Security, fraud prevention and logs: protecting the platform, preventing abuse, detecting fraud and defending rights — legitimate interest and/or legal obligation.
• Analytics and non-essential communications: measuring use, testing improvements or sending non-essential messages — consent where required.
• Support and privacy requests: answering questions, handling requests and keeping records — performance of a contract or legitimate interest.

• Materials and study history: kept while the account is active. After a valid deletion request, StudyH starts deletion within 30 days, unless retention is needed for a legal obligation, security or the defense of rights.
• localStorage: StudyH does not clear browser storage automatically; you need to clear it on each device.
• Payments and transactions: kept for as long as needed for legal obligations, fraud prevention and the defense of rights.
• External providers: may apply their own periods. StudyH does not promise third-party retention periods.

StudyH may share the data needed to provide the service with the following providers:

• Supabase: authentication, application database and storage.
• Stripe: card payments.
• AbacatePay: PIX payments.
• PostHog: analytics, when configured.
• Resend: transactional email.
• Deepgram: online audio transcription.
• Provedor externo de processamento de IA: content generation and evaluation when you use AI features.

Content needed to generate or evaluate a response is sent to an external AI processing provider's API only to perform that request. Studyh stores the materials and results needed to provide account history and synchronization. You should also consult the provider's policy to understand the processing and retention that apply to that transmission. StudyH does not use your materials to train a model of its own. An external provider may have its own rules on retention or model improvement; this policy does not promise zero retention, anonymity or the absence of training by third parties.

Data may also be shared when necessary to comply with the law, answer authorities, prevent fraud, protect people or exercise rights. StudyH does not sell personal data.

Some providers may process or store data outside Brazil. StudyH will apply the safeguards required for the relevant transfer and will update this policy when there is a relevant change to report.

• Cookies and similar technologies may be used for authentication, security and essential operation, and to remember your language choice.
• PostHog is used for analytics only when the environment configuration enables it.
• localStorage may keep sessions and synchronization information in the browser.

StudyH is not directed at children under 13. Minors should use the service with the supervision and permission of a legal guardian. If you find data from a minor, write to contact@studyh.tech.

Where applicable, you can ask for confirmation and access, correction, deletion within the legal exceptions, portability, information about sharing, and objection to processing or withdrawal of consent.

Send the request to contact@studyh.tech. Include your email or account identifier, a detailed request and a proportionate confirmation of identity. StudyH will answer within the applicable legal deadline.

We adopt technical and administrative measures that fit the service. No system is completely secure. If you suspect improper access or an incident, tell contact@studyh.tech.

We may update this policy to reflect changes in the service, in providers or in the law. The version in force will be published on this page.

Questions about privacy, data protection law (LGPD), security or data: contact@studyh.tech.