Privacy Policy
This Policy establishes the procedures for the collection, storage, processing, and protection of studypal.academy User personal data in accordance with Ukrainian legislation and GDPR.
Last updated: January 30, 2026
1. General Provisions
This Policy is developed by the Administration of the studypal.academy platform (hereinafter referred to as the "Administration") in accordance with the current legislation of Ukraine (Law "On Personal Data Protection") and Regulation (EU) 2016/679 (GDPR). By registering on the Site, the User (or their legal representative) provides full consent to the processing of their personal data according to this Policy.
2. Data Composition and Categories
We collect and process the following categories of information:
Identification Data
First name, last name, email address, profile image (avatar), and authorization data (login/password in encrypted form).
Educational Data and Activity (User Content)
Information about created lessons, AI-generated texts, test results, lesson links, and other interactions between tutors and learners.
Financial Data (Tutors Only)
We do not collect or store payment card details. We only receive payment statuses (webhooks) from our financial partner (Monobank) to grant access to paid features.
Technical Data and Telemetry
IP address, device type, browser version, operating system, time zone, Cookies, and session data.
3. Purposes of Data Processing
Data collection is carried out exclusively for:
Service Provision
Ensuring educational platform functionality, lesson creation, generating educational materials using AI, and conducting tests.
Communication
Sending transactional emails (access recovery, payment notifications) and responding to support requests.
Security and Protection
Fraud detection, prevention of unauthorized access, and ensuring stable site operation.
4. Storage and Data Transfer
We use reliable infrastructure to ensure service operation. Your data may be processed by our technical partners:
Infrastructure & Databases
We lease capacity from Hetzner (Germany) and Vercel for hosting. Structured data storage is handled via Supabase using modern encryption standards.
Artificial Intelligence (AI)
We use the Gemini API (by Google) to generate educational texts. Text prompts are sent to our partner's servers for processing without being linked to your personal identifiers.
Payment Systems
Payment processing is handled exclusively through Monobank's secure gateways.
Analytics
We use Google Analytics to analyze anonymized visitation statistics.
6. Cookies
The Site uses Cookies technology and local storage for authorization and saving settings.
Technical Cookies
Critically important for login and security. They cannot be disabled.
Analytical Cookies
Collect anonymous statistics. You can opt-out of these via your browser settings.
Cookie management is available in your browser settings.
5. Retention Terms
Personal data is stored for the entire duration of the User's use of the Site. In case of account inactivity for 12 (twelve) months, the Administration reserves the right to automatically delete the account and all associated data without the possibility of recovery.
7. Child Safety
The platform can be used by school-aged children (including those under 13). However, account creation, consent to personal data processing, and acceptance of the Terms of Use for children under 13 (or under 16 according to GDPR) must be carried out exclusively by their parents or legal guardians. If we discover that a child's data has been collected without parental consent, it will be deleted.
8. Security Measures
The Administration takes all necessary organizational and technical measures (SSL/TLS encryption, database protection) to safeguard data. However, the User acknowledges that negligent handling of their own authorization data (login/password) may lead to unauthorized access by third parties. The Administration is not liable for damages caused by loss of access due to the User's fault.
9. Contact Us
To exercise rights to access, change, or delete data, as well as for other privacy inquiries:
Email:info@studypal.academy
We respond to requests within 48 hours.
10. Prohibition of Illegal Content
We adhere to a zero-tolerance policy regarding Child Sexual Abuse Material (CSAM) or any other illegal content. Any violation of this rule will result in immediate account termination and reporting of data to law enforcement agencies.
