Studo Privacy Notice
Last updated on 31/08/2026
This Privacy Notice explains what personal data Studo collects, why we collect it and what rights you have. This notice applies to both the web application and any mobile applications of Studo (together, the "Service").
1. Who is responsible for your data
Studo, currently operated as a sole proprietorship (in the process of being incorporated as a private limited company), is the data controller for the personal data collected through the Service. Contact details can be found in the footer of the website.
For questions about this notice or to exercise your rights, you can contact us at privacy@studo.study.
2. What data we collect
2.1 Account data
- Name
- Email address
- Hashed password (for email registration)
- If you sign up via Google or Microsoft: your name, email address and optionally your profile picture
- Phone number (optional, only if you provide it yourself)
2.2 Course material and content
Files and documents you upload (such as PDFs and notes), and content you create within the Service (such as Studosets, tasks and study plans).
2.3 Usage data
Data about how you use the Service, such as your study progress, viewed content and interactions with AI features.
2.4 Technical data
IP address, device information and cookie data (see Section 7).
3. Why we collect this data
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and managing your account | Name, email, password | Performance of the contract |
| Operating the Service (Studosets, planning, AI features) | Course material, usage data | Performance of the contract |
| Improving and training our AI systems | Course material, usage data | Legitimate interest |
| Notifying you of updates or changes | Email, phone number | Performance of the contract / legitimate interest |
| Preventing fraud and abuse (e.g. multiple accounts) | IP address, account data | Legitimate interest |
| Processing payment for Studo Select | Payment data (processed by our payment provider) | Performance of the contract |
| Analyzing anonymized usage patterns | Anonymized usage data | Legitimate interest |
4. Who we share data with
We only share personal data with third parties when necessary to operate the Service, including:
- Hosting partners (such as Hetzner) for data storage and processing
- Payment providers for processing subscription payments
- AI processing partners for processing course material and generating study content
- Google and Microsoft if you sign in through these services
We never sell your personal data to third parties.
5. International transfers
Some of our processors may process data outside the European Economic Area. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
6. Retention period
- Active accounts: we retain your data for as long as your account remains active.
- Deleted accounts: your data remains available for 30 days after account deletion and is permanently deleted afterward.
- Anonymized data: certain data (such as the number and nature of your study plans) may be retained longer, in anonymized form, for statistical purposes. This data can no longer be traced back to you.
7. Cookies and tracking
We use cookies and similar technologies to operate the Service and to analyze its use. Minor users are not tracked for advertising purposes. More details on the cookies we use can be found in our Cookie Policy, available in the footer of the website.
8. Minors
Studo is accessible from age 16, or from the minimum age applicable under the data protection legislation of your country of residence (for example, 13 in Belgium). Minors may only create an account with the consent of a parent or legal guardian. If we suspect that a minor has created an account without such consent, the account and associated data will be deleted.
9. Security
We take appropriate technical and organizational measures to protect your data against unauthorized access, loss or misuse. Passwords are stored in hashed form. If we become aware that your data has been leaked, we will notify you.
10. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Access: you can request what data we hold about you
- Rectification: you can have inaccurate data corrected
- Erasure: you can request that your data be deleted
- Restriction: you can have the processing of your data restricted
- Portability: you can request your data in a portable format
- Objection: you can object to certain processing, such as processing based on legitimate interest
- Withdrawing consent: where we rely on consent, you can withdraw it at any time
To exercise any of these rights, contact us at privacy@studo.study. You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA) via www.dataprotectionauthority.be.
11. Changes to this notice
We may update this Privacy Notice from time to time. Changes will be announced via email and, where relevant, through an in-app notice. The date at the top of this document indicates when it was last updated.
12. Contact
For questions about this Privacy Notice or how we handle your data, contact us at privacy@studo.study or via the contact details listed in the footer of the website.