Study Together

Privacy Policy

Last updated: May 6, 2026

This Privacy Policy describes how Study Together (“we”, “us”) collects, uses, and shares information when you use our mobile and web applications (the “Service”).

Information we collect

Account information. When you create an account we collect your email address, a chosen display name, and authentication identifiers from the sign-in provider you use.
Profile content. Optional fields you add to your profile, such as a profile photo, bio, and study goals.
Usage data. Information about how you use the Service, including rooms you join, study sessions you start and end, messages you send in rooms, and themes you select.
Device data. Technical information such as device type, operating system version, app version, language, and crash logs.
Cookies and tokens. The web admin uses authentication cookies. The mobile app stores a session token securely on your device.

How we use information

To provide, maintain, and improve the Service.
To authenticate you and keep your account secure.
To enable rooms, sessions, messaging, and other social features.
To send service-related notifications (e.g. session reminders).
To diagnose bugs, prevent abuse, and analyze aggregate usage.
To comply with legal obligations.

How we share information

We do not sell your personal information. We share data only as follows:

With other users. Your display name, profile photo, and activity within shared rooms are visible to other participants of those rooms.
With service providers. We use Supabase for authentication, database, and storage; cloud hosting providers to run the Service; and crash and analytics tools to keep the app stable. These providers process data on our behalf under contractual confidentiality obligations.
For legal reasons. If required by law or to protect the rights, safety, or property of users or the public.
With your consent. For any other purpose disclosed to you at the time we collect the information.

Data retention

We keep account and profile data for as long as your account is active. Session, room, and message data is retained as needed to operate the Service. When you delete your account we remove your personal data within 30 days, except where we are required to retain it for legal, security, or fraud-prevention purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email hello@keremcebi.co from the address linked to your account.

Children

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

International transfers

Your information may be processed in countries other than the one in which you live. We rely on appropriate safeguards (such as standard contractual clauses) when transferring personal data across borders.

Security

We use industry-standard measures to protect your data in transit and at rest. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you as required by law.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before the changes take effect.

Contact

Questions about this policy? Email hello@keremcebi.co or visit our support page.