Privacy Policy

1. Introduction

StudyRPG (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

2. Information We Collect

We collect the following categories of information:

• Account data — email address and password (or third-party OAuth tokens) when you register.
• Uploaded content — documents (PDFs, EPUBs, Word and PowerPoint files, etc.) you submit to generate game worlds.
• Usage data — pages visited, features used, session duration, and error logs collected automatically.
• Payment data — billing details processed securely by our payment provider (Stripe). We do not store full card numbers.
• Device & technical data — IP address, browser type, operating system, and similar identifiers.
• Notification data (mobile app) — if you turn on notifications in the app: your device’s push token, its time zone, the app’s language, and which notifications you chose and at what time.
• Reminder email data (website) — if you play on the website: your time zone, the interface language, which reminder emails you get and at what time, when you last visited the website, when the last reminder email was sent, and a copy of the figures it showed (your streak, goals, flashcards due and week), so we can check what it said.
• Classroom data — if you create or join a classroom: the classrooms you belong to, your role in each and when you joined, and the invitations sent to an email address (the address the inviter typed, kept with the invitation and its outcome).
• Shared worlds — if you share a world by link, the link’s secret and whether sharing is on; if you open a world someone shared with you, a record that you opened it, so you can keep playing while it stays shared. Turning sharing off deletes those records.
• Public profile and leaderboards — the display name you choose, whether you show on the leaderboards, and the scores they rank: your XP, characters defeated, best tower stage, best mini-game score and online duel wins in each public world you play, and your achievement points.
• Free credit requests — if you ask for a free book-to-game credit during a promotion: your answers in that form (the book you want to study, what it is for, how you describe yourself, your study methods, hopes and goals), the language you used, and whether the request was approved.

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service
• Process payments and manage your subscription or book-to-game credits
• Send transactional emails (account confirmation, password reset, a welcome email when you sign up, and a message when a world you created is ready, failed or was refunded (one message for several files uploaded together, once they are all done), one when its mindmap and Story mode are ready, and one when a free credit you asked for is approved), in the interface language you used
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations
• Send the app notifications you turned on (a daily reminder, a streak alert, a weekly recap, a world that is ready)
• Send website players reminder emails with their stats (a daily reminder, a streak warning, a weekly recap): on by default, at most one a day, never one your phone already gets as a notification, and without open or click tracking. Every one has a one-click unsubscribe link, and Settings turns each kind off
• Run the classrooms you create or join: show the classroom its members’ progress, deliver invitations, and let its owner and admins manage it
• Review the free credit requests you send us and learn what our players study, so we can improve the Service

We do not sell your personal information to third parties.

4. Uploaded Content and AI Processing

Documents you upload are sent to third-party AI providers solely to generate game world content. These providers process your data under their own privacy policies and data processing agreements. We do not use your uploaded documents to train AI models.

Generated Worlds are stored on our servers. As described in our Terms of Service, Worlds are owned by StudyRPG and may persist after account deletion. If a World contains your personal information, you may request its removal at contact@studyrpg.com.

5. Cookies and Similar Technologies

We do not use advertising cookies or anything that follows you across other websites. The Service stores on your device only what its features need:

• Language — a cookie named NEXT_LOCALE remembers the interface language you chose or opened, for one year.
• Sign-in — when you sign in, our authentication provider (Supabase) sets cookies that keep you signed in. Visitors who are not signed in do not get them.
• Progress in your browser — the free demos and the study timer keep your progress, settings and free-play counters in your browser’s local storage. It stays on your device; when you create an account, it can be carried over to it. The games also remember there your sound settings (music and sound effects), and the dashboard whether you closed its welcome card.

Our analytics (Vercel Web Analytics) set no cookies and store nothing on your device: they report aggregated visit counts and a few anonymous events, such as a demo being started. When a focus block on the study timer ends, we record which timer settings it used, with no account, IP address or device identifier attached.

Book pages may show cover images loaded from other hosts, such as Open Library, which receive your IP address and browser details like any site your browser loads something from.

You can delete cookies and local storage in your browser settings at any time. Doing so signs you out and resets any demo or timer progress kept only in your browser.

6. Data Sharing

We share data only with:

• Infrastructure providers — hosting, database, and storage services necessary to run the Service.
• AI providers — for document processing and world generation.
• Payment processors — Stripe, for handling billing transactions.
• Analytics services — aggregated, anonymized usage data.
• Notification delivery — Expo, and through it Apple and Google, receive your device’s push token and the text of a notification in order to deliver it.
• Email delivery — Mailgun and Resend (both in their EU region) receive your email address and the content of each email we send you, in order to deliver it.
• The members of your classrooms — inside a classroom you have joined, the other members see your display name (or “Player” when you have none), your avatar, title, points and day streak, when you joined, and your progress in each of the classroom’s worlds (level, characters defeated, best tower stage, flashcard mastery). The classroom’s owner and the admins they appoint also see your email address, so that a teacher can recognise their students. None of this is shown outside the classroom, except what the leaderboards and duels show (below).
• Other players, on the leaderboards — signed-in players see, on the leaderboards of public worlds and on the global leaderboard, your display name, avatar, title and scores. You can change your name, or hide from every leaderboard, in Settings; a hidden player is not listed at all.
• Your opponent in a duel — the other player sees your display name and avatar, whether you have answered each question, your answer once the round is over, and the result.
• Law enforcement or legal process — when required by applicable law or to protect our rights.

7. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. After account deletion, personal account data is removed within 30 days, subject to legal retention requirements.

Generated Worlds are retained indefinitely unless they contain personal information and a removal request is submitted (see Section 4).

Notification data is deleted when you turn every notification off, when you sign out of the app on that device, or when you delete your account.

Reminder email data is kept while your account exists and deleted with it. Unsubscribing keeps only your choice, so the emails stay off. A count of the reminder emails we sent, by kind and language and without your account, is kept for our statistics.

Classroom data is deleted when you leave a classroom or are removed from it, when its owner deletes it, and when you delete your account, which also deletes the classrooms you own. An invitation and the address it was sent to stay with the classroom, with their outcome, until the classroom is deleted; write to us (see Section 12) to have one removed sooner.

A free credit request and its answers are kept until you delete your account.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your personal data
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at contact@studyrpg.com. We will respond within 30 days.

9. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access controls. No system is completely secure; we cannot guarantee absolute security of your data.

10. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at contact@studyrpg.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact

For questions or concerns about this Privacy Policy, please contact us at contact@studyrpg.com.