Privacy Policy

This policy applies to Studea (the "Service"), which is owned and operated independently by Isaiah Tucker, a sole proprietor based in North Carolina, United States, doing business as "Studea" ("we," "us"). It governs information collected from parents, students, and any school personnel who access the Service. Schools that adopt Studea on behalf of their students may execute a separate Data Processing Addendum describing the school's role as data controller.

Studea is currently in a limited, free beta with a single partner school while it completes that school's review. During the beta, access is invitation-based, and the practices described below are the ones we operate under today.

• Account information. Email address (via email sign-up or single sign-on), display name, and role (parent or student).
• Canvas integration data. The access token or Observer credentials a user voluntarily provides, encrypted at rest. We do not store a complete copy of Canvas content; assignments, grades, and announcements are read live at the moment a user asks a question.
• Retained learning data. To power progress tracking and personalized help, Studea does keep a limited record derived from Canvas: grade-history snapshots, synced assignment metadata (including AI-generated time estimates), and a distilled study profile ("tutor memory"). If a family enables notifications, we also store the device push-notification subscription needed to deliver them.
• Chat content. Messages exchanged with the Studea assistant. Zero-knowledge encryption is available but off by default; a family can turn it on at any time under Settings → Privacy. Once enabled, chat content is encrypted on the user's device with a key Studea cannot access, and we store only the ciphertext. Until it is enabled, chat content is encrypted at rest but readable by the Service in order to answer questions.
• Optional integrations. If a family connects Todoist, Google Calendar, or Outlook Calendar, the corresponding access tokens are stored encrypted at rest and used solely to mirror Canvas assignments to the chosen destination.
• Operational data. Standard server logs (IP address, request paths, timestamps) retained for security and debugging.

Studea uses personal information only to operate the Service: authenticate users, fetch Canvas data on demand, generate assistant responses, deliver optional notifications about grades, and provide customer support. We do not sell personal information. We do not use personal information for behavioral advertising.

The Family Educational Rights and Privacy Act (FERPA, 20 U.S.C. § 1232g) governs the disclosure of student education records by U.S. educational institutions that receive federal funding. Studea is a parent- and guardian-directed tool: parents authorize access to their own child's data, and Studea is not itself a school official. Where a school separately engages Studea for use by its families, a written agreement would govern that relationship and could establish Studea as a "school official" with a legitimate educational interest under 34 CFR § 99.31(a)(1), subject to:

• Direct control of the school over the use and maintenance of education records;
• Use of education records only for the authorized purposes described in the school's written agreement with Studea;
• Prohibition on re-disclosure of personally identifiable information except as permitted by FERPA;
• Return or destruction of education records upon contract termination or at the school's request.

Parents and eligible students retain the right to inspect, review, and request correction of education records under FERPA. Requests should be directed to the originating school; Studea will support the school in fulfilling these requests.

The Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506) regulates the collection of personal information from children under 13. Studea is designed for use within a parent- or school-supervised context.

• For direct-to-consumer accounts, a parent or legal guardian must create the account and provide verifiable consent before a student under 13 may use the Service.
• When a school adopts Studea, the school provides COPPA consent on behalf of parents under the "school authorization" provision (16 CFR § 312.5(c)(6)), with the limitation that data is used only for educational purposes authorized by the school.
• Parents may at any time review their child's personal information, refuse further collection, and request deletion by contacting privacy@studea.app.

We use a small number of sub-processors to deliver the Service. All sub-processors are bound by data-processing agreements that restrict the use of personal information to the purpose of providing services to Studea.

• Supabase (database + authentication). Hosts account information and encrypted credentials.
• Anthropic (AI processing). Studea sends a user's current question and the relevant Canvas excerpts to the Claude API to generate a response. Anthropic does not train its models on data submitted via the API. Responses are not used to build user profiles.
• Canvas (Instructure). Studea fetches data directly from a user's Canvas instance on demand using the credentials they provide. We are not affiliated with Instructure; Canvas content remains subject to the school's agreement with Instructure.
• Resend (transactional + digest email). Delivers account, notification, and weekly-digest email; receives the recipient's address and the message content.
• Vercel (application hosting). Hosts the Studea application and provides aggregate, privacy-preserving usage analytics and performance monitoring. This telemetry is not used for behavioral advertising and is not sold.
• Sentry (error monitoring + diagnostics). Captures application errors, performance traces, application logs, and a sampled set of masked session replays to help us diagnose and fix problems. Session replays redact all text, form inputs, and media in the browser before anything is transmitted, and we do not enable Sentry's optional collection of personal data (no cookies, request bodies, or user identifiers are sent by default). This telemetry is used solely to keep the Service reliable; it is never sold or used for advertising.
• Twilio (SMS delivery). Only if a user enables SMS alerts and provides a phone number, Studea uses Twilio to deliver those text messages.

Account information, chat history, and grade snapshots are retained for the life of the account. Operational logs are retained for up to 90 days. A parent, student, school administrator, or eligible adult may request full deletion of an account and all associated personal information at any time from in-app settings or by emailing privacy@studea.app. Deletion is completed within 30 days of a verified request.

Studea applies industry-standard administrative, technical, and physical safeguards. See our security overview for details on encryption, access control, and incident response.

Depending on where you live, you may have rights under the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR), or similar laws. These include the right to access, correct, delete, port, or restrict the processing of your personal information. To exercise any of these rights, contact privacy@studea.app.

We will notify users by email of any material change to this policy and post the updated version here at least 14 days before it takes effect.

For privacy questions, write to privacy@studea.app. For school-district inquiries, write to schools@studea.app.