Privacy Policy
Last updated: June 2026
StudyLoop is committed to protecting your privacy. This policy explains in plain language what information we collect, how we use it, and what rights you have under the New Zealand Privacy Act 2020. If you have questions, contact us at privacy@getstudyloop.co.nz.
1. Who We Are
StudyLoop is operated by [Company Name] (NZ Company Number [XXXXXXXX]), a New Zealand company. Our website and app are available at getstudyloop.co.nz.
2. What Information We Collect
2.1 Information you give us
When you create an account:
- Name and email address
- Password (stored as a secure hash — we never see your actual password)
When you set up your study profile:
- Subjects, exam names, and exam dates
- Weekly availability and recurring commitments (sport, work, tutoring)
- Target grades per subject (optional)
- Topic confidence ratings per subject
When you use the app:
- Study sessions you complete, skip, or miss
- MCQ quiz responses and scores
- Session notes and topic confidence updates
When you invite a parent:
- Your parent or guardian's email address (provided by you)
When you pay:
Payment is handled entirely by Stripe. We receive confirmation that payment was successful and your subscription status. We do not see, store, or have access to your card number, bank account details, or any other financial information.
2.2 Subject self-ratings — stored as numbers, not words
During onboarding, we ask you to rate how you are tracking in each subject: Struggling, Getting there, or Strong. These labels are never stored. Instead, we record only a numeric weight for each subject (for example, 1.4, 1.0, or 0.7). The label you saw on screen is applied by the app when displaying your plan — it is not written to the database.
This means that if you rated Chemistry as "Struggling", what we hold is a number — nothing that identifies the subject name, label, or assessment it relates to. The same format applies whether ratings come from self-evaluation or a report upload (see section 2.3). Both methods produce identical stored data: a numeric weight per subject, nothing more.
2.3 School report uploads — read and discarded
The most important section — please read carefully
If you choose to upload a school report during onboarding, the document is transmitted securely to our processing system, read in-memory to extract subject performance information, and then permanently discarded. We retain only our interpretation of your subject performance — a numerical weighting indicating whether you are performing strongly, on track, or need more time in each subject.
We do not store the report itself. We do not store any extracted text from the report. We do not log or record the document's contents anywhere in our system. The discard is automatic and immediate — there is no version of this process where the document is retained.
The only data that persists from a report upload is a per-subject weight in the format: { subject, performance level, weighting score }. This is indistinguishable from data a student could enter manually.
2.4 Information collected automatically
When you use StudyLoop, our systems automatically record:
- Your IP address
- Browser type, version, and device type
- Pages visited and actions taken within the app
- Date and time of activity
This information is used for security, debugging, and improving the product. It is not used to build advertising profiles.
3. How We Use Your Information
We use your information to:
- Provide and operate the StudyLoop service
- Generate your personalised AI study plan
- Track your study session progress and adjust your plan accordingly
- Send weekly progress summary emails to your invited parent or guardian
- Process your subscription payment
- Send transactional emails (account confirmation, password reset, receipts)
- Improve our product, diagnose problems, and ensure security
- Meet our legal obligations under New Zealand law
We do not use your information for advertising. We do not sell your data to third parties. StudyLoop is funded entirely by subscription revenue.
4. Artificial Intelligence and Plan Generation
StudyLoop uses an AI language model to generate your personalised study plan and to process school report uploads.
For plan generation, we provide the AI with: your exam schedule, subject list, topic confidence ratings, weekly availability, and target grades. The AI produces a structured week-by-week study schedule from this information.
For school report processing, we provide the AI with text extracted from your uploaded document. The AI returns structured subject performance data. The document text is not stored after this process completes.
Our AI provider is contractually prohibited from using your information to train its models. See Section 7 for details of our current AI provider.
5. Parent and Guardian Access
StudyLoop is designed so that students control parent access entirely.
- You generate the parent invite link. Your parent or guardian cannot join without it.
- Your parent receives a weekly Sunday evening email summarising your study activity.
- Your parent does not have access to your account, individual session notes, or MCQ scores.
- You can revoke parent access at any time by contacting privacy@getstudyloop.co.nz.
The weekly parent email includes:
- Sessions completed and missed during the week
- Subjects studied
- Upcoming exam dates and proximity warnings
- Topics flagged as low confidence
We report facts. We do not include editorial commentary, comparisons with other students, or alarmist language.
6. Data Retention
We keep your personal data for as long as your account is active.
If you cancel your subscription:
- Your account and data are retained for 30 days to allow reactivation
- After 30 days, your personal data is permanently and irreversibly deleted
- Anonymised, aggregated usage statistics that cannot be linked to you may be retained for product improvement
You can request deletion of your account and all associated data at any time by emailing privacy@getstudyloop.co.nz. We will action deletion requests within 10 business days.
7. Third-Party Services
StudyLoop uses the following third-party services. Each is subject to a data processing agreement and their own privacy policy.
Supabase (supabase.com)
Database and user authentication. Account data, study profile, session history, parent email address. United States / European Union.
Stripe (stripe.com)
Payment processing. Your payment details are handled directly by Stripe; we receive only payment confirmation and subscription status. United States.
Resend (resend.com)
Transactional and weekly parent email delivery. Parent email address and email content. United States.
AI Language Model Provider
Study plan generation and school report processing. Study profile data for plan generation; extracted report text for upload processing (discarded after use). United States.
Cloudflare (cloudflare.com)
Hosting, content delivery, and security. IP address and technical request data. Global.
We do not share your data with any other third parties without your explicit consent, except where required by New Zealand law.
8. Students Under 18
StudyLoop is designed for students in Years 11–13, many of whom are under 18. We take the privacy of younger users seriously.
- We do not display advertising to any users, including minors
- We do not sell data for any users, including minors
- We do not build behavioural profiles for advertising purposes
- School reports are never stored — only anonymised subject weights derived from them are retained
- Parent access is controlled by the student, not by StudyLoop
StudyLoop is not intended for children under 13. If you are a parent and believe your child under 13 has created an account, please contact privacy@getstudyloop.co.nz and we will promptly delete the account.
9. Your Rights Under the NZ Privacy Act 2020
Under the New Zealand Privacy Act 2020, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request that we correct inaccurate or outdated information
- Deletion — request that we delete your data, subject to our legal retention obligations
- Complaint — lodge a complaint with the Office of the Privacy Commissioner if you believe we have breached your privacy rights
To exercise any of these rights, contact us at privacy@getstudyloop.co.nz. We will respond within 20 working days as required by the Act.
If you are located in the European Union or United Kingdom, you may also have rights under the GDPR or UK GDPR. Please contact us and we will assist you.
Office of the Privacy Commissioner: privacy.org.nz · 0800 803 909
10. Security
We take reasonable steps to protect your information:
- All data is transmitted over HTTPS
- Passwords are stored using industry-standard hashing and are never stored in plain text
- Database access is restricted using row-level security — users can only access their own data
- School report uploads are processed in-memory and never written to storage
- Payment data is handled entirely by Stripe and never passes through our systems
No internet-connected system is completely secure. If we become aware of a security breach affecting your personal data, we will notify you as required by the Privacy Act 2020 and take immediate steps to contain and remediate the incident.
11. Cookies and Tracking
StudyLoop uses essential cookies only — specifically to keep you logged in and maintain your session across pages. We do not use advertising cookies, tracking pixels, or third-party analytics services that share your data with external companies.
We do not use Google Analytics, Meta Pixel, or any similar tracking technology.
12. Changes to This Policy
We may update this privacy policy from time to time. If we make material changes — changes that affect how we use your data in ways you might not expect — we will notify you by email at least 14 days before the change takes effect, and display a notice within the app.
The "last updated" date at the top of this page always reflects the most recent version. Continued use of StudyLoop after a policy update constitutes acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests relating to this policy or how we handle your data:
- Email: privacy@getstudyloop.co.nz
- Website: getstudyloop.co.nz/privacy
- Registered address: [Company Address], New Zealand
For formal privacy complaints, you may also contact the Office of the Privacy Commissioner: privacy.org.nz · 0800 803 909 · PO Box 10094, The Terrace, Wellington 6143.