Privacy Policy - xpStudy

Last updated: April 24, 2026

Welcome to xpStudy. This Privacy Policy transparently describes how we collect, use, store, and protect your information. By using our application, you agree to the practices described below.

1. Information We Collect

We collect data to provide, personalize, improve, and protect our services:

1.1. Personal Information (Provided by you)

• Account Data: When registering (via Email/Password, Google, or Apple), we collect your Name, Email Address, and Profile Picture to create your identity within the app.

• Generated Content: We collect the study materials you create, including flashcards, summaries, notes, schedules, and exported PDF files.

1.2. Behavior and Study Data

• Session History: We record detailed study sessions, including start/end times, exact duration, subject studied, and focus mode used. This data is used to generate your performance charts and weekly statistics.

• Gamification: We monitor your daily consistency (streak), XP earned, and level for ranking and reward features.

1.3. Feedback and Support

• Reports: When you use the "Report" function or send feedback, we collect the reason for the report and the text details provided, associating them with your User ID for analysis and bug fixing.

1.4. Financial Information

• Purchase History: We use the RevenueCat service to manage Premium subscriptions. We have access to your subscription status, renewals, and purchase history to unlock exclusive features, but we do not process or store your banking or credit card data directly.

1.5. Device and Security Information (Automatic)

• Identifiers: We collect advertising IDs (Google AdMob) and notification tokens (Expo Push Token) to display rewarded ads and send reminders.

• Fraud Prevention and Security: We analyze session metadata (comparing device clock with the server) to detect inconsistencies, prevent reward manipulation (anti-fraud system), and ensure a fair gamification environment.

• Usage and Diagnostic Data: We use Google Analytics for Firebase and Firebase Crashlytics to collect anonymous data about how you interact with the app (screens visited, time of use) and automated crash reports (error logs and device model). This helps us identify bugs and improve app stability. Users in certain regions (such as the EEA) can manage consent for this data collection directly through the app settings. 

• Age Range Verification: We query the native age signal APIs provided by your operating system (Google Play Services or Apple iCloud) upon access. This query is used exclusively to comply with legal minor protection obligations. Because we rely on third-party infrastructures, if the operating system fails to return a valid age or the user chooses to hide it, xpStudy adopts the Privacy by Default principle, presuming the user is a minor and automatically applying the strictest data collection restrictions.

1.6. Media and Files

• Photo Gallery: We request external storage read permission (READ_EXTERNAL_STORAGE) only so you can select and upload images from your gallery to illustrate your summaries. We do not access your camera or microphone directly.

2. How We Use Your Information

• Service Provision: For authentication, cloud backup, and data synchronization across devices.

• Artificial Intelligence: We use Google Gemini technology to process the themes, texts, or images you submit to generate personalized summaries and flashcards. Due to security guidelines from the infrastructure provider (Google), the use of this specific feature is strictly restricted to users aged 18 or older, requiring an age self-declaration within the app to unlock the tool. Data sent to the AI is processed exclusively for content generation at the time of the request and, in accordance with our enterprise service agreement, is not stored or used to train Google's foundational models, ensuring total privacy for your study materials.

• App Improvement: We analyze feedback reports and aggregated usage data to fix bugs and moderate content.

• Advertising and Consent: Video ads (AdMob) for free plan users, which may be personalized based on device identifiers. For users in the European Economic Area (EEA) and the United Kingdom, we request prior consent (via a certified CMP platform) for the use of cookies, personalized advertising, and analytics collection. You can manage or revoke this consent at any time in the app settings. For users identified by the operating system as adolescents (between 13 and 17 years old) or of unknown age, xpStudy automatically disables behavioral tracking and limits ad display to the "Teen" (T) category, ensuring that no advertising profiling is performed for this audience, in compliance with the ECA Digital. 

3. Third-Party Sharing

We share strictly necessary data with our infrastructure providers:

• Google (Firebase, Analytics, Crashlytics & Gemini): Database, Authentication, Storage, anonymous usage statistics, crash monitoring, and Generative AI infrastructure.

• Google AdMob: Advertising and Monetization network.

• RevenueCat: Subscription and In-app Purchase management.

• Cloudinary: Hosting and optimization of user-uploaded images.

4. Storage and International Transfer

• Synchronization: Your data may be stored locally on your device (cache) for offline use and is synced with our secure servers once an internet connection is established.

• International Transfer: To ensure high availability and security, our processing servers and databases (Google Cloud) are located in the United States. By using the app, you consent to the transfer, processing, and storage of your data in this location.

5. Your Rights and Data Deletion

• Account Deletion: You can request the deletion of your account and all associated data directly in the app settings or through our web form if you no longer have access to the app.

• Permission Revocation: You can revoke gallery or notification access in your operating system settings at any time.

6. Children's Privacy and Age Range 

• Blocking Children (<13): xpStudy is a service exclusively for users aged 13 and over. We have implemented technical barriers that prevent account creation by children identified as being under the age of 13. If an age signal points to this age group, the registration process is immediately interrupted and no personal data is stored on our servers.

• Protecting Adolescents and Guest Accounts (Protected Mode): We recognize the right of adolescents (13-17 years old) to use educational tools. For these users, as well as for any user whose age cannot be accurately verified (including anonymous Guest Accounts and systemic failures in store APIs), xpStudy applies 'Protected Mode' by default. In this mode, data is used strictly for the app's core functionality, with no non-essential collection. Furthermore, tracking for personalized advertising (IDFA/AAID) is blocked at the system root, limiting ad display to the 'Teen' (T) category and preventing the collection of identifiers for behavioral marketing purposes, in strict compliance with COPPA, GDPR, and ECA.

7. Changes to This Policy

We may update our Privacy Policy periodically to reflect app improvements. We recommend you review this page regularly to stay aware of any changes.

8. Contact

For privacy-related inquiries, please contact us at: xpstudy.app@gmail.com