Privacy policy
StudyWire is made by Recovery Transparency Technologies LLC. Effective 2026-10-25. Written to be read.
The short version. Your material, questions and quiz answers are yours. We use them to answer you, quiz you and remind you — nothing else. We never sell data or train models on it, and neither may the services we use. You can see, download and delete everything from the account menu.
What we hold, why, and for how long
| What | Why | Kept |
|---|---|---|
| Account: username, display name, email address, a salted password hash, role (student / instructor / admin), plan | to sign you in, confirm you own the address, reset a password, and apply your plan's allowances | until you delete the account |
| Your material: the files you upload, the text extracted from them, page images rendered on request, and the search vectors | to answer your questions from your own pages and cite them | until you remove the file or delete the account |
| Your conversations with the guide, quiz questions and answers, and the review schedule built from them | the product itself: answers, quizzes, and the reminders that bring concepts back | until you clear a conversation (New chat) or delete the account |
| The guide's memory note about you (concepts studied, how you like to work) | so the guide can adapt to you | until you delete the account; you can read it any time (What the guide remembers) |
| In a class: your enrolment, and session reads — a summary, the concepts, and your own words that were off, produced by three AI judges when a study session in that class closes | so your instructor can see where the class struggles and help; they see your work in that class only, from the day you joined | until the class is deleted, or 365 days after it was created — whichever is first; an instructor can delete a class any time |
| Usage ledger: model, tokens and cost of each AI call, attributed to your account or your class | to apply allowances fairly and to run the business | until you delete the account (aggregates survive without names) |
| Reminder settings, registered devices (push tokens), and the notification history with the reason each reminder was sent or held back | to send the reminders you asked for and to show you why | settings and devices until you remove them; the history 90 days |
| Focus Awareness events, only if you turn it on inside the phone app: the name of a social-media app you selected and the minutes used | to offer one question after your chosen number of minutes | 30 days; deleted at once by "Delete activity data" or "Revoke consent" |
| Your copyright affirmation: the time you first affirmed the material terms and the version of the Copyright policy you affirmed | to show that every uploader accepted responsibility for their own uploads (see the Copyright policy) | until you delete the account |
| Billing: Stripe customer and subscription ids, top-ups bought, extra storage units on the subscription, the webhook events already applied | to keep your plan in step with what you pay; card numbers are never stored by StudyWire | until you delete the account |
| Administrative log: every admin action and every instructor view of a student's transcript (who, when, which record) | accountability — the answer to "who accessed this record" | 3 years |
| Server log and encrypted database backups | operations and recovery | backups roll off after 7 days; a deleted account leaves the backups within that time |
Who else touches it
These are the only services that receive any of your data, each for one purpose. The list is generated from the code: a build of StudyWire fails if the software contacts a service that is not on it.
| Service | What it does for you | What it receives |
|---|---|---|
| Render | hosting: the web server, the database and uploaded files, on an encrypted disk in the United States | everything the service stores |
| Anthropic (Claude) | writes answers, quiz questions and grades, the material check, and the first of the three session-read judges | the question, the retrieved excerpts of the student's own material, the quiz answer being graded, or a closed study session's transcript; never the whole library |
| Voyage AI | turns uploaded pages into search vectors once, at upload | the text of each uploaded page, in pieces |
| Groq | transcribes lecture recordings; runs the second and third session-read judges (open-weight models) | the audio of a recording a student uploaded; a closed class study session's transcript |
| OpenRouter (Hermes test service only) | on the separate hermes-study-guide-psy334 test service, and nowhere else, the answer engine is an open-weight model (Nous Hermes) reached through OpenRouter instead of Anthropic; the main StudyWire site never contacts it | the question and the retrieved excerpts, exactly as the answer engine above receives them; that service's own database only |
| Resend | sends account emails: confirmation, password reset, instructor invitations | the recipient's email address and the message |
| Stripe | subscriptions, top-ups and refills; card details never reach StudyWire | name, email, the plan or top-up bought; Stripe's customer and subscription ids are stored on the account |
| Apple Push Notification service | delivers reminders to the iPhone app | the device token and the notification text (a count of concepts due, never material) |
| Off-site backup bucket (only when configured) | keeps a copy of the nightly database snapshot outside the hosting disk, so a disk failure cannot lose every account; which provider is the operator's choice (Amazon S3 by default, or any S3-compatible store set by BACKUP_S3_ENDPOINT) | a complete snapshot of the database — accounts, material text, conversations, ledger — once a day; files on the shelf are not included |
| Google Fonts | serves the typeface the pages use (Plus Jakarta Sans); the reader's browser fetches it directly | the reader's IP address and browser headers when the font loads — nothing about the account, the material or the conversation |
| The browser's push service (Apple, Google or Mozilla, depending on the browser) | delivers reminders to the website / home-screen app | an encrypted notification only that browser can read |
What we never do
- sell or rent data, or share it with advertisers
- use anyone's material, questions or transcripts to train models (and our providers may not either)
- read the content of social-media apps — Focus Awareness, when turned on, receives only an app's name and a number of minutes
- store card numbers
- collect grades, student ID numbers, or government identifiers
- monitor anything without an explicit opt-in that can be turned off and deleted
Classes and your instructor
When you join a class with its code, your instructor can see your work in that class only, from the day you joined: the conversations in that class's silo, your time and quiz record there, and the session reads (an AI summary of a closed study session with the concepts and any of your own words that were off). They cannot see your other courses. Every time an instructor opens a student's transcript, the access is logged. Leaving the class ends their view from that moment. For institutions, this is the "school official" arrangement described on the institutions page.
Your rights and controls
- See it. What the guide remembers shows the memory note, your quiz record and review schedule; the Plan page shows your usage; the Reminders page shows every notification decision.
- Take it. Download my data (account menu) gives you a file with your account, courses, material list, conversations, quizzes, schedule, settings and billing records.
- Correct it. Edit your display name and email in the account menu, or write to us.
- Delete it. Delete account (account menu) removes everything above at once; backups roll off within 7 days. An instructor deleting a class removes its session reads; students keep their own material.
- Leave a class. Leave a class from its menu; your instructor stops seeing your work from that moment.
- Turn things off. Reminders, the daily challenge and Focus Awareness are separate switches. Off means off.
Security
- Passwords are stored as salted PBKDF2 hashes; sign-in and code guessing are rate limited.
- Sessions are per tab; tokens never appear in URLs; files open with ten-minute single-file tickets.
- All traffic is HTTPS; the database and uploads sit on an encrypted disk.
- Instructors see a student's work only inside their class and only from the enrolment date; every such view is logged.
- Plan and allowance changes come only from Stripe's signature-verified webhook; purchases are checked for ownership and amount before credit.
- The build fails if the code contacts a provider that is not declared in this policy, or if the public policy pages drift from it.
- Breach notice: we tell affected users and, for a class, the instructor and institution, within 72 hours of confirming an incident, with what happened and what to do.
Children
StudyWire is for people 16 and older. We do not knowingly hold an account for anyone younger; write to us and it will be removed.
Changes
This page is generated from the policy file in the source code, so a change to the policy is a visible, dated change in the project's history. We will note material changes here and, for class use, tell the instructor.
Contact
Recovery Transparency Technologies LLC, 705 Orchard Ave, Wilmington, NC 28403, USA · jeremy.heydon@transparencytechnologies.ai