🔒

Studdy Buddy — Privacy Policy

Effective Date: March 10, 2026

Contents

  1. Introduction
  2. Data We Collect
  3. How We Use Your Data
  4. Data Storage & Security
  5. Data Sharing & Third Parties
  6. Children's Privacy
  7. Your Rights
  8. Data Retention
  9. Changes to This Policy
  10. Contact Us

1. Introduction

Studdy Buddy ("the App", "we", "us", "our") is an educational mobile application designed to help students study more effectively through study tracking, social features, and AI-powered coaching.

This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and your rights regarding your data. By using the App, you agree to the collection and use of information as described in this policy.

This policy complies with the Turkish Personal Data Protection Law (KVKK — Kişisel Verilerin Korunması Kanunu, Law No. 6698), the EU General Data Protection Regulation (GDPR), and the requirements of Apple App Store and Google Play Store.

2. Data We Collect

2.1 Data You Provide Directly

Data Type Details Required?
Phone number Used for account registration and OTP verification via SMS Yes
Name Your first name, displayed to other users Yes
Date of birth Used to determine age group for child-safety features Yes
Gender Optional profile information No
Bio A short text description of yourself No
Profile pictures Photos you upload for your profile No
Exams & hobbies Exams you are preparing for and your hobbies, used for matching Yes

2.2 Data Generated Through Usage

Data Type Details
Study sessions Start/end times, duration, and subjects studied (Pomodoro sessions)
Topic progress Self-reported progress on exam topics and subtopics
Question attempts Your answers and scores on practice questions
Chat messages Text messages sent to matched study buddies
Voice recordings Audio messages sent in chat conversations
AI coaching data Insights generated by AI based on your study patterns
Study streaks Consecutive days of study activity

2.3 Data Collected Automatically

Data Type Details
Location GPS coordinates, city, and district — used to find nearby study buddies. Collected only with your explicit permission.
Device token Firebase Cloud Messaging (FCM) token for push notifications
Language preference Your preferred app language (Turkish or English)

3. How We Use Your Data

Purpose Data Used Legal Basis (KVKK/GDPR)
Account creation & authentication Phone number, OTP codes Contract performance
Study buddy matching Location, exams, hobbies, age group Consent
Study tracking Study sessions, topic progress, question attempts Contract performance
AI coaching & insights Study patterns, topic progress, question scores Consent
Messaging Chat messages, voice recordings Contract performance
Push notifications FCM device token Consent
Child safety Date of birth (to determine minor status) Legal obligation / Legitimate interest
Content moderation & safety Chat messages, user reports Legitimate interest

4. Data Storage & Security

🇪🇺 EU adequacy for Turkish users: Germany is an EU member state. Turkey has been recognized by the EU as providing adequate data protection. Data storage in Germany is compliant with both KVKK and GDPR requirements.

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following service providers, strictly for the purposes described:

Service Provider Purpose Data Shared
Twilio SMS OTP verification Phone number
Anthropic (Claude AI) AI coaching insights generation Anonymized study patterns and progress data
Google (Gemini AI) AI coaching insights generation Anonymized study patterns and progress data
Firebase (Google) Push notifications FCM device token
Hetzner Online GmbH Server hosting All data (stored on their infrastructure)

We may also disclose your data if required by law, court order, or government regulation.

6. Children's Privacy

Studdy Buddy is an educational app and may be used by students of all ages, including minors.

🛡️ Child Safety Measures:
• Users aged 16 and under are automatically flagged as minors
• Minors are partitioned from adult users in all social features (matching, study tables, Quick Seat rooms)
• Minors can only interact with other minors in social contexts
• This partitioning is enforced server-side and cannot be bypassed

If you are a parent or guardian and believe your child has provided personal data without your consent, please contact us at the address below and we will promptly delete the data.

7. Your Rights

Under the Turkish KVKK (Article 11) and GDPR, you have the following rights:

Right Description
Access Request a copy of the personal data we hold about you
Rectification Request correction of inaccurate or incomplete data
Erasure Request deletion of your account and all associated data
Restriction Request limitation of processing of your data
Data portability Receive your data in a structured, machine-readable format
Objection Object to processing based on legitimate interest
Withdraw consent Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at team@studdybuddy.co. We will respond within 30 days as required by KVKK and GDPR.

🇹🇷 KVKK Complaint: If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Board (KVKK Kurulu) in Turkey.

8. Data Retention

Data Type Retention Period
Account data (phone, name, profile) Until account deletion
Study data (sessions, progress, scores) Until account deletion
Chat messages Until account deletion
Voice recordings & chat media 3 days after sending (auto-deleted)
AI coaching insights Until account deletion
Location data Overwritten each time you update your location

When you delete your account, all your personal data is permanently deleted within 30 days. Anonymized, aggregated statistical data may be retained.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the App or via SMS. The "Effective Date" at the top of this page will be updated accordingly.

Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

For KVKK-related inquiries, you may also contact the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) at kvkk.gov.tr.