Last updated: 24 September 2026
There are two distinct processing activities here, and it is helpful to distinguish between them because responsibilities differ.
In relation to the material you upload — your PDF, your recording, and the text extracted from them — you are the data controller. You decide what is uploaded, for what purpose, and how long it is retained on your device. We act as a data processor on your behalf: we process that material solely on your instructions, do not use it for any of our own purposes, do not transfer it to anyone except suppliers necessary to process it, maintain confidentiality, and erase it within the timeframes indicated below.
In relation to the minimal technical data required for the service to function — the random identifier for each upload and your subscription status — the data controller is the developer of Studium, whose identifying details are set out in the application’s App Store listing.
For any privacy-related queries, use the support email address listed on Studium’s App Store listing.
Studium does not have user accounts. We do not ask for your name, email address, or phone number. We do not know who you are and have no way of linking an upload to you.
Your library is stored entirely on your device. Files you upload travel to our servers solely to be processed.
The resulting text returns to your mobile device and is stored there.
The file you upload (PDF or audio) and the text extracted from it, for the sole purpose of generating your questions and flashcards. Lawful basis: performance of a contract.
A random technical upload identifier, not linked to you, to track processing status.
If processing fails, the technical error message, to enable diagnosis. It does not include your material.
Subscription data managed by RevenueCat and Apple: an anonymous installation identifier and your plan status. We do not receive your name or payment details.
We do not display advertising, perform profiling, compile individual usage statistics, or sell or transfer data to third parties for commercial purposes.
The file you upload and the extracted text are hosted on Google servers in the European Union (Belgium), where processing takes place.
The technical log of each upload's status, and the generated result during the few minutes before your mobile device retrieves it, are hosted on Google servers in the United States.
The artificial intelligence models reading the material may execute outside the European Economic Area. These transfers are governed by standard contractual clauses approved by the European Commission.
To provide the service, we engage sub-processors: Google, both for hosting and processing (Firebase) and for audio transcription, document reading, and question and flashcard generation (Gemini). Apple and RevenueCat are involved solely in subscription management.
These suppliers process content solely to provide the service to us. According to their current terms for API customers, they do not use it to train their models.
If we change artificial intelligence suppliers, this policy will be updated to reflect the change.
The original file you upload: deleted as soon as its text has been extracted, i.e. within minutes.
The extracted text: retained on our servers for the duration of processing, so that a retry does not require re-transcribing the entire audio. Deleted upon completion.
The generated result: deleted as soon as the application retrieves it.
In any event, an automated process runs every six hours and purges any remaining data older than twenty-four hours, including processing tasks that were interrupted and never completed. After that timeframe, nothing belonging to you remains on our servers.
On your device: until you delete the material or uninstall the application. You control this entirely, and deletion is immediate and permanent.
A lecture or class recording typically contains the voices of your lecturer/teacher and classmates. Those voices constitute personal data of those individuals.
By uploading it, you are the party determining that processing and must have lawful grounds to do so. We process it on your behalf and do not use it for any other purpose.
If someone asks you to stop processing a recording containing their voice, delete it from the application. On our end, it no longer exists.
Uploads are encrypted in transit and stored encrypted at rest. Storage access is restricted: the application can write its own upload, but cannot read anyone else's.
No system is infallible. However, what meaningfully reduces risk is that there is very little to steal: there are no accounts, no passwords, no payment details, and material is only retained for minutes.
You have the right to access, rectify, or erase your data, restrict or object to its processing, and the right to data portability.
In practice, because your library resides on your device and we do not retain any identifier linking you to an upload, we cannot locate or recover your data even if you ask us to: we do not know what it is. The most direct and complete exercise of these rights is to delete the material within the application or uninstall it.
For any other matter, write to us using the support email address listed on Studium’s App Store listing. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - www.aepd.es).
Studium is not directed at children under 14 years of age. If you are under this age, do not use the application without the consent of your parent or legal guardian.