Last updated: 24 September 2026
There are two distinct processing activities here, and it is useful to separate them because the responsibilities are different.
Regarding the material you upload—your PDF, your recording, and the text extracted from them—you are the data controller. You decide what is uploaded, for what purpose, and how long it is retained on your device. We act as a data processor on your behalf: we process that material solely according to your instructions, do not use it for any purpose of our own, do not disclose it to anyone except the service providers necessary to process it, maintain confidentiality, and delete it within the timeframes specified below.
Regarding the minimum technical data required for the service to function—the random identifier for each upload and your subscription status—the data controller is the developer of Studium, whose identifying details are listed on the application’s App Store product page.
For any privacy-related questions, use the support email listed on Studium’s App Store product page.
Studium does not have user accounts. We do not ask for your name, email, or phone number. We do not know who you are and have no way to link an upload to you.
Your library is stored entirely on your device. The files you upload are transmitted to our servers solely for processing.
The resulting text is returned to your mobile device and saved there.
The file you upload (PDF or audio) and the text extracted from it, for the sole purpose of generating your questions and flashcards. Legal basis: performance of a contract.
A technical upload identifier, random and not linked to you, to track processing status.
If processing fails, the technical error message, to enable diagnosis. It does not include your material.
Subscription data managed by RevenueCat and Apple: an anonymous installation identifier and your plan status. We do not receive your name or payment details.
We do not run ads, perform profiling, create individual usage statistics, or sell or transfer data to third parties for commercial purposes.
The file you upload and the extracted text are hosted on Google servers in the European Union (Belgium), and processing is executed there.
The technical log of each upload’s status, and the generated output during the few minutes before your mobile device retrieves it, are hosted on Google servers in the United States.
The artificial intelligence models that read the material may operate outside the European Economic Area. These transfers are governed by standard contractual clauses approved by the European Commission.
To provide the service, we rely on sub-processors: Google, both for hosting and processing (Firebase) and for audio transcription, document reading, and generating questions and flashcards (Gemini). Apple and RevenueCat are involved solely in subscription management.
These providers process content solely to deliver the service to us. Under their current terms for API customers, they do not use it to train their models.
If we change artificial intelligence providers, this policy will be updated to reflect that change.
The original file you upload: deleted as soon as its text is extracted, i.e., within minutes.
The extracted text: retained on our servers for the duration of processing, so that a retry does not require re-transcribing the full audio. Deleted upon completion.
The generated result: deleted as soon as the application retrieves it.
In any event, an automated process runs every six hours and removes any remaining data older than twenty-four hours, including processing tasks that were interrupted and never completed. After that timeframe, nothing belonging to you remains on our servers.
On your device: until you delete the material or uninstall the application. You have complete control over this, and deletion is immediate and permanent.
A classroom recording typically contains the voice of your instructor and your peers. Those voices constitute personal data of those individuals.
By uploading it, you are the party deciding on that processing and must have the legal authorization to do so. We process it on your behalf and do not use it for any other purpose.
If someone asks you to stop processing a recording containing their voice, delete it from the application. On our end, it no longer exists.
Uploads are transmitted encrypted and stored encrypted at rest. Access to storage is restricted: the application can write its own upload, but cannot read anyone else’s.
No system is infallible. What genuinely reduces risk is that there is very little to steal: there are no accounts, no passwords, no payment data, and material is only retained for minutes.
You have the right to access, rectify, erase, restrict, or object to the processing of your data, as well as the right to data portability.
In practice, because your library lives on your device and we do not retain any identifier linking you to an upload, we cannot locate or retrieve your data even if requested: we do not know which data is yours. The most direct and complete way to exercise these rights is to delete the material from within the application or uninstall it.
For any other matter, write to us using the support email listed on Studium’s App Store product page. You may also lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es).
Studium is not directed at children under 14 years of age. If you are under that age, do not use the application without the consent of a parent or legal guardian.