Last updated: 24 September 2026
There are two distinct processing operations here, and it is important to separate them as responsibilities differ.
With regard to the material you upload — your PDF, recording, and the text extracted from them — you are the data controller. You decide what is uploaded, for what purpose, and how long it is stored on your device. We act as a data processor on your behalf: we process that material solely on your instructions, do not use it for any of our own purposes, do not share it with anyone except the providers necessary to process it, maintain confidentiality, and delete it within the timeframes set out below.
With regard to the minimum technical data required for the service to function — the random identifier for each upload and your subscription status — the data controller is the developer of Studium, whose identification details are provided in the app's App Store listing.
For any privacy-related queries, use the support email address listed in Studium's App Store listing.
Studium has no user accounts. We do not ask for your name, email, or telephone number. We do not know who you are and have no way of linking an upload to you.
Your library is stored entirely on your device. Files you upload travel to our servers solely to be processed.
The resulting text returns to your phone and is saved there.
The file you upload (PDF or audio) and the text extracted from it, for the sole purpose of generating your questions and flashcards. Lawful basis: performance of a contract.
A technical upload identifier, random and not linked to you, to track processing status.
If processing fails, the technical error message, to enable diagnosis. It does not include your material.
Subscription data managed by RevenueCat and Apple: an anonymous installation identifier and your plan status. We do not receive your name or payment details.
We do not use advertising, carry out profiling, compile individual usage statistics, or sell or transfer data to third parties for commercial purposes.
The uploaded file and extracted text are hosted on Google servers in the European Union (Belgium), where processing takes place.
The technical log of each upload's status and the generated result during the few minutes before your phone fetches it are hosted on Google servers in the United States.
The artificial intelligence models that read the material may execute outside the European Economic Area. These transfers are covered by Standard Contractual Clauses approved by the European Commission.
To provide the service, we engage sub-processors: Google, for both hosting and processing (Firebase) and audio transcription, document reading, and question and flashcard generation (Gemini). Apple and RevenueCat are involved solely in managing subscriptions.
These providers process content solely to deliver the service to us. Under their current terms for API customers, they do not use it to train their models.
If we change artificial intelligence providers, this policy will be updated to reflect that.
The original file you upload: deleted as soon as its text has been extracted, i.e. within minutes.
The extracted text: retained on our servers for the duration of processing, so that a retry does not require re-transcribing the entire audio. Deleted upon completion.
The generated result: deleted as soon as the app fetches it.
In any case, an automated process runs every six hours and deletes any remaining data older than twenty-four hours, including interrupted processing jobs that never completed. After that period, nothing belonging to you remains on our servers.
On your device: until you delete the material or uninstall the app. This is entirely within your control, and deletion is immediate and permanent.
A lecture recording often contains the voices of your teacher and classmates. Those voices constitute personal data belonging to those individuals.
By uploading it, you are the party deciding on that processing operation and you must have a lawful basis to do so. We process it on your behalf and do not use it for any other purpose.
If someone asks you to stop processing a recording containing their voice, delete it from the app. On our side, it no longer exists.
Uploads are transmitted encrypted and stored encrypted at rest. Access to storage is restricted: the app can write its own upload, but cannot read anyone else's.
No system is infallible. What genuinely reduces risk is that there is very little to steal: there are no user accounts, no passwords, no payment details, and material is present for only a matter of minutes.
You have the right to access your data, rectify it, erase it, restrict or object to its processing, and to data portability.
In practice, because your library lives on your device and we do not retain any identifier linking you to an upload, we cannot locate or retrieve your data even if requested: we do not know what it is. The most direct and complete way to exercise these rights is to delete the material from the app or uninstall it.
For any other matter, write to us using the support email address listed in Studium's App Store listing. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD - www.aepd.es).
Studium is not intended for children under 14 years of age. If you are under that age, do not use the app without the consent of your parent or legal guardian.