Last updated: 24 September 2026
There are two distinct processing activities here, and it is important to separate them as the responsibilities are not the same.
Regarding the material you upload —your PDF, your recording, and the text extracted from them— you are the data controller. You decide what is uploaded, for what purpose, and for how long it is stored on your device. We act as a data processor on your behalf: we process that material solely according to your instructions, we do not use it for any purpose of our own, we do not transfer it to anyone except the providers necessary to process it, we maintain confidentiality, and we delete it within the timeframes indicated below.
Regarding the minimum technical data that the service requires to function —the random identifier for each upload and the status of your subscription— the data controller is the developer of Studium, whose identification details appear on the app's App Store listing.
For any privacy-related matters, use the support email listed on Studium's App Store listing.
Studium does not have user accounts. We do not ask for your name, email, or phone number. We do not know who you are and we have no way to link an upload to you.
Your library is stored entirely on your device. The files you upload travel to our servers solely to be processed.
The resulting text returns to your phone and is saved there.
The file you upload (PDF or audio) and the text extracted from it, for the sole purpose of generating your questions and flashcards. Legal basis: the performance of a contract.
A technical upload identifier, random and not linked to you, to track processing status.
If processing fails, the technical error message, in order to diagnose it. It does not include your material.
Subscription data managed by RevenueCat and Apple: an anonymous installation identifier and the status of your plan. We do not receive your name or your payment details.
We do not use advertising, we do not conduct profiling, we do not compile individual usage statistics, and we do not sell or transfer data to third parties for commercial purposes.
The file you upload and the extracted text are hosted on Google servers in the European Union (Belgium), and processing is executed there.
The technical log of the status of each upload, and the generated result during the minutes that elapse until your phone retrieves it, are hosted on Google servers in the United States.
The artificial intelligence models that read the material may run outside the European Economic Area. These transfers are covered by standard contractual clauses approved by the European Commission.
To provide the service, we rely on sub-processors: Google, both for hosting and processing (Firebase) and for audio transcription, document reading, and the generation of questions and flashcards (Gemini). Apple and RevenueCat are involved solely in subscription management.
These providers process the content solely to render the service to us. According to their terms in effect for API customers, they do not use it to train their models.
If we change artificial intelligence providers, this policy will be updated to reflect that.
The original file you upload: deleted as soon as its text has been extracted, i.e., minutes.
The extracted text: retained on our servers for the duration of the processing, because a retry needs to avoid re-transcribing the entire audio. It is deleted upon completion.
The generated result: deleted as soon as the app retrieves it.
In any event, an automated process sweeps every six hours and deletes any residual data older than twenty-four hours, including processing operations that were interrupted and never completed. After that period, nothing of yours remains on our servers.
On your device: until you delete the material or uninstall the app. You control this entirely, and that deletion is immediate and permanent.
A class recording usually contains the voice of your teacher and your classmates. Those voices constitute personal data of those individuals.
By uploading it, you are the person deciding on that processing, and you must have a legal basis to do so. We process it on your behalf and do not use it for any other purpose.
If someone asks you to stop processing a recording of theirs, delete it from the app. On our side, it no longer exists.
Uploads travel encrypted and are stored encrypted at rest. Access to storage is restricted: the app can write its own upload, but cannot read anyone else's.
No system is infallible. What genuinely reduces the risk is that there is very little to steal here: there are no accounts, no passwords, no payment data, and material is only present for minutes.
You have the right to access your data, rectify it, erase it, restrict or object to its processing, and data portability.
In practice, since your library lives on your device and we do not retain any identifier linking you to an upload, we cannot locate or retrieve your data even if you request it: we do not know which data is yours. The most direct and complete exercise of those rights is to delete the material from within the app or to uninstall it.
For any other matter, write to us using the support email listed on Studium's App Store listing. You may also lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es).
Studium is not directed at minors under 14 years of age. If you are under that age, do not use the app without the consent of your legal guardian.