Privacy Policy

Last updated October 8, 2026 · Version 2026-10-08.14

Draft — requires review by a qualified lawyer before publication. The same text is in the app (You > Privacy Policy).

This Privacy Policy explains what information StudentOS collects, how it is used, who processes it and the choices you have. In short: your data is yours, most of it stays on your device, we never sell it, ads are never personalized, and you can export or delete it at any time.

1. Summary (notice at collection)

On your device only: everything you add, including weekly well-being check-ins. Android device backup is turned off for StudentOS, so this data is not copied to your Google Drive backup. Some features never leave your device even with cloud backup on: well-being check-ins, Recharge life blocks and preferences, the optional daily movement goal and the minutes you log, Get help campus contacts and country, office-hours reminders and campus safety numbers, Money and fees reminders and budget, study groups, sessions and notes (including any recordings you keep), attendance marks, the GPA calculator, Applications & tests, school calendar links, your rotating schedule, School hours, your garden and streak settings, focus timer, sound and reading settings, recent searches, alert and talking-reminder history, and the other device-only items listed in section 3.

Sent to us only when you choose: your study data, if you turn on cloud backup (it is off by default; signing in with Google turns it on); what you send to an AI feature (18 and older only); AI reports you send; on the web only, a school calendar link you add, passed through our server to read that calendar and not kept.

Collected automatically when our cloud is available: an anonymous account ID created after setup, your age group, AI usage counters and, on the free plan, device and ad information collected by Google AdMob for non-personalized ads.

We do not sell or share your personal information for targeted advertising, and we do not collect sensitive personal information on our servers. Retention periods for each category are listed in section 10.

2. Who is responsible

Binary Data Technology ("we", "us") provides StudentOS and is responsible for the personal information described here. Postal address: 33 Gates Ave, Springfield, MA 01118, United States. Contact: binarydatatechnology151@gmail.com.

Representative in the EU and the UK: [Owner to appoint and name EU and UK representatives, if required].

3. Information we collect

Profile you enter (all optional): a name or nickname used only to greet you, your school, semester name and dates, sleep window, energy peak, daily study hours and student modes (for example working student or student parent). Student modes are optional and only used to personalize tips and help content; they do not change how your plan is built.

Avatar and pictures: you can pick a drawn avatar (or none) and choose who appears in the app's pictures. We never ask for a photo or your gender. The avatar choice and picture setting are saved with your profile and settings, so they are backed up only if cloud backup is on.

Age range: during setup you choose an age range (under 13, 13 to 17, or 18 or older) and the app keeps only that range. We never ask for or store a birth date. If you choose under 13, setup stops, nothing you entered is kept, and the app only stores a time on your device that stops setup being retried for 24 hours.

Academic data you add: courses, class times, tasks, due dates, grades, flashcards, focus sessions, weekly reset notes and tutor conversations.

Well-being check-ins: your mood and stress ratings. These are stored only on your device. They are never sent to our cloud, never synced and never shared, and Android device backup is turned off for StudentOS so they are not copied to your Google backup either.

Account information: an anonymous account ID, created only after you finish setup. If you sign in with Google, we also receive your Google account ID, email address and name, and Google may also provide your profile photo link.

Content you send to AI features (18 and older only): the text, photos or files you choose to submit, plus the details that feature needs, for example the course name, recent messages in that tutor chat or your semester dates. Files are processed in memory and are not stored by us. StudentOS does not use Cloud Storage for your files. A photo of a problem for the tutor, and files or photos for Make cards with AI, are sent only when you tap to send them (see section 8).

AI reports: if you report an AI output, we receive the reason, any note you add, the name of the feature and up to the first 2,000 characters of that output.

Usage counters: how many times you used each AI feature in the current period, so we can apply limits.

Purchase status: if you subscribe, Google Play tells us your subscription status, plan, renewal or expiry date and a purchase token that we use to verify it. We store only a one-way fingerprint of the token. We do not receive your card or bank details.

Unlock codes: if you redeem a code, we keep a one-way fingerprint of the code (not the code itself) marked as used, how much Plus time the code gives, when it was used and a one-way identifier of your account, so the same code cannot be used again. We also keep how long your Plus from codes lasts on your account. Wrong or used codes count toward a daily limit to stop guessing. If we cancel a code or end Plus from it (Terms, section 4), we note that on the code's record and on your Plus-from-codes end date, and keep an internal record of the action: the code fingerprints, the old and new end dates and the reason, without your account identifier.

Device and ad information: on the free plan, Google AdMob may collect device identifiers (such as your advertising ID), IP address, approximate location derived from it, and ad interactions, to show, measure and protect non-personalized ads. When you watch an optional rewarded ad, your anonymous account ID is passed to AdMob so the extra AI uses can be verified.

Support messages: anything you include when you email us.

We do not currently use an analytics service. If we add one, we will update this policy first and ask for your consent where the law requires it.

Reminders and deadline alerts are scheduled locally on your device; their content is not sent to us. A notification can show the task title and course, including on your lock screen, depending on your device's notification settings. You can hide notification content on the lock screen in your device settings.

Focus timer on the lock screen (Android and iPhone, on by default, can be turned off in Settings): while a focus block runs, StudentOS shows a notification on your device with the time left and, unless you hide it, the task name. Anyone who can see your lock screen can read it. For students under 18, and when we do not know your age, the task name is hidden by default. The notification is created on your device and nothing about it is sent to us. The session in progress is kept on your device, encrypted, so the timer can continue if the app is closed.

Home-screen widgets (Android): if you add a StudentOS widget, the app keeps a small copy of what the widgets show (your next classes, top tasks and next deadlines, or only counts and times when "Hide details on widgets" is on) on your device so Android can redraw them. Anyone who can see your home screen can see what a widget shows. For students under 18, and when we do not know your age, details are hidden by default; for students 18 and older they are shown by default. You can change this in Settings; with details hidden, titles, course names and rooms are not stored for the widgets at all. The pictures Android uses to draw the widgets can be opened only by StudentOS, your home-screen app and the built-in system apps on your phone. Widget data never leaves your device.

School hours mode is optional and off by default. If you turn it on, your school days and times, break periods, term dates and days off are stored only on your device, encrypted. StudentOS uses them, together with your class times, only to decide on your device when reminders and alerts arrive.

Talking reminders are off by default. If you turn them on, your device's own text-to-speech voice reads reminders aloud on the device. The text is not sent anywhere to be spoken. Which briefing was read today and which class announcements were made are kept on your device only.

Focus sounds are generated by StudentOS and bundled with the app, and they play on your device only. Which sounds you pick, their volumes and timer settings are kept on your device. On Android, a media notification shows while a sound plays so it can keep playing with the screen off; it says only "Focus sounds", never your task.

Flashcard review can read cards aloud when you tap the speaker or turn on Auto-read, using your device's own voice; the text is not sent anywhere to be spoken. The original text of fill-in-the-blank cards, your Match game personal bests and the Auto-read setting are kept on your device only (the cards themselves are backed up like your other flashcards when cloud backup is on). Match has no leaderboards and nothing about your times is shared.

Reading and text settings (font, text size, line spacing, bold text, italics and handwriting accents) are kept on your device only.

Life and Move is optional and off by default. If you turn on a daily movement goal, your goal (minutes, days, preferred time and activity), the minutes you log and the days you mark done or skipped are stored only on your device, together with your life blocks (protected time for moving, fun, self-care, chores, friends or rest). Walk and review reads your due flashcards aloud with your device's own voice; the text is not sent anywhere to be spoken, and listening does not change your review schedule.

Money and fees is optional. The items you add (a name, a type, an optional amount and currency, the due date and time, how it repeats, its status and what you have paid so far, a note, a link to your school’s payment portal and whether it could block registration or transcripts) and the optional monthly budget (income, planned spending and currency) are stored only on your device, encrypted, and are never synced to our cloud, never sent to AI features or ad networks, and never sent to us. Amounts are optional. We never collect payment card or bank account details, and StudentOS refuses to save text that looks like a card or account number. Money reminders are scheduled on your device; their notifications show the item name and due date but never the amount, and they are never read aloud. Find dates in text reads the text you paste on your device only and does not keep it.

Office hours and directions: StudentOS reads the office hours you typed on each course on your device to list upcoming times; nothing is sent anywhere. "Plan a visit" adds an ordinary task with your questions. Office-hours reminders are optional, scheduled on your device, and their notifications show the course code and room. "Directions" opens Apple Maps, Google Maps or your default maps app with the room and your school name; that text goes to the maps provider only when you tap, under its own privacy policy. StudentOS never asks for, reads or stores your location. Campus safety numbers you save in Get help are stored only on your device, encrypted, and never synced or shared; StudentOS cannot call anyone for you and never shares your location.

Study groups and Notes are optional. Your groups (a name, an optional course and a color), the people you add (a name, and optionally an email address or phone number), sessions (date, time, place or meeting link, agenda, linked decks and tasks, who you marked as coming and reminders) and notes (text you type, text from speaking, tags, links and any recordings you choose to keep) are stored only on your device. Records are encrypted; kept recordings are audio files in the app’s private storage. None of this is synced to our cloud, sent to ad networks, or sent to us. A note is sent to AI only if you open it in Make flashcards and tap Make cards with AI (18 and older); then only the text you checked is sent, for that one request (see section 8). Member emails and phone numbers are used only to fill in invites that you send yourself from your share sheet, mail app or messages app; StudentOS never contacts anyone. Invites, calendar files, free-time lists and recaps are built on your device and go only where you send them, and recaps never include recordings. Session reminders are scheduled on your device and show the session name, the group, the time and the place.

School calendar import is optional. If you add a calendar link from your school system (for example Canvas, Brightspace, Blackboard, Moodle, Schoology or Google Calendar), the link works like a password: anyone who has it can read that calendar. StudentOS keeps it only on your device, encrypted, never syncs it, never shows it in full and leaves it out of exports. In the Android and iPhone apps your device reads the calendar directly from your school. On the web, the link is sent to our server only to read the calendar for that request: our server fetches it and passes it back, does not store the link or the calendar, and its logs record only whether the fetch worked, how long it took and a one-way fingerprint of the website's name. The calendar's website then sees our server's address, not yours. StudentOS keeps, on your device only, which calendar items you added or skipped and their titles and due dates, so it can tell you when a due date moves. Items you add become ordinary tasks (backed up only if cloud backup is on). A calendar file you choose is read on your device and not kept.

Attendance is optional and self-reported. The marks you give each class (attended, late, missed, excused, canceled), your attendance rules and settings are stored only on your device, encrypted. StudentOS never uses your location to work out attendance. Optional reminders after class are scheduled on your device and show the course name and class time.

The GPA calculator is optional. It reads your courses, credits and tracked grades on your device to estimate a GPA. The settings and numbers you enter for it (grading scale, weighting, a custom grade table, per-course credits, course level, pass/fail choice and final grades you type, past terms from your transcript and a target GPA) are stored only on your device, encrypted.

Applications & tests is optional. The tests you add (which test, subject, test date, registration deadline, score range, goal and practice scores), your deadline checklists (step names, due dates, status, notes and links) and your recommendation-letter records (the name and role of the person writing, what it is for, dates, status and whether you sent a thank-you) are stored only on your device, encrypted. If you make a study plan, the study sessions, practice tests and test day it adds are ordinary tasks and are handled like your other tasks, including cloud backup if you turned it on. Prep links open the test organizations’ own websites in your browser; their privacy policies apply there.

Rotating schedule: whether your class schedule uses A/B weeks or a day cycle, its no-school days and any bell periods you name are stored only on your device. Class times themselves (including which A/B week or cycle day they meet on) are part of your courses and are backed up like the rest of the course when cloud backup is on.

Your garden and streak: the garden's growth and your streak are worked out on your device from the work you already record (focus sessions, flashcard reviews, finished tasks and weekly check-ins). Your garden choices, weekend protection, repaired streak days and personal bests are stored only on your device, encrypted, and are never shown to anyone else. There are no leaderboards.

Insights (the breathing-room meter, exam countdowns, charts and the weekly report) are worked out on your device from your own tasks, focus sessions, cards and grades. The only extra thing Insights stores is a list of the days you reviewed flashcards (dates only), kept on your device.

Quick add reads what you type on your device to fill in the course, date, time, length and priority; that text is not sent to AI or to us. An unsaved Quick add line and a count of tasks added that way are kept on your device only.

Store ratings: StudentOS may ask your app store to show its rating card after something went well (at most 3 times a year, never in your first days and never during a payment). The dates we asked, your first-use date and the date of the last error screen are stored only on your device, so we can ask rarely; they never contain your rating or anything you wrote. Ratings and reviews you leave on Google Play or the App Store are handled by those stores under their own privacy policies, and we never see who rated the app from inside StudentOS.

Trust settings (whether the renewal reminder is on, and how many times the app has been started on this device, used to keep ads off during your first session) are stored only on your device. The renewal reminder is scheduled on your device from your subscription’s renewal date; nothing is sent to us or to ad networks. To keep ads out of class time, the app checks your class schedule and School hours on the device; they are never sent to ad networks.

Microphone and speech to text: StudentOS uses the microphone only after you tap the mic in a note or in Quick add, and stops when you tap Stop, after a short pause in Quick add, or when you leave the screen. Speak to type uses your device’s speech service (the one built into Android or iOS, or your web browser’s) to turn your voice into text. StudentOS asks it to work on the device when your device supports that for your language; otherwise the device’s speech service may send the audio to its provider for processing under that provider’s own privacy policy. StudentOS itself does not receive the audio and does not keep it unless you switch on Keep the recording, which saves the recording only on your device (in the Android and iPhone apps). When you keep a recording for a group session, the app first asks you to confirm that everyone agreed; for other notes, the Keep the recording switch reminds you to ask everyone before recording other people. You can delete any recording at any time.

Device-only features: Recharge (protected life blocks, the optional movement goal and movement log, break timer and breathing preferences), Get help (the campus contacts you save and the country you choose; if you do not choose one, the app reads your device region on the device), Campus (your office-hours reminder choices and the campus safety numbers you save), Money and fees (money items and the monthly budget), Study groups and Notes (groups, members, sessions, notes and kept recordings), Attendance (the marks you give each class, your attendance rules and settings), the GPA calculator (settings, per-course entries, past terms and target), Applications & tests (your tests, test dates, goals and practice scores, deadline checklists and recommendation-letter records), school calendar connections (links and the history of imported items), your rotating schedule and bell periods, School hours settings, your garden (companion) choices and streak settings, focus timer settings and the session in progress, focus sound choices, reading and text settings, the unsaved Quick add line, fill-in-the-blank note text, Match game personal bests and the Auto-read setting, tags that came with imported cards, cards made from your materials (cache), the days you reviewed flashcards (for Insights), home-screen widget data, review prompt dates, trust settings, and recent searches are stored only on your device. They are never synced to our cloud, never sent to AI features or ad networks, never sent to us, and are removed by Delete everything on this device. The one exception you control: the text of a note you open in Make flashcards is sent to AI when you tap Make cards with AI (see section 8).

Sharing: sharing is always started by you. When you share the app, a task, your plan, a course, a progress update or a flashcard deck, StudentOS builds the text or file on your device and hands it to your device's share sheet, and you choose the app and the recipient. We do not receive what you share. Shares never include task notes, instructor emails or well-being check-ins, and include grades only if you choose. Messages to a trusted adult in Get help are drafts that you send yourself; StudentOS never contacts anyone for you.

Printing: when you print (your plan, class schedule, deadlines, an email draft, a tutor conversation, flashcards, a practice exam, a note or an emergency card), StudentOS builds the page on your device and hands it to the print option you choose, such as Android printing, AirPrint, Save as PDF or your browser's print dialog. We do not receive printouts. A printout contains only what you chose to print, which can include instructor contact details or saved contacts; well-being check-ins are never printed. Paper copies and saved PDFs are outside the app, so keep them somewhere private.

Importing and exporting cards: importing cards from Quizlet, Anki or a spreadsheet happens on your device. StudentOS reads the text you paste or the file you choose and does not upload it anywhere except as normal flashcards in your account (and your cloud backup, if it is on). StudentOS never opens or reads Quizlet links. Exporting a deck as CSV or Quizlet text builds the file on your device and hands it to your share sheet or your browser's downloads; review progress is not included.

Share cards: you can turn your streak, a quiz score, your focus week or a semester summary into an image. The image is made on your device and shown to you before anything is shared. It never includes your name, school, photo or avatar; course names and grades are left out unless you turn them on for that card. StudentOS does not upload the image; it goes only where you send it.

Help icons (i) next to fields and the Help center are part of the app. Opening them collects nothing and sends nothing anywhere.

4. How we use information

We use your information to: provide StudentOS features such as planning, priorities and reminders; back up and sync your data if you turn that on; generate AI responses you ask for; apply AI usage limits and the AI age rule; verify subscriptions; show non-personalized ads on the free plan; review AI reports to improve safety; answer support requests; keep the service secure and prevent abuse; and meet legal obligations.

We do not sell your personal information. We do not use your grades, courses, tutor conversations or well-being check-ins to target ads, and we do not send that data to ad networks.

5. Legal bases (EEA, UK and similar laws)

Where the GDPR or UK GDPR applies, we rely on the following legal bases. If you told us you are under 18, or we do not know your age, we treat you as unable to give consent for ads, whatever the age of consent in your country, and only limited, non-personalized ads are shown.

6. Your rights

Depending on where you live, you may have the right to access your personal information, get a portable copy, correct it, delete it, restrict or object to some processing, and withdraw consent.

If you live in a US state with a consumer privacy law (for example California, Virginia, Colorado or Connecticut), you may have the right to know, access, correct, delete and get a portable copy of your personal information, to opt out of its sale or of sharing for targeted advertising, and not to be treated differently for using these rights. We do not sell personal information or share it for targeted advertising. Ads on the free plan are always non-personalized: we ask Google AdMob not to use your information to personalize ads. AdMob may still use device identifiers and your IP address to show, measure and protect ads. You can manage this with "Ad privacy choices" in the Privacy dashboard (where available) and your device's ad settings.

You can use most rights directly in the app: edit your profile in Settings, export everything or delete your data and account in You > Your data. For anything else, email binarydatatechnology151@gmail.com. If you never signed in with Google, include the support code shown in You > Your data so we can find your anonymous account. We may need to verify your request and will respond within the time the law requires (for example 45 days under California law). If you disagree with our answer, you can reply to appeal, and you can complain to your local data protection authority. An authorized agent may make a request for you where the law allows it.

7. Who processes your information

We use service providers that process information on our behalf under their terms with us:

Google Firebase and Google Cloud: accounts (Firebase Authentication), cloud backup and sync (Cloud Firestore), server functions (Cloud Functions) and AI processing (Gemini models on Google Cloud Vertex AI, used by default). We do not use Cloud Storage for your files.

Backup AI providers: when Google's models are unavailable or overloaded, an AI request from a user 18 or older may be processed by one of these providers, tried in this order: DeepSeek (DeepSeek models, processed in the People's Republic of China), Alibaba Cloud Model Studio (Qwen models, international service in Singapore), OpenAI (GPT models, United States) and Anthropic (Claude models, United States). Only the redacted text of that one request is sent (see section 8), and each provider handles it under its own API terms. Requests from users under 18, and every file or photo, go only to Google Cloud Vertex AI and never to a backup provider. We will name any other AI provider here before using it.

Google AdMob and Google User Messaging Platform: non-personalized ads and ad consent on the free plan.

Google Play: subscription purchases and billing.

We may also disclose information if the law requires it, to protect the safety or rights of people or StudentOS, or as part of a merger or sale of the business, in which case we will tell you before your information becomes subject to a different privacy policy.

8. How AI processing works

AI features are available only to users 18 and older for now. When you use one, the content you submit (and the details needed for that feature) is sent through our server functions to an AI provider, Google Cloud Vertex AI by default (see section 7), which generates the response. Our servers do not log the content. We do not use this content to target ads, and we do not use it to train AI models.

Tutor conversations are saved with your other StudentOS data so you can come back to them, and you can delete them. Please avoid submitting sensitive personal information, such as health or financial details, to AI features.

AI reports: if you report an AI output, we receive the reason, any note you add and up to the first 2,000 characters of that output. We use reports to improve safety and delete them after 180 days.

Redaction: before any text reaches an AI model, our server replaces email addresses, phone numbers, web links that carry access keys, US Social Security numbers and labeled student ID numbers with placeholders, and puts the originals back into the answer you see. The originals are kept only in memory for that request. Files (PDFs and photos) cannot be redacted and are sent as they are. A syllabus file or photo you scan follows the provider order in section 7; files and photos for Make cards with AI and photos of a problem go to Google Cloud Vertex AI only (see below).

Cards from your materials and tutor photos: PDFs, PowerPoint and Word files and your notes are read on your device. Nothing is sent to AI until you tap Make cards with AI, or take or choose a photo of a problem and tap to read it. Then only the text you checked, or the files or photo you chose, is sent for that one request. Files and photos go to Google Cloud Vertex AI (Gemini) only, never to backup AI providers; they are processed in memory and are not stored, cached or logged by StudentOS, and the app deletes its own temporary copy of a photo after reading it. Under Google Cloud's terms for Vertex AI, Google does not use them to train its models. Files and photos cannot be redacted, so avoid uploading pages that show your or other people's personal details.

For a photo of a problem, you see the text that was read and can correct it before anything is asked. The tutor then gives a hint first; if you ask, it shows a worked example of a similar problem, then a similar problem to try. Each request includes which of these steps you asked for and, for a problem read from a photo, the text you confirmed.

Cards you make with AI from your materials are cached on your device, encrypted, for up to 30 days so the same material does not use AI twice. That cache keeps only the cards and a title, never your text or files.

AI answer cache: to keep costs down, answers for syllabus scans, flashcard generation and cards made from pasted or extracted text are cached for 30 days. For a syllabus scan of a file or photo, only the answer (the dates and details found) is cached, under a one-way fingerprint of the file; the file itself is never stored. Cards made with AI from files or photos, and photos of a problem, are never cached. An answer is stored under a one-way fingerprint of the exact input and is reused only for identical input. The cache does not store your account ID, so it is not linked to your account.

AI cost ledger: to apply fair-use budgets, we keep a monthly record of AI usage for each account (cost, number of requests, totals per feature, cached answers and rewarded-ad views). It does not contain your content. It is deleted after about 400 days, or when you delete your account. We also keep daily totals of AI spending with no account information for about 400 days.

9. Where your information is stored

On your device: everything you add is stored in the app's storage on your device (or in your browser's storage on the web). StudentOS encrypts this storage with a key kept in your device's secure key store (the Android Keystore or iOS Keychain; in a browser, a key that web pages cannot export). Keep your device locked: anyone who can unlock your device and open the app can see your data. Android device backup is turned off for StudentOS, so this data is not copied to your Google account backup or to a new phone; use cloud backup or Export if you want a copy.

In the StudentOS cloud: cloud backup is off by default. It turns on when you switch it on in the Privacy dashboard or sign in with Google. While it is on, your profile, app settings and academic data are backed up in Google Cloud Firestore and synced to your other signed-in devices. Well-being check-ins are never stored in the cloud.

10. How long we keep information

We keep your study data until you delete it or delete your account. When you delete your account, we delete your cloud data from our active systems promptly; copies in backups are removed within up to 30 days.

Other records are deleted automatically: AI usage counters after about 2 months (62 days); rewarded-ad verification records after 90 days; rate-limit records after 2 days; AI reports after 180 days; the per-account AI cost ledger after about 400 days; cached AI answers (not linked to an account) after 30 days; daily AI spending totals (no account information) after about 400 days; daily counts of AI requests (no account information) after 35 days; and, after you delete your account, a deletion marker holding your anonymous account ID (used only to refuse late writes from that account) after 3 days. Server logs contain no content, only a one-way code for your account, and are deleted after about 30 days.

A parent's approval for AI help (section 12) is kept until it is withdrawn or the account is deleted.

Calendar links and the calendars fetched through our server are not kept on our servers; they pass through only while the request runs. Files and photos sent to AI features are not kept either.

Unlock code records: your Plus-from-codes end date is deleted with your account. The used-code records are kept so a code can never be used twice; when you delete your account, the one-way identifier of your account is removed from them. Records of canceled codes are kept for as long as the used-code records.

Purchase link records (a one-way fingerprint that links a Google Play purchase to your account) are kept until you delete your account. We may keep limited records longer where the law requires it, for example for tax or to resolve disputes. Support emails are kept as long as needed to help you and for a reasonable period afterwards.

11. Export and deletion

Export: You > Your data > Export everything creates a file with all your StudentOS data on this device, including device-only Recharge life blocks, your movement goal and movement log, campus contacts, your country choice, office-hours reminder choices, campus safety numbers, your Money items and budget, your study groups, sessions and notes, attendance marks and rules, GPA calculator settings, past terms and target, your tests, practice scores, deadline packs and recommendation letters, school calendar connections (without their private links), your rotating schedule and bell periods, School hours settings, your garden (companion) choices and streak settings, focus timer, focus sound and reading and text settings, and the other device-only items listed in section 3 (marked as device-only in the file). Recent searches, alert history and the copy of your tasks kept for home-screen widgets are not included. Kept recordings stay as audio files on the device: the export lists them by name and length, and you can share each one from its note. Server-only records (usage counters, the AI cost ledger, subscription status, purchase fingerprints and unlock code records) are listed in this policy and can be requested by email.

Delete on this device: You > Your data > Delete everything on this device removes all StudentOS data from that device, including device-only data such as life blocks, the movement goal and movement log, campus contacts, Money items and budget, study groups, notes and kept recordings, attendance marks and rules, GPA data, your tests, application checklists and letters, school calendar links and their history, the rotating schedule, School hours settings, your garden and streak settings, focus, sound and reading settings, cards cached from your materials, the Insights review-day log, widget data (placed widgets are redrawn empty), a parent's approval record, campus safety numbers, group session, office-hours, attendance and renewal reminders, recent searches and alert history. Uninstalling the app also removes on-device data, but does not delete your cloud data.

Delete account: You > Your data > Delete account permanently deletes your cloud data and your StudentOS account. A Google Play subscription must be canceled separately in Google Play.

12. Children and age groups

StudentOS is not intended for children under 13 and we do not knowingly collect personal information from them. Setup asks you to choose an age range in a neutral way and stops if the answer is under 13; no account is created and nothing entered is kept. If you believe a child under 13 has given us personal information, contact binarydatatechnology151@gmail.com and we will delete it.

We keep only an age range (13 to 17, or 18 and older) to apply age-appropriate protections: AI features are off for users under 18 for now; ads are always non-personalized; for users under 18, and when we do not know your age, ads are limited to content suitable for general audiences and every ad request is marked as coming from someone under the age of consent. For users under 18, and when we do not know your age, the task name on the lock-screen focus timer and the details on home-screen widgets are hidden by default, because anyone nearby can see those screens; you can change this in Settings.

Parent or guardian approval for AI help is switched off for now, so AI features stay 18 and older. If we switch it on, we will tell you in the app. How it works once it is on: a parent or guardian reads how the tutor works, enters their name and their relationship to the student, and agrees to these terms on the student's behalf. That declaration (name, relationship, date and the version agreed to) is saved with the student's StudentOS account on our servers, so AI help works on the student's signed-in devices, and a copy is kept on the student's device, encrypted. It is a declaration, not identity verification. It can be withdrawn at any time in Settings, Parent approval: AI help stops straight away and the record is deleted from our servers. It is also deleted when the account is deleted. The device copy is included in Export everything and removed by Delete everything on this device. AI requests from approved students aged 13 to 17 go only to Google Cloud Vertex AI, with stricter safety settings, and never to backup AI providers.

13. Well-being check-ins and health-like data

Weekly check-ins (mood and stress ratings) can be considered health-related information under some laws, such as Washington's My Health My Data Act. StudentOS keeps them only on your device: they are never sent to our servers, never synced, never sent to AI features or ad networks, and not included in Android device backups. We therefore do not collect or share them. If this ever changes, we will ask for your consent first and publish a separate consumer health data notice.

The optional daily movement goal and the minutes you log could also be seen as health-related under some laws. They are kept the same way: only on your device, never synced, never sent to AI features or ad networks, included in your export and removed by Delete everything on this device.

If you choose "Lighten my plan" after a check-in, only your daily study-hours setting changes. That setting is part of your profile and is backed up if cloud backup is on. Your check-in answers are not.

14. Schools and FERPA

StudentOS is an app you choose to use yourself. We are not your school, and your school does not control or receive your StudentOS data. Information you copy into StudentOS from your school records is your own copy.

If we partner with a school in the future, a separate written agreement with that school would govern any data the school provides, including its obligations under FERPA and similar laws.

15. International transfers

StudentOS's servers and AI processing run in Google Cloud in the United States (region us-central1). If you are in the European Economic Area, the UK or Switzerland, your information is transferred to the United States. We rely on Google's data processing terms, which include the European Commission's Standard Contractual Clauses and the UK Addendum, and, where applicable, Google's certification under the EU–US Data Privacy Framework and its UK and Swiss extensions.

If a backup AI provider handles a request (section 7), the redacted text of that request is processed in the People's Republic of China (DeepSeek), Singapore (Alibaba Cloud) or the United States (OpenAI, Anthropic). These countries may not have data protection laws equivalent to those where you live.

16. Security

We use encryption in transit (HTTPS), Google Cloud's encryption for data at rest, and access rules that limit each account to its own cloud data. When cloud backup is on, the most personal text you write (task notes and plans, tutor chat messages, weekly reflections, focus-session notes, flashcard text, grade item names, instructor contact details and office hours, and your name and school) is also encrypted on your device before it is uploaded, using a key unique to your account. In our cloud that key is stored only in encrypted form, protected by Google Cloud Key Management Service, and it is released only to your signed-in app. This means someone with access to our database alone cannot read that text. Other information you back up (such as task titles, due dates, course names and scores) is protected by encryption in transit and at rest but not by this extra key. Text you send to an AI feature is processed by our AI provider so it can answer, and is not covered by this extra encryption. When you delete your account, we delete your key along with your data; backup copies are removed within up to 30 days. When our server reads a calendar link for the web app, it only fetches public https addresses and refuses private network addresses. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires.

17. Changes to this policy

We will update this policy when our practices change and show the date at the top. If a change is material, we will tell you in the app before it takes effect and, where required, ask for your consent.

18. Contact

Questions or requests about your privacy? Email binarydatatechnology151@gmail.com or write to us at 33 Gates Ave, Springfield, MA 01118, United States.