Privacy

Who we are

Studdle is run by Marton Roux, Entrepreneur individuel (EI), SIRET 927 772 541 00011, 2 chemin des Derons, 30870 Clarensac, France. We are the data controller for everything described here. Contact: support@studdle.fr.

We have no data protection officer. If you have a question about your data, write to support@studdle.fr and a person will answer.

What this covers

This notice applies to the Studdle app on iOS, Android and the web, and to this site. It does not cover other sites that these link to; they have their own notices.

What we collect

Account. Your username, display name, email address, a hash of your password (never the password itself), your date of birth, your profile picture, your language, and which version of the Terms you accepted and when.

Study content. The subjects, chapters, flashcards, quizzes and exams you create, and the images you upload, such as photos of your notes, a textbook page or a past paper.

Pebble. Your conversations with Pebble, and Pebble’s memory of you, which helps it follow what you are studying. You can turn the memory off and clear it in Settings.

Learning activity. Your reviews, training sessions, quiz and duel results, streaks, achievements, daily goals and mastery of each topic.

Social. Your friends, the people you block, the collaborators on your subjects, the subjects you subscribe to, duel invites, and any report you file or that names you.

Billing. A customer identifier from Stripe, our payment processor in Ireland and the United States, and the state of your subscription. Card numbers never reach us: Stripe’s own pages collect and store them.

Device. A push-notification token if you turn notifications on, a signal each time the app is open, and error reports when something crashes.

Technical logs. Like any server, ours logs each request: the IP address it came from, the time, the request itself and, if you are signed in, your account id. It does not log the browser or app identifier. We use the logs to limit abuse and diagnose faults.

Why, and on what basis

Contract. We process most of what is listed above because we cannot run your account, your study content, Pebble or your subscription without it.

Legitimate interest. We keep technical logs and error reports to prevent abuse and fix faults, and we compute product statistics from your own activity so we can see what works. We weigh this against your privacy and keep it to what is needed.

E-mails about your study. We send a weekly recap and, if you stop studying, a reminder after 14 days and another after 30 days. The purpose is to keep you on track with your study, and the basis is our legitimate interest. They are on by default, and you can switch them off in Settings (Notifications, Email updates) or with the link in each e-mail. E-mails your account needs, such as address verification and password reset, are sent regardless.

Consent. Push notifications (the system asks you), Pebble’s memory, the setting that lets the Studdle team read your edits to AI-made cards, and the pre-launch waitlist. The first three are off until you turn them on, and the waitlist holds your address only if you sign up. To withdraw your consent, switch the setting off or email support@studdle.fr.

AI processing

When you use Pebble, we send what is needed to answer: the content you ask about, the images you ask it to read, the cards being generated or checked, and Pebble’s memory if you have it turned on.

This goes through OpenRouter, a company in the United States, to the provider that hosts the model named in the request. Today the models come from DeepSeek, OpenAI, Anthropic and Zhipu AI (GLM); the list may change.

Which hosting provider answers, and therefore which country your request is processed in, depends on the model. It may be outside the European Union, including the United States and, for some models, China. These transfers rest on the standard contractual clauses in OpenRouter’s terms.

Pebble can also search the web. When it does, the only thing sent to Serper, our web search provider, is a short search query (at most 200 characters) that Pebble writes in its own words, with a language and region setting that follows your app language. Your name, email address, account details and conversation are not sent.

Studdle does not use your content to train models, and chooses models whose providers state that they do not train on API traffic. We cannot audit every provider, so we cannot promise more than that.

Pebble is an AI, and its answers can be wrong. Check anything that matters before you rely on it.

Who else sees it

These companies process your data on our behalf, and only to do the job described.

Hetzner Online GmbH hosts our servers and the images you upload, in Finland.

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States, serves this site and the web app. It sees the IP address of each visitor. The transfer is covered by the EU-US Data Privacy Framework, under which Cloudflare is certified, and by standard contractual clauses.

Cloudflare R2, also run by Cloudflare, Inc. in the United States, keeps an encrypted backup of the files you upload. The transfer is covered by the same framework and clauses.

Neon runs our database, in London, United Kingdom. The United Kingdom is covered by a European Commission adequacy decision. Neon’s support staff in the United States can access the database when they help us, under standard contractual clauses.

Stripe handles payments, in Ireland and the United States. The transfer to the United States is covered by standard contractual clauses.

OpenRouter, in the United States, routes Pebble requests to the AI providers described above, under the standard contractual clauses in its terms.

Serper (serper.dev) runs the web search Pebble uses, as described above. Serper states that any transfer of data rests on an adequacy decision or standard contractual clauses.

Resend sends our emails, from the United States, under standard contractual clauses.

Google Firebase Cloud Messaging delivers push notifications, in the European Union and the United States, under standard contractual clauses.

Other Studdle users see only what you choose to show: your name, handle and picture, your public subjects, your duel results, and your activity in subjects shared with them.

We never sell your data, and there is no advertising in Studdle.

How long we keep it

Your account data stays until you delete your account. After that it is kept for 30 days, during which support can restore it if you ask, and then it is erased, along with the images you uploaded.

Backups keep a deleted file a little longer. The database, hosted by Neon, can be restored to any point in the last 6 hours. The files you upload are backed up every night, encrypted, to Cloudflare R2, where we keep 7 daily and 4 weekly copies, so a deleted file leaves the backups within 5 weeks.

Server logs hold the IP address, the time, the request and, if you were signed in, your account id. They are rotated by size and cleared at every deployment; we do not promise a fixed number of days. Error reports are kept for 30 days. Records of your AI requests are kept as long as your account exists. App session signals and the edit history of your flashcards are deleted after 180 days.

The payment notices we receive from Stripe are stored as billing events. The personal data in them (name, email address, postal address, phone number, card details and other customer details) is removed when your account is erased, and from every event older than 90 days. Stripe keeps payment and invoice records itself, as accounting law requires, for ten years (French Code de commerce, article L123-22).

Delivery, bounce and complaint notices from our email provider are deleted after 30 days. We keep an address and the reason it was suppressed (a bounce or a spam complaint) so that we do not email it again, including after you delete your account.

Your rights

You can see your data and take a copy of it: in the app, go to Settings, About & legal, Download my data. You get a ZIP file that holds your account data, your content (as JSON) and the files you uploaded. It leaves out sign-in tokens, server logs, scheduling data, AI drafts you have not reviewed and other technical data. You can correct your display name and picture in Settings; your username is fixed once you sign up. You can delete your account in Settings, Account, Delete account.

How to delete your account, what is erased and what is kept: Delete your account

You can ask us to restrict the processing of your data while a question about it is being settled (GDPR, article 18). You can also tell us what to do with your data after your death (French Data Protection Act, article 85); write to support@studdle.fr.

To change your email address, write to support@studdle.fr; it cannot be edited in Settings.

You can object to how we use your data, or withdraw a consent, with the settings described above or by writing to support@studdle.fr. We answer within one month.

If you think we have handled your data badly, you can complain to the French data protection authority, the CNIL, at cnil.fr.

Age

Studdle is for people aged 15 or older. We ask for your date of birth when you sign up and do not let in anyone who has not yet turned 15. We keep the date with your account. If we find an account that belongs to someone under 15, we delete it.

Security

Passwords are stored hashed, and every connection uses TLS. We can end a session from the server at any time. On your phone, sign-in tokens live in the operating system’s secure store. If a breach puts your data at risk, we tell the CNIL within 72 hours where the law requires it, and we tell you.

The waitlist

If you joined the pre-launch waitlist on this site, we hold your email address and which of the two forms you used, to send a confirmation and one invite when your turn comes. This site sets no cookies and runs no analytics. We hold your email address on the basis of your consent, which you give by submitting the form; you can withdraw it at any time by writing to support@studdle.fr. We delete waitlist addresses once the invites are sent, or sooner if you ask.

Changes

When we change this notice, we update the date at the top. If the change matters to you, we also email everyone with an account.