Privacy Notice

Version 2026-10-05

This notice explains what personal data Studentlytica AI collects when you use the app at studentlytica.ai, why, who else receives it, how long it is kept and what you can do about it. It is written to be read in full; the important points are in the first two sections.

1. The short version

We use your data to run your account and the learning tools you choose. We do not sell it or show you advertising.
When you use an AI feature, only the material you selected for that task and your question or answer go to our AI provider, OpenAI. Your name, email address and account details are never sent.
Your materials and saved work are not used to train AI models.
You can delete materials, saved work or your whole account in the app at any time.
We keep payment records after you leave, because the law requires financial records.

2. Who we are and how to reach us

Studentlytica AI is operated by Zongovation AI Lab Limited (company registration number CS200851224), 14 Alhaji Issaka Jajah Link, Maamobi, Accra, Ghana. We decide how your personal data is used (the "data controller").

Privacy questions and requests: info@studentlytica.ai. Our registration number with the Data Protection Commission of Ghana (Data Protection Act, 2012, Act 843) will be added to this notice.

3. Adults only

Studentlytica AI is for people aged 18 or over. You confirm this when you set up your account. We do not knowingly collect data from children; if you believe a child has an account, contact us and we will delete it.

4. What we collect

Account: your email address and password. Passwords are stored by our sign-in provider as a one-way hash; we never see them.
Profile: display name, education level, field of study (optional) and time zone; a profile picture, if you add one (only you can see it); your confirmation that you are 18 or over; which versions of these terms you accepted, and when.
Your learning content: files and text you add (PDF, Word, PowerPoint, text and Markdown), the text we extract from them and the search index built from it; your Tutor questions and the answers; study sets, quiz and practice answers and the feedback on them; flashcard reviews; topic maps; study plans; research projects, including your search terms, the papers you add and their analyses.
Learning progress: what we infer from your practice (for example, topics you find difficult), used only to choose your next practice. You can see and reset it in the app.
Usage: how many actions you have used against your plan's monthly allowances, and the AI cost of each task.
Payments: the plan, amount, date, payment channel (for example Mobile Money), Paystack's reference and the result. We never receive your card number, CVV or Mobile Money PIN.
Technical records: security and error logs, which record what failed and when, but not the content of your materials, questions or answers. A bot check on the sign-up and sign-in pages (Cloudflare Turnstile) looks at your browser and connection to tell people from automated abuse.
Waiting list: if you joined the launch waiting list, the email address you gave, used only to tell you about the launch.
Messages you send us: if you use the Contact page, the topic, your message, the email address you give and your name (optional), used only to read and answer your message.

We use only the cookies needed to keep you signed in and to run the bot check. We do not use advertising or analytics cookies.

5. Why we use it

To provide the service you asked for (our agreement with you): your account, the learning tools, saving your work, your plan and payments.
To keep the service safe and working (our legitimate interests): preventing abuse and fraud, enforcing fair-use limits, fixing errors and controlling costs.
To meet legal duties: keeping financial records and answering lawful requests.
With your consent where we ask for it. You can withdraw consent at any time; this does not affect what was done before.

We do not sell your data, use it for advertising, or use your materials, questions or answers to train AI models.

6. How AI features handle your data

When you ask the Tutor a question, generate study material, have an answer marked or analyse a paper, we send OpenAI the passages selected for that task and your question or answer. We never send your name, email address, account ID, profile or profile picture.
OpenAI does not use this data to train its models. Under its standard terms it may keep request content for up to 30 days to detect abuse, and then deletes it. We have asked OpenAI to keep nothing ("zero data retention") and will update this notice when that is confirmed.
Research searches send your search terms, without your identity, to OpenAlex, a public index of scholarly papers.
AI answers can be wrong. Tutor answers link to the passages they rely on so you can check them; see the Terms of Use.

These providers process data for us, only to run the service, under their own security and data protection terms:

Supabase: database, sign-in and private file storage. Data is stored in London, United Kingdom.
OpenAI (United States): AI features, as described in section 6.
OpenAlex / OurResearch (United States): research paper search, search terms only.
Paystack: payments. Paystack receives your email address, the amount and our reference, and collects your payment details directly on its own secure page.
Cloudflare: the bot check on sign-up and sign-in pages.
DigitalOcean (servers in London, United Kingdom): runs the app's server, which processes your requests but does not store your data.
Vercel: serves the app's web pages to your browser.
Resend: sends sign-in and account emails, and delivers Contact page messages to our team. Resend receives the email addresses and the email.

Some of these providers are outside Ghana. We use providers that commit to protecting personal data and we send each only what it needs. We share data with authorities only when the law requires it.

8. How long we keep it

Account, profile and learning content: until you delete them or your account.
A profile picture you replace or remove: deleted straight away.
Uploads you started but did not finish: removed within 24 hours.
Live progress updates for running tasks: 7 days. Temporary working data of AI tasks: up to 7 days after the task ends.
Security and error logs: 30 days.
Payment records: 5 years after the payment.
Usage and cost counts (no content, and nothing that names you once your account is deleted): 2 years.
Waiting-list email addresses: until the launch announcement, or until you ask us to remove yours.
Contact page messages: erased from our database as soon as they are emailed to our team (at most 30 days if sending fails). Our team keeps the email only as long as needed to deal with your message.
Backups: database backups made by our database host, Supabase, are kept for no more than 30 days. Uploaded files are not part of them. Backups are never used to bring back an account or material you deleted.

9. Deleting your data

You can delete any material or saved work from its page. To delete your account, go to Account, then Delete account, and enter your password. You lose access straight away; your materials, saved work and profile are removed, usually within minutes and at most within 7 days, and then your sign-in is removed. We keep only payment records and usage counts that no longer name you.

10. Your rights

Under Ghana's Data Protection Act you can ask us to:

tell you what personal data we hold about you and give you a copy;
correct data that is wrong (you can edit your profile in the app);
delete your data (you can do this in the app);
stop or limit a use of your data that you object to.

Write to info@studentlytica.ai. We answer within 30 days. If you are not satisfied, you can complain to the Data Protection Commission of Ghana.

11. Security

Connections are encrypted. Your files are kept in private storage that only you can reach through short-lived links. Each part of the system has only the access it needs, and logs leave out your content. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Commission as the law requires.

12. Changes to this notice

When we change this notice in a way that matters, we will show you the new version and ask you to accept it before you continue. Earlier versions stay available on request. See also the Terms of Use.