Privacy Policy

Last updated: September 1, 2026

1. Who we are

Studium is operated by [Operator name and address to be added — see Impressum]. We are responsible for the processing of your personal data as described in this policy.

2. What data we collect

We collect only the data necessary to provide the service:

• Account data: your email address and first name, provided at registration.
• Usage data: the content you create within Studium (habits, tasks, notes, links, reviews). This data is stored to provide the service and is not used for any other purpose.
• Technical data: standard server log data (IP addresses, request timestamps) retained for security purposes.
• Timezone: your browser timezone, collected at registration to support time-sensitive features.

We do not collect behavioral analytics, advertising identifiers, or any tracking data beyond what is necessary for the service to function.

3. Legal basis for processing (GDPR)

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Performance of a contract (Art. 6(1)(b)): Account and usage data are processed to deliver the service you have registered for.
• Legitimate interest (Art. 6(1)(f)): Server log data is retained for security monitoring purposes.

4. How we use your data

Your data is used exclusively to provide the Studium service. We do not sell, share, or monetize your personal data. We do not use your data for advertising.

5. Data storage and security

Your data is stored on servers located in Nuremberg, Germany. We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction.

Authentication is performed via magic links sent to your email address. We do not store passwords.

6. Data retention

We retain your data for as long as your account is active. If you request deletion of your account, your data will be permanently removed from our systems within 30 days.

7. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access (Art. 15): you may request a copy of the data we hold about you.
• Right to rectification (Art. 16): you may request correction of inaccurate data.
• Right to erasure (Art. 17): you may request deletion of your data.
• Right to data portability (Art. 20): you may request your data in a machine-readable format.
• Right to object (Art. 21): you may object to processing under legitimate interest.

To exercise any of these rights, contact us at contact@studium.life.

8. Cookies and local storage

Studium uses a strictly necessary session cookie to keep you signed in. We also use browser local storage to store preferences such as dark mode and onboarding completion; this data stays only on your device and is not transmitted to our servers.

We do not use advertising cookies or third-party tracking cookies.

9. Third-party services

Studium uses the following third-party services to deliver the platform:

• Mailgun (EU region), for sending authentication magic links and other transactional email.
• [Hosting provider — to be specified], for server infrastructure located in Nuremberg, Germany.
• Sentry, for error tracking and exception monitoring so we can detect and fix bugs.
• Amazon Web Services (AWS S3), for storing uploaded and generated files, such as scanned note images and generated audio.
• OpenAI, for generating article summaries and for generating Text-to-Speech audio from saved links.
• Google Cloud, for generating Text-to-Speech audio from saved links and for image text recognition (OCR) when scanning Kindle highlights.
• Stripe, for processing payments and managing subscriptions on the paid plan.

Each provider has its own privacy policy governing their use of data.

10. Contact and complaints

For privacy-related questions or requests, contact contact@studium.life.

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence.