Privacy Policy — Study Lock

Last updated: February 10, 2026

Study Lock ("we," "our," or "us") operates the Study Lock mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. By using Study Lock, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

When you use Study Lock, you may voluntarily provide the following information during onboarding and app usage:

  • First name — used to personalize your experience within the App.

  • Age range — used to tailor content and calculate usage statistics. We collect an age bracket (e.g., "18–24"), not your exact date of birth.

  • Study preferences — including daily study time, desired study goals, grade targets, productivity peak time, commitment level, and identified obstacles. These are used to build your personalized study plan.

  • Flashcard content — text, images, and documents (photos, PDFs, pasted text) you upload or create within the App to generate study materials.

1.2 Information Collected Automatically

  • Screen Time data — When you grant permission via Apple's Screen Time API (FamilyControls framework), the App accesses your app usage data solely to enable the app-blocking feature. This data is processed entirely on your device by Apple's framework and is never transmitted to our servers.

  • Subscription status — We use RevenueCat, a third-party service, to manage subscriptions and in-app purchases. RevenueCat may collect an anonymous app user ID, transaction data, and device identifiers to process purchases. See RevenueCat's Privacy Policy.

  • Device information — We may collect basic device information (device model, operating system version) for troubleshooting and compatibility purposes.

1.3 Information Processed by Third-Party Services

  • OpenAI API — When you create flashcards or quizzes, the text content you provide (from photos, PDFs, or pasted text) is sent to OpenAI's API to generate study materials. This data is processed according to OpenAI's API Data Usage Policy. OpenAI does not use API inputs to train their models.

  • RevenueCat — Manages subscription status and purchase validation. See RevenueCat's Privacy Policy.

  • Apple StoreKit / App Store — Processes all payment transactions. We do not collect or store any payment information (credit card numbers, billing addresses, etc.).

1.4 Information We Do NOT Collect

  • We do not collect your precise location.

  • We do not use advertising trackers or identifiers (no IDFA, no ATT prompt).

  • We do not collect health or biometric data.

  • We do not sell your personal data to third parties.

2. How We Use Your Information

We use the information we collect to:

  • Personalize your experience — Display your name, tailor study plans, and show relevant statistics.

  • Provide core functionality — Block distracting apps during study sessions (via Apple's Screen Time API), generate flashcards and quizzes (via OpenAI), and track your study streaks and statistics.

  • Process subscriptions — Manage free trials, subscriptions, and restore purchases through RevenueCat and Apple StoreKit.

  • Send notifications — If you grant permission, we send study reminders and motivational nudges. You can disable notifications at any time in iOS Settings.

  • Improve the App — Understand usage patterns to fix bugs and improve features. We do not use third-party analytics SDKs.

3. Data Storage and Security

  • On-device storage — Your personal data (name, preferences, study content, statistics) is stored locally on your device using Apple's SwiftData/UserDefaults frameworks. This data is protected by your device's built-in encryption.

  • No cloud database — We do not operate a server-side database that stores your personal information. Your study data lives on your device.

  • Third-party processing — Content sent to OpenAI for flashcard/quiz generation is transmitted over encrypted HTTPS connections. OpenAI processes this data transiently and does not retain API inputs.

  • RevenueCat — Subscription data is stored on RevenueCat's secure servers. See their security practices at revenuecat.com/privacy.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

5. Children's Privacy

Study Lock is suitable for users aged 12 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/EEA) without verifiable parental consent.

  • During onboarding, users self-report their age range.

  • If we become aware that we have collected data from a child under the applicable age without proper consent, we will take steps to delete that information promptly.

  • The Screen Time API features are designed to be used with parental awareness when used by minors.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the email below.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

🇪🇺 European Economic Area (GDPR)

  • Access — Request a copy of your personal data.

  • Rectification — Request correction of inaccurate data.

  • Erasure — Request deletion of your data ("right to be forgotten").

  • Portability — Request your data in a structured, machine-readable format.

  • Restriction — Request limitation of processing.

  • Objection — Object to processing based on legitimate interests.

  • Withdraw consent — Withdraw consent at any time without affecting prior processing.

🇺🇸 California (CCPA/CPRA)

  • Right to Know — Request disclosure of what personal information we collect and how it is used.

  • Right to Delete — Request deletion of your personal information.

  • Right to Opt-Out — We do not sell personal information; therefore, no opt-out is required.

  • Non-Discrimination — We will not discriminate against you for exercising your rights.

🇨🇭 Switzerland (nFADP)

  • You have the right to information, rectification, erasure, and data portability under the Swiss Federal Act on Data Protection.

To exercise any of these rights, since all your data is stored locally on your device, you can:

  1. Delete the app — This removes all locally stored data.

  1. Reset onboarding — Clear your profile data from within the App's settings.

  1. Contact us — Email us (see Section 10) for any data-related requests.

7. Data Retention

  • On-device data is retained as long as the App is installed on your device. Uninstalling the App deletes all local data.

  • RevenueCat retains subscription-related data according to their retention policy.

  • OpenAI does not retain API input data beyond the duration of the API request (per their zero-retention API policy).

8. Third-Party Links

The App may contain links to third-party websites or services (e.g., Privacy Policy, Terms of Service). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Updating the "Last updated" date at the top of this policy.

  • Displaying an in-app notification if the changes are significant.

Your continued use of the App after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: cooksyugc@gmail.com

11. Apple App Store Compliance

This App complies with Apple's App Store Review Guidelines, including:

  • Section 5.1.1 — Data Collection and Storage: All data collection is disclosed and consent is obtained.

  • Section 5.1.2 — Data Use and Sharing: Data is used only for purposes disclosed in this policy.

  • Section 3.1.2 — Subscriptions: Subscription terms, pricing, and cancellation policies are clearly presented.

  • App Tracking Transparency — This App does not track users across apps and websites owned by other companies. No ATT prompt is required.

This privacy policy was last reviewed and updated on February 10, 2026.

Create a free website with Framer, the website builder loved by startups, designers and agencies.