Privacy Policy

Privacy Policy of MyStudyLife

MyStudyLife is committed to protecting the privacy and personal information of the students, parents, families, schools and other people who use our services.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, the choices available to you, and the rights you may have under applicable data protection law.

It applies to MyStudyLife’s websites, mobile applications, web application, student planning tools, subscription services, school services, Family Connect features, artificial intelligence features including Scout and AI-assisted schedule tools, and other services that link to this Privacy Policy (together, the “Services”).

You should read this Privacy Policy together with our Terms of Service and, where applicable, our Cookie Policy.

1. Who We Are

The Data Controller is:

  • My Study Life Ltd
  • Company number: 09070277
  • Registered in England and Wales
  • Registered office: 40 The Glades, Aldridge, Walsall, West Midlands, WS9 8RN, United Kingdom
  • Email: support@mystudylife.com

In this Privacy Policy, “MyStudyLife”, “we”, “us” and “our” refer to My Study Life Ltd.

For individual users, we generally act as the Data Controller, meaning that we determine why and how personal information is processed.

Where MyStudyLife is provided through a school, school district, local authority, college, university or other organisation, we may instead process certain personal information as a Data Processor on behalf of that organisation. In those circumstances, the organisation is generally responsible for determining the purposes for which that information is processed, and our processing is governed by the applicable agreement or Data Processing Agreement.

We may still act as an independent Data Controller for certain information connected with school accounts where necessary for purposes such as account administration, security, billing, legal compliance, fraud prevention and operating our business.

2. Privacy at a Glance

Depending on how you use MyStudyLife, we may process:

  • account information, such as your name and email address;

  • timetable, class, homework, assignment, exam, grade and study-planning information;

  • information you enter into Scout or other AI Features;

  • timetable images, documents or other content you choose to upload;

  • information connected with Family Connect;

  • information received from a school, parent, guardian or connected service;

  • subscription and transaction information;

  • support communications;

  • device, diagnostic and Usage Data;

  • cookie, analytics and similar technology data; and

  • other information you choose to provide through the Services.

We use personal information primarily to:

  • create and operate MyStudyLife accounts;

  • provide schedules, reminders, tasks, exams, grades and study-planning functionality;

  • provide Scout and other AI Features;

  • provide Family Connect;

  • synchronise data between devices and connected services;

  • provide school and organisational services;

  • process subscriptions and manage entitlements;

  • provide support;

  • communicate with users;

  • secure, monitor and improve the Services;

  • understand how the Services are used;

  • prevent fraud, spam, abuse and security incidents; and

  • comply with legal obligations.

We do not use personal User Content to train third-party providers’ general-purpose AI models where our contractual arrangements with those providers prohibit that use.

3. The Personal Information We Collect

The information we collect depends on which Services you use and how you interact with MyStudyLife.

3.1 Account and identity information

When you create or manage a MyStudyLife account, we may collect:

  • first name;

  • last name;

  • email address;

  • account identifier;

  • authentication information;

  • password or authentication credentials in protected form;

  • account preferences;

  • language;

  • country or region;

  • subscription status; and

  • information about the type of account you use.

Where you sign in through a third-party authentication provider such as Google or Facebook, we may receive information made available by that provider in accordance with your settings and authorisation.

4. Academic, Planning and User Content

MyStudyLife is designed to organise academic life. You may therefore provide information such as:

  • schools or educational institutions;

  • subjects and classes;

  • teachers or room information where entered by you;

  • timetable information;

  • terms, semesters and academic years;

  • holidays;

  • tasks and homework;

  • assignments;

  • deadlines;

  • exams;

  • grades and results;

  • revision plans;

  • study sessions;

  • focus sessions;

  • extracurricular activities;

  • reminders;

  • calendar information;

  • notes;

  • subtasks;

  • files;

  • images;

  • timetable photographs;

  • other educational or organisational information; and

  • other content you choose to add to the Services.

We refer to information you choose to add to your account as “User Content.”

You remain responsible for the User Content you provide and for ensuring that you have the right to provide any personal information relating to another person.

5. Artificial Intelligence Features

MyStudyLife provides artificial intelligence and machine-learning powered functionality, which may include Scout, AI-assisted study planning, timetable scanning, schedule extraction, summarisation, explanation, classification and similar functionality (“AI Features”).

5.1 Information processed by AI Features

When you use an AI Feature, we may process information you provide directly and information from your MyStudyLife account that is reasonably necessary to respond to your request.

Depending on the feature, this may include:

  • prompts;

  • questions;

  • instructions;

  • messages;

  • conversation history;

  • classes;

  • subjects;

  • tasks;

  • assignments;

  • deadlines;

  • exams;

  • revision information;

  • timetable information;

  • calendar information;

  • notes;

  • files;

  • screenshots;

  • timetable photographs or other images;

  • other User Content relevant to your request;

  • information about actions you ask the AI Feature to perform;

  • feedback you provide about an AI response; and

  • technical and Usage Data relating to your interaction with the feature.

We refer to information provided or made available to an AI Feature as “AI Input Data.”

AI Features may generate responses, suggestions, schedules, explanations, summaries, classifications, extracted information, study plans or other content (“AI Output”).

5.2 Why we process AI data

We process AI Input Data and AI Output to:

  • respond to your request;

  • provide Scout and other AI functionality;

  • understand your timetable, tasks or academic schedule where requested;

  • create or suggest study and revision plans;

  • create, update or organise information where you ask the AI Feature to do so;

  • maintain conversation context where applicable;

  • operate and secure AI Features;

  • prevent misuse;

  • detect technical problems;

  • investigate errors;

  • evaluate the reliability and quality of AI Features; and

  • improve the safety and performance of MyStudyLife.

5.3 AI model training

MyStudyLife does not use personal User Content to train third-party providers’ general-purpose artificial intelligence models where our contractual arrangements prohibit such use.

We contract with our AI providers on terms intended to ensure that AI Input Data submitted through MyStudyLife is processed to provide the relevant AI functionality and is not used by the provider to train its general-purpose AI models.

We may use limited information relating to AI interactions where reasonably necessary to:

  • identify errors;

  • investigate abuse or security incidents;

  • assess whether a feature is working correctly;

  • evaluate safety and reliability; or

  • improve the operation of MyStudyLife.

Where possible and appropriate, we use aggregated, de-identified or minimised information for these purposes.

If we materially change how personal User Content is used in connection with AI training, we will update this Privacy Policy and provide any additional notice or obtain any consent required by applicable law.

5.4 Human access to AI interactions

Authorised MyStudyLife personnel may access AI Input Data or AI Output only where reasonably necessary for purposes such as:

  • responding to a support request;

  • investigating a technical issue;

  • investigating suspected fraud, abuse or misuse;

  • maintaining the security of the Services;

  • assessing safety or reliability;

  • complying with legal obligations; or

  • improving the operation of an AI Feature.

Access is limited to personnel who require it for their role and is subject to appropriate security and confidentiality controls.

5.5 Sensitive information and AI Features

AI Features are not designed for Users to submit highly sensitive information.

You should not enter or upload:

  • passwords or authentication credentials;

  • payment card information;

  • government identification numbers;

  • confidential information belonging to another person;

  • medical records;

  • highly sensitive health information; or

  • other special-category or highly sensitive personal information

unless MyStudyLife expressly requests that information for a particular feature and explains why it is required.

If a User voluntarily includes such information in an AI request, it may technically be processed as part of responding to that request.

We do not seek to use information submitted incidentally through AI Features to make unrelated sensitive inferences about Users.

5.6 Automated decisions

Scout and MyStudyLife’s other AI Features are designed to assist Users with planning, organisation and educational productivity.

We do not currently use AI Features to make solely automated decisions about Users that produce legal or similarly significant effects.

We may use automated systems to detect spam, abuse, security threats, fraudulent behaviour or potential violations of our Terms. Where applicable law requires human review or other safeguards in connection with a significant automated decision, we will provide those safeguards.

5.7 AI accuracy

AI-generated information may sometimes be incorrect, incomplete, misleading or unsuitable.

Users should review AI Output before relying upon it or using it to make changes to important academic information.

More information about appropriate use of AI Features is available in our Terms of Service.

5.8 Controlling AI Features

Where the functionality is available, individual Users may disable or opt out of AI Features through their MyStudyLife settings.

For school or organisational accounts, administrators may be able to enable or disable certain AI Features for their users.

6. Family Connect

MyStudyLife may provide features that allow parents, guardians or other authorised family members to connect with a student’s account.

If Family Connect is used, we may process:

  • the identities and contact details of the people being connected;

  • invitations and connection status;

  • information required to verify or administer the connection;

  • a student’s timetable;

  • classes;

  • tasks and assignments;

  • exams;

  • deadlines;

  • grades or progress information where the feature supports this;

  • reminders or alerts;

  • information added by a connected family member; and

  • activity necessary to operate the Family Connect relationship.

Depending on the functionality available, an authorised connected family member may be able to view certain information from a student’s account, receive alerts or add or update information.

Information shared through Family Connect is made available as part of the functionality of the connection.

Users should only connect accounts with people whom they are authorised to connect with.

7. Schools & Organisational Accounts

A school, school district, local authority, college, university or other organisation may provide or manage access to MyStudyLife.

In these circumstances, we may receive information from that organisation such as:

  • student identifiers;

  • names;

  • email addresses;

  • classes;

  • school information;

  • academic calendars;

  • term dates;

  • timetable information;

  • group or year information;

  • other information necessary to provide the contracted Services.

Where the school or organisation determines the purposes for which this information is used, it generally acts as Data Controller and MyStudyLife acts as its Data Processor.

Our use of this information is then governed by our agreement and, where applicable, Data Processing Agreement with that organisation.

If you use MyStudyLife through a school and have questions about how the school uses your personal information, you may also wish to contact the school directly.

8. Children & Young People

MyStudyLife is primarily intended for Users aged 16 and over.

A User must be at least 16 years old to create and use an account independently, or older where the laws of the User’s country require a higher age for independent use of online services.

We do not knowingly market MyStudyLife directly to children under 16.

In certain circumstances, a younger User may access MyStudyLife through or with the involvement of a school, parent, guardian or other authorised organisation where that use is lawful and any required consent, authorisation, notice or other protection has been put in place.

Schools, parents, guardians and organisations should not enable a User who is below the applicable age to use MyStudyLife unless they have determined that doing so is lawful.

Where we process children’s personal information, we take account of the additional protections that apply to children and young people. This includes appropriate consideration of:

  • data minimisation;

  • privacy by default;

  • age-appropriate transparency;

  • appropriate security;

  • profiling and automated decision-making;

  • the use of children’s information for marketing;

  • appropriate parental or school involvement where required; and

  • the best interests and rights of the child.

Where United States Children’s Online Privacy Protection Act (COPPA) requirements apply, we will obtain appropriate parental consent or rely on a school’s authorisation to the extent permitted by COPPA.

Where a school is permitted to provide consent on behalf of a parent in the educational context, information collected on that basis will be handled for the relevant educational purpose and in accordance with applicable law.

If we become aware that personal information relating to a child has been collected in circumstances where the required consent, authority or lawful basis was not present, we may suspend or close the relevant account and delete the information, subject to our legal obligations.

Parents, guardians and eligible Users may contact us at support@mystudylife.com with questions about children’s information.

9. Calendar, School and Third-Party Integrations

MyStudyLife may allow Users to connect calendars, educational platforms or other third-party services.

If you choose to connect a service, we may receive or transmit information necessary to provide the integration, such as:

  • calendar events;

  • classes;

  • assignments;

  • due dates;

  • examinations;

  • timetable information;

  • identifiers;

  • authorisation tokens;

  • account information; and

  • synchronisation status.

We process this information to provide the integration you have requested.

The third-party provider may process information independently under its own privacy policy. We recommend reviewing the privacy information of any service you connect to MyStudyLife.

You may be able to disconnect an integration through MyStudyLife or the relevant third-party service.

10. Subscription & Transaction Information

Some MyStudyLife Services require payment.

If you purchase a subscription through an app store, payment provider or another third-party platform, that provider may collect your payment details directly.

Depending on how you purchase, we may receive information such as:

  • subscription type;

  • product purchased;

  • transaction identifier;

  • payment status;

  • renewal status;

  • trial status;

  • cancellation status;

  • currency;

  • country or region;

  • subscription start and expiry dates; and

  • limited billing or transaction information.

We generally do not need to receive your complete payment card details when payment is processed directly by a third-party payment provider.

Payment providers and app stores may process information independently under their own privacy policies and terms.

11. Support & Communications

When you contact us for support or otherwise communicate with MyStudyLife, we may collect:

  • your name;

  • email address;

  • User or account identifier;

  • information contained in your message;

  • screenshots or files you provide;

  • diagnostic information;

  • device information;

  • correspondence history; and

  • other information reasonably necessary to investigate your request.

We use this information to respond to you, resolve problems and improve our Services.

12. Usage, Device & Technical Information

When you use MyStudyLife, certain information may be collected automatically.

This may include:

  • IP address;

  • device type;

  • device identifiers;

  • operating system;

  • browser type;

  • application version;

  • language;

  • approximate geographic region derived from technical information;

  • date and time of requests;

  • pages or screens viewed;

  • feature interactions;

  • session information;

  • referring URLs;

  • error information;

  • crash information;

  • diagnostic logs;

  • network information;

  • system activity; and

  • other Usage Data.

We use this information to operate, secure, maintain, analyse and improve MyStudyLife.

13. Unique Device Identification

Our websites and Services may use cookies, SDKs, pixels, local storage and similar technologies.

These technologies may be used for:

  • authentication;

  • security;

  • remembering settings;

  • maintaining sessions;

  • providing requested functionality;

  • measuring usage;

  • analytics;

  • diagnosing problems;

  • Understanding website performance; and

  • Other purposes described in our Cookie Policy.

Where required by applicable law, we obtain consent before using non-essential cookies or similar tracking technologies.

Users can find additional information and available controls in our Cookie Policy and, where available, our cookie settings.

15. How We Use Personal Information

We use personal information where necessary to:

Provide the Services

This includes:

  • registering and authenticating Users;

  • maintaining accounts;

  • storing schedules;

  • synchronising information across devices;

  • managing tasks, exams, grades and reminders;

  • providing notifications;

  • providing Family Connect;

  • providing school services;

  • operating integrations;

  • providing subscriptions; and

  • providing AI Features.

Communicate with Users

This includes:

  • service messages;

  • account notifications;

  • security notices;

  • product announcements;

  • support responses;

  • subscription communications; and

  • marketing where permitted.

Improve MyStudyLife

We may analyse information to:

  • understand how features are used;

  • identify usability problems;

  • diagnose errors;

  • evaluate performance;

  • understand broad usage patterns;

  • develop new functionality; and

  • improve existing functionality.

Where appropriate, we use aggregated or de-identified information for these purposes.

Protect Users & the Service

We may process information to:

  • prevent fraud;

  • prevent spam;

  • detect abuse;

  • enforce our Terms;

  • investigate security incidents;

  • protect accounts;

  • identify malicious activity;

  • prevent unauthorised access; and

  • maintain the integrity of our systems.

Meet legal obligations

We may process or disclose information where reasonably necessary to:

  • comply with applicable law;

  • comply with lawful requests from authorities;

  • establish or defend legal claims;

  • enforce contracts;

  • protect our legal rights; or

  • meet regulatory, accounting or tax obligations.

16. Our Legal Bases for Processing

Where UK or European data-protection law applies, we must have a lawful basis for processing personal information.

The legal basis depends on what information is being processed and why.

Performance of a contract

We rely on contractual necessity where processing is necessary to provide Services that a User has requested.

This may include:

  • creating an account;

  • storing User Content;

  • synchronising schedules;

  • providing reminders;

  • providing subscriptions;

  • providing AI Features requested by the User;

  • providing Family Connect; and

  • providing support connected with the Service.

Legitimate interests

We may process information where necessary for our legitimate interests or those of a third party and where those interests are not overridden by the User’s rights.

These interests may include:

  • operating our business;

  • maintaining and improving MyStudyLife;

  • protecting the security of the Services;

  • detecting fraud or abuse;

  • diagnosing errors;

  • understanding service performance;

  • protecting our legal rights; and

  • communicating appropriately with existing Users.

Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether Users’ rights and expectations outweigh our interests.

Consent

We rely on consent where applicable, including for certain:

  • marketing communications;

  • non-essential cookies;

  • tracking technologies;

  • optional features; or

  • processing activities for which consent is required by law.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

Legal obligation

We may process information where necessary to comply with legal, regulatory, accounting or tax obligations.

Other lawful bases

In limited circumstances, another lawful basis recognised by applicable law may apply.

Where MyStudyLife acts as a Data Processor for a school or organisation, the relevant organisation is responsible for determining its own lawful basis for the processing for which it is Controller.

17. Analytics

We use analytics services to understand how MyStudyLife is used and how our websites and applications perform.

Google Analytics

Google Analytics is a web and application analytics service provided by Google.

Depending on how it is configured and the User’s consent choices, it may process information including:

  • device information;

  • browser information;

  • IP-derived information;

  • Usage Data;

  • interactions;

  • cookies; and

  • similar identifiers.

We use this information to understand traffic, feature usage and performance.

Where consent is required for analytics technologies, they will only be activated after the appropriate consent has been obtained.

18. Heat Mapping and Session Analysis

We may use user-experience analytics tools such as Hotjar to understand how Users interact with particular parts of our websites or Services.

Such tools may collect:

  • clicks;

  • taps;

  • scrolling;

  • page interactions;

  • device information;

  • Usage Data;

  • pseudonymous identifiers; and

  • similar interaction information.

Where session recording is used, we take steps intended to prevent sensitive fields and information from being unnecessarily captured.

Non-essential session analysis technologies are used subject to consent where required by law.

19. Infrastructure Monitoring & Error Reporting

Raygun

We may use Raygun or similar monitoring services to identify application errors, crashes and performance problems.

Information processed may include:

  • application version;

  • device information;

  • operating system;

  • browser information;

  • IP address;

  • error information;

  • stack traces;

  • diagnostic information; and

  • Usage Data.

We use this information to maintain the reliability and security of MyStudyLife.

20. Email & Messaging Services

SendGrid

We may use SendGrid or related messaging infrastructure to send transactional or other emails.

Information processed may include:

  • email address;

  • delivery information;

  • bounce information;

  • timestamps;

  • message interaction information; and

  • information necessary to deliver the communication.

Where permitted and appropriate, email systems may record whether a message was delivered, opened or whether links were clicked.

21. Customer Support

Gleap

We may use Gleap to manage User support and contact requests.

Gleap may process information including:

  • name;

  • email address;

  • account information;

  • support messages;

  • attachments;

  • technical information; and

  • other information you provide when contacting support.

23. Website Hosting & Content Management

WordPress.com

Parts of our public website may use WordPress.com or associated infrastructure.

Depending on the functionality used, WordPress may process:

  • IP address;

  • Usage Data;

  • device information;

  • cookies;

  • form submissions; and

  • information necessary to deliver website content.

23. Registration and Authentication

Google Authentication

Users may be able to create or access an account using Google authentication.

If you choose this option, Google may provide information necessary to authenticate your account, which may include:

  • email address;

  • account identifier;

  • name;

  • profile information made available through the authentication process; and

  • authentication tokens.

Google processes information independently under its own privacy policy.

Facebook Authentication

Where available, Users may be able to authenticate using Facebook or Meta services.

Depending on the permissions granted, we may receive information necessary to create or authenticate your account.

Meta may separately process information under its own privacy policy.

Direct Registration

Users may also register directly with MyStudyLife.

Information may include:

  • first name;

  • last name;

  • email address; and

  • authentication information

26. Spam & Abuse Protection

Google reCAPTCHA

We may use Google reCAPTCHA to help identify automated, fraudulent or abusive activity.

Depending on Google’s implementation, reCAPTCHA may process technical and interaction information including:

  • IP address;

  • device information;

  • browser information;

  • mouse movements;

  • clicks;

  • scrolling;

  • touch interactions;

  • keypress information;

  • Usage Data;

  • cookies or similar identifiers; and

  • information used to determine whether an interaction is likely to be automated.

Google may process this information under its own privacy policy and terms.

27. External Content and Social

Platforms

Some MyStudyLife webpages may include embedded or interactive content provided by third-party platforms.

These services may receive technical information when a page containing their content is loaded, even where the User does not actively interact with that content.

Depending on the features currently enabled, these providers may include services such as:

  • YouTube;

  • Facebook or Meta;

  • LinkedIn;

  • X;

  • Gravatar; and

  • other external content platforms.

Information processed may include:

  • IP address;

  • Usage Data;

  • cookies;

  • device information;

  • account information where the User is signed in to that third-party service; and

  • information about interactions with embedded content.

The third party’s own privacy policy applies to its independent processing.

28. Our Service Providers and Processors

We use specialist third parties to help provide MyStudyLife.

Depending on the Services being used, these may include providers for:

CategoryExamples
Cloud hosting and infrastructureMicrosoft Azure
AnalyticsGoogle Analytics
User experience analyticsHotjar
Error and infrastructure monitoringRaygun
Email deliverySendGrid
Customer supportZendesk
Customer relationship managementHubSpot
Website infrastructureWordPress.com
AuthenticationGoogle, Meta/Facebook
Spam protectionGoogle reCAPTCHA
External contentYouTube, Gravatar and social platforms
AI processing[INSERT CURRENT AI PROVIDER(S)]
Payment and subscriptionsApp stores and payment providers used for the relevant transaction

Providers may change from time to time as we develop the Services.

Where a provider processes personal information on our behalf, we require appropriate contractual protections and restrict its processing to the purposes for which it has been engaged.

29. Sharing Personal Information

We may disclose personal information to the following categories of recipients.

Service providers

We disclose information to processors and service providers where necessary to operate MyStudyLife.

Schools & Organisations

Where an account is provided or administered by a school or organisation, relevant information may be available to that organisation in accordance with the applicable service, agreement and applicable law.

Connected family members

Where Family Connect has been enabled, information may be shared with authorised connected Users as described in the Family Connect section above.

Connected services

Where you instruct us to connect MyStudyLife to a third-party service, we may exchange the information necessary to provide the integration.

Professional Advisers

We may disclose information where reasonably necessary to lawyers, auditors, accountants, insurers or other professional advisers.

Authorities & Legal requests

We may disclose information where required by law, court order or other valid legal process.

We may also disclose information where reasonably necessary to:

  • investigate unlawful activity;

  • protect the security of our Services;

  • prevent fraud;

  • protect the rights or safety of MyStudyLife, our Users or another person; or

  • establish, exercise or defend legal claims.

30. Business Transfers

If MyStudyLife is involved in a merger, acquisition, financing, reorganisation, sale of assets or similar corporate transaction, personal information may be disclosed or transferred as part of that transaction.

Where required by applicable law, we will take appropriate steps to protect personal information and notify affected Users of material changes to how their information will be processed.

Until an updated privacy notice takes effect, transferred personal information will remain subject to the protections described in this Privacy Policy, to the extent applicable.

31. International Data Transfers

MyStudyLife operates internationally and some of our service providers operate in multiple countries.

As a result, personal information may be transferred to or processed in a country other than the country in which the User lives.

Where UK data-protection law applies and information is transferred outside the United Kingdom, we use an appropriate transfer mechanism where required.

Depending on the transfer, this may include:

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement (IDTA);

  • the UK Addendum to the European Commission Standard Contractual Clauses;

  • another safeguard recognised under UK data-protection law; or

  • an applicable statutory exception.

Where EU data-protection law applies, mechanisms may include:

  • an adequacy decision;

  • European Commission Standard Contractual Clauses (SCCs); or

  • another transfer mechanism recognised under EU law.

Where appropriate, we also assess the circumstances of international transfers and implement supplementary contractual, technical or organisational safeguards.

Users may contact us for additional information concerning transfer safeguards relevant to their personal information.

32. How Long We Keep Personal Information

We do not keep personal information for longer than reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

The appropriate retention period depends on factors including:

  • the type of information;

  • why it was collected;

  • how long the User maintains an account;

  • whether the information remains necessary to provide a feature;

  • the sensitivity of the information;

  • contractual obligations;

  • security requirements;

  • applicable limitation periods;

  • regulatory requirements;

  • tax and accounting obligations; and

  • whether information is required for an existing or anticipated legal dispute.

Account & User Content

Account information and User Content may generally be retained while an account remains active and for a limited period afterwards where necessary to complete deletion, maintain backups, resolve disputes, comply with legal requirements or protect the Services.

AI information

AI Input Data and AI Output may be retained where necessary to provide conversation history or other account functionality.

Third-party AI providers may retain information for limited periods in accordance with our contractual arrangements with them.

Information may also be retained for a limited period where necessary for security, abuse prevention, troubleshooting or legal compliance.

Support records

Support communications may be retained after a support request is resolved where necessary to maintain service history, identify recurring issues, handle disputes or comply with legal obligations.

Transaction information

Transaction and financial records may be retained for the periods required by applicable tax, accounting and company law.

Analytics & Technical logs

Analytics, security and diagnostic information is retained for periods appropriate to its purpose and may be aggregated or de-identified where appropriate.

Backups

Personal information removed from active systems may remain temporarily in encrypted or access-controlled backups until those backups are overwritten or expire in accordance with our backup and retention processes.

When information is no longer required, we delete it, anonymise it or otherwise place it beyond use where appropriate.

33. Security

We take appropriate technical and organisational measures designed to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • unlawful use;

  • disclosure;

  • alteration;

  • destruction; and

  • other unauthorised processing.

Measures may include, as appropriate:

  • encryption in transit;

  • access controls;

  • authentication controls;

  • secure development practices;

  • monitoring;

  • logging;

  • vulnerability management;

  • backups;

  • supplier security assessments; and

  • organisational policies and staff controls.

No internet service or storage system can guarantee absolute security.

Users should protect their own accounts by keeping login credentials confidential and contacting us promptly if they suspect unauthorised access.

Where a personal-data breach occurs, we will assess it and notify affected Users and/or the relevant supervisory authority where required by applicable law.

34. Marketing Communications

Where permitted by law, we may send Users information about MyStudyLife, new features, products, offers or other relevant communications.

Where consent is required, we will obtain it before sending marketing.

Users can unsubscribe from marketing communications using the unsubscribe mechanism in the message or through available account settings.

We may retain limited information after an unsubscribe request so that we can honour the User’s preference and avoid sending further marketing communications.

Service-related communications such as security alerts, account notices, subscription information and significant changes to the Services are not marketing and may still be sent where necessary.

35. User Rights

Depending on the law that applies, Users may have rights in relation to their personal information.

Under UK and European data-protection law, these may include the right to:

Access personal information

You may request confirmation of whether we process your personal information and obtain a copy of certain information we hold about you.

Correct inaccurate information

You may ask us to correct inaccurate or incomplete personal information.

Delete personal information

You may ask us to delete personal information in circumstances where the law provides a right to erasure.

The right to deletion is not absolute, and we may retain information where there is a valid legal reason to do so.

Restrict processing

You may ask us to restrict the processing of your personal information in certain circumstances.

Data portability

Where processing is based on consent or contract and carried out by automated means, you may have the right to receive certain information in a structured, commonly used and machine-readable format and, where technically feasible, transmit it to another controller.

Withdraw consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

Rights relating to automated decisions

Where applicable law gives you rights concerning solely automated decisions that have legal or similarly significant effects, you may have rights to information, human intervention, representation or challenge.

36. How to Exercise Your Rights

Requests may be sent to:

support@mystudylife.com

We may need to verify your identity before completing a request.

We will not request more personal information than is reasonably necessary for verification.

Where MyStudyLife processes information solely as a Data Processor on behalf of a school or organisation, we may refer your request to that organisation or assist the organisation with responding.

Requests will be handled within the period required by applicable law.

Under UK data-protection law, this will normally be within one month, although the period may be extended in circumstances permitted by law.

Rights requests are generally free of charge. In limited circumstances permitted by law, we may charge a reasonable fee or decline to act on a manifestly unfounded or excessive request.

37. Complaints

f you have concerns about how we use your personal information, please contact us first at:

support@mystudylife.com

You may also have the right to complain to a data-protection regulator.

For Users in the United Kingdom, the supervisory authority is the:

Information Commissioner’s Office (ICO)

Information about how to contact the ICO is available at ico.org.uk.

Users in the European Economic Area may contact the competent supervisory authority in their country.

38. Additional Rights in Other Jurisdictions

Depending on where you live, local privacy law may provide additional rights.

These can include rights to:

  • know what categories of personal information are collected;

  • access information;

  • correct information;

  • delete information;

  • obtain portable copies;

  • opt out of certain targeted advertising;

  • opt out of certain sales or sharing of personal information;

  • opt out of certain profiling;

  • restrict certain sensitive-data processing; and

  • appeal a decision concerning a privacy request.

Where these rights apply to MyStudyLife, we will honour valid requests in accordance with applicable law.

Users may contact support@mystudylife.com to exercise applicable privacy rights.

39. Information about other people

MyStudyLife allows Users to enter information relating to their academic life.

Users should not upload, share or provide personal information about another person unless they have the right or lawful basis to do so.

This is particularly important when using:

  • notes;

  • AI Features;

  • Family Connect;

  • school features;

  • file uploads; and

  • calendar integrations.

If you believe another User has provided your personal information to MyStudyLife improperly, please contact us.

40. System Logs & Maintenance

For operational, maintenance, security and troubleshooting purposes, MyStudyLife and our service providers may generate system logs recording interactions with the Services.

Logs may contain:

  • timestamps;

  • IP addresses;

  • device or browser information;

  • application activity;

  • identifiers;

  • errors;

  • request information; and

  • other technical information.

Logs are used to maintain, protect and troubleshoot the Services.

41. Aggregated & De-Identified Information

We may create statistical, aggregated or de-identified information from information collected through MyStudyLife.

Where information has been effectively anonymised so that it no longer identifies an individual, it is not personal information for the purposes of applicable data-protection law.

We may use aggregated or anonymised information for purposes such as:

  • analysing product performance;

  • understanding broad educational or usage trends;

  • reporting;

  • research;

  • service development;

  • planning; and

  • improving MyStudyLife.

We take reasonable steps not to re-identify information that we maintain as anonymised where applicable law requires this.

42. Legal Claims & Protection of Rights

Personal information may be retained or used where reasonably necessary to establish, exercise or defend legal claims.

We may also process information to investigate or respond to:

  • violations of our Terms;

  • fraud;

  • security incidents;

  • misuse of MyStudyLife;

  • disputes;

  • complaints; or

  • regulatory or legal proceedings.

Nothing in this Privacy Policy prevents us from preserving or disclosing information where required by applicable law.

43. Links to Third-Party Services

MyStudyLife may contain links to websites, applications or services that we do not operate.

This Privacy Policy does not apply to independent third parties.

We encourage Users to review the privacy information provided by a third-party service before providing information to it.

44. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • new features;

  • changes to the Services;

  • changes to our service providers;

  • changes to AI functionality;

  • changes to how personal information is processed;

  • legal or regulatory developments; or

  • improvements to our privacy practices.

The latest version will be published on this page and will include the date it was last updated.

Where a change is material, we will provide additional notice where appropriate or required by law. This may include an in-app notice, website notice or email.

Where a new processing activity requires consent, we will seek that consent where required.

45. Contact Us

Questions, concerns or privacy requests can be sent to:

My Study Life Ltd
40 The Glades
Aldridge
Walsall
West Midlands
WS9 8RN
United Kingdom

Email: support@mystudylife.com

46. Definitions

Personal Data or Personal Information

Information relating to an identified or identifiable individual.

Usage Data

Technical or usage information collected through the operation of MyStudyLife, such as device information, IP address, browser information, operating system, application activity, interaction information, timestamps, error information and similar technical data.

User

An individual who accesses or uses MyStudyLife.

Data Subject

An individual who accesses or uses MyStudyLife.

Data Controller

The person or organisation that determines the purposes and means of processing Personal Data.

Data Processor

A person or organisation that processes Personal Data on behalf of a Data Controller.

User Content

Information or content that a User adds, uploads, imports, creates or otherwise makes available through MyStudyLife.

AI Features

Artificial intelligence, machine-learning, large-language-model, timetable scanning, study-assistant, summarisation, explanation, classification or similar features made available through MyStudyLife.

AI Input Data

Information submitted by a User to an AI Feature or made available from the User’s MyStudyLife account for the purpose of fulfilling the User’s request.

AI Output

Content, information, recommendations, schedules, summaries, explanations or other results generated using an AI Feature.

Cookie

A small piece of information stored on or accessed from a User’s device or browser.

Tracker

A technology, including cookies, identifiers, pixels, SDKs, local storage or similar technology, capable of storing, accessing or associating information with a User or device.

Services

MyStudyLife’s websites, web application, mobile applications, student-planning tools, subscriptions, school services, Family Connect, AI Features and other products or services that link to this Privacy Policy.

47. Legal Information

This Privacy Policy is intended to provide information required under applicable privacy and data-protection law, including where applicable:

  • The UK General Data Protection Regulation;

  • The Data Protection Act 2018;

  • Applicable amendments made by the Data (Use and Access) Act 2025;

  • The European Union General Data Protection Regulation;

  • Applicable electronic communications and cookie laws;

  • Children’s privacy legislation; and

  • Other applicable national, state or regional privacy laws.

The application of particular laws depends on the User, the Service being used and the circumstances of the processing.

This Privacy Policy applies only to MyStudyLife Services unless expressly stated otherwise.