Privacy Policy

ProofStudy turns your study material into notes, practice questions and flashcards. This page explains what information that involves, who handles it, and how long it is kept.

Who we are

ProofStudy is made by 26Labs, a company registered in the United Kingdom ([OWNER: company number and registered office address]). 26Labs is the controller of the personal information described here. You can contact us at [OWNER: contact email].

What we handle and why

Study material you add

Documents, slides, photos, audio, video and text that you add to the app. We use them only to make your notes, questions and flashcards. When the app needs AI help, it sends the material through our server to an AI provider (see "Who else handles your information"). Our server passes the material on and does not keep a copy of it. An answer may be held in the server's memory for a few minutes so an interrupted request can still be completed.

What the app makes for you

Notes, questions, flashcards, your answers and your progress are stored on your device. We do not keep a copy on our server. They are removed when you delete them or delete the app. Your device backups follow your own iCloud or computer backup settings.

Your subscription and usage

When you subscribe, Apple handles the payment. We never see your card details, name or email address. Apple gives the app a signed record of your subscription. From that record our server works out a random-looking account code that does not name you. Against that code our server keeps a usage record: what kind of request was made, which AI model answered, how much it cost and when. We use it to give you your plan's allowance and to keep spending within safe limits.

Send from computer

If you use "Send from computer", the files you send and their names are kept on our server only until your phone collects them. The 6-character code works for 15 minutes. To stop people from guessing codes, the server counts wrong guesses for each internet address (IP address). Those counts are kept in memory for 15 minutes and are never written to disk. The page uses no cookies and no tracking.

What we do not do

Our legal reasons (UK GDPR)

Who else handles your information

WhoWhat forWhere
OpenAIReads your material and writes notes, questions and flashcards; reads photos; turns speech into text.United States
Google (Gemini, through Google Cloud)The same jobs, only when the app's Gemini option is in use. [OWNER: delete this row if the Gemini option does not ship]United States, European Union and other regions
AppleApp Store purchases and subscriptions. Apple decides how it handles payment information under its own privacy policy.Worldwide
Hetzner OnlineHosts our server, including files waiting in Send from computer.European Union (Finland)
CloudflarePoints the proofstudy.com name at our server. It does not see your files or requests.Worldwide

The AI providers handle your material only to answer our requests. Under their business terms they do not use it to train their models. They may keep it for a limited time to detect abuse (OpenAI: up to 30 days). [OWNER: confirm against the current provider terms and any zero-data-retention agreement]

When information goes outside the UK, we rely on the UK's approved safeguards, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework. [OWNER: confirm the safeguard used for each provider]

How long we keep it

InformationKept for
Study material sent for AI helpNot kept by our server once the request is answered. The AI provider keeps it as described above.
Notes, questions, flashcards and progressOn your device until you delete them.
Send from computer filesDeleted as soon as your phone collects them, and after 24 hours at most, even if they are never collected.
Wrong-code counts (Send from computer)15 minutes, in memory only.
Usage record (account code, requests, costs)[OWNER: period, for example the subscription plus 6 years for accounting records]

Children

ProofStudy is made for students. [OWNER: state the minimum age, and whether users under 18 need a parent's or guardian's consent. This decision is still open.] We design the app to collect as little as possible, with no advertising and no tracking.

Your rights

You can ask to see, correct or delete your personal information. You can also object to or restrict how we use it, and ask for a copy in a portable form. Our server knows you only by a code that does not name you, so we may ask for details from your App Store purchase to find your records. Most of your information is on your own device, and you can delete it there at any time.

If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Security

All connections use HTTPS. AI provider keys are kept on our server, never in the app. Our server identifies you only by a code that does not name you, and it deletes Send from computer files on a schedule.

Changes

If we change this policy, we will update the date below. For important changes, we will also tell you in the app.