Privacy Policy
Last updated: July 12, 2026
Introduction
Welcome to StudyGlen. We take the privacy of your information seriously. This Privacy Policy describes how we handle information when you use our AI-powered learning platform, including our quiz generator, flashcard generator, educational comic creator, and live study sessions.
Please read this policy carefully. By using our service, you accept the practices described here.
Data Controller
The data controller responsible for your personal data is:
Tuncay Technologies Ltd, a company registered in England and Wales (Company Number: 16869889)
Registered Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
ICO Registration Number: ZC049013
Data Protection Contact: dpo@studyglen.com
Information We Collect
When you use StudyGlen, we collect the following types of information:
Account Information: Email address and password when you create an account.
Usage Information: Data about the study materials you create (quizzes, flashcards, and comics), your flashcard review history, your activity on the platform, and feedback you provide.
Technical Information: Browser type, IP address, and basic device information.
Uploaded Content: Text, PDF files, and images (processed with OCR), as well as YouTube video links you provide (used to retrieve the video transcript), are processed to generate quizzes, flashcards, and comics. We generally delete uploaded content from our primary systems after processing; however, copies may remain in backups or with third-party processors for a limited time as needed for technical or legal reasons.
Lawful Basis for Processing
Under UK GDPR, we process your personal data on the following lawful bases:
Contract: We process account information and uploaded content to provide the learning tools you requested (quiz, flashcard, and comic generation, and live sessions). This is necessary to perform our contract with you.
Legitimate Interests: We process usage data and technical information to improve our service, maintain security, and prevent fraud. We also rely on legitimate interests to send direct marketing communications to existing users about StudyGlen features and service updates; we have conducted a Legitimate Interests Assessment and believe users reasonably expect such communications, and you can object at any time via the unsubscribe link in any email or by emailing dpo@studyglen.com. We have balanced these interests against your rights and believe they do not override your fundamental rights.
Analytics: We use website analytics (Google Analytics) and mobile app analytics (PostHog) under our legitimate interests to understand how our service is used and to improve it. Analytics data is pseudonymous, is not used for advertising, and is never sold. You can object at any time: block or delete cookies in your browser settings for the website, turn off app analytics in the app's Data & privacy settings or from your profile page, or email dpo@studyglen.com. Where we ask for your consent for anything else (such as optional marketing preferences), you may withdraw it at any time.
Legal Obligation: We may process data to comply with legal requirements, such as responding to lawful requests from authorities or maintaining required business records.
You have the right to object to processing based on legitimate interests. Contact us at dpo@studyglen.com to exercise this right.
Purpose Limitation: We only use your data for the purposes stated in this policy. If we need to use it for a new purpose, we will notify you and, where required, obtain your consent.
Data Minimisation: We only collect data that is necessary for the stated purposes.
How We Use Your Information
We use collected information to:
Provide and operate our learning tools (quiz, flashcard, and comic generation, and live sessions)
Improve the service based on how it's used
Communicate with you about the service
Address technical problems and maintain security
Send you product updates, educational tips, and promotional communications about StudyGlen. You may opt out at any time via the unsubscribe link in any email or by emailing dpo@studyglen.com.
Sharing Your Information
We do not sell your personal information.
We may share information in these situations:
Third-Party Services: We use third-party service providers (for example, cloud hosting and AI text and image processing services) to generate quizzes, flashcards, and comics. We limit the data shared to what is necessary for processing. These providers may retain data for a limited period under their own policies. We require them to apply appropriate security measures.
Legal Obligations: We may share information if required by law or in response to valid requests by public authorities.
Business Changes: If StudyGlen or its assets are transferred in a business transaction, personal data may be transferred to the new owner, subject to any legal restrictions.
Email marketing: We use Zoho Corporation Pvt Ltd (India; EU Standard Contractual Clauses in place) to deliver marketing and service emails. Zoho receives your name, email address, and email engagement data solely for email delivery.
Payment Processing: We use Stripe to process credit-pack purchases on our website. Stripe receives the payment and billing information needed to complete your transaction; we do not store your full card details. Stripe processes this data under its own privacy policy and applies appropriate international transfer safeguards.
International Data Transfers
Your data may be transferred to and processed in countries outside the United Kingdom and European Economic Area (EEA).
We use cloud infrastructure providers and AI services that may process data in the United States and other countries.
When we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, including: UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (SCCs) with our service providers.
Some transfers may be to countries with adequacy decisions from the UK government or European Commission, meaning they provide an adequate level of data protection. This includes US providers certified under the EU-US Data Privacy Framework and its UK Extension (the UK-US Data Bridge), such as Google.
You can request more information about the specific safeguards we use by contacting dpo@studyglen.com.
Data Storage and Retention
We retain different types of data for different periods:
Account Data (email, profile): Retained while your account is active, plus 30 days after deletion request to complete the process.
Study Content (generated quizzes, flashcard decks, and comics): Retained while your account is active. Deleted within 30 days of account deletion.
Uploaded Content (PDFs, text, images): Deleted from active systems immediately after processing. May persist in backups for up to 30 days.
Technical Logs (IP addresses, access logs): Retained for 90 days for security and debugging purposes.
Legal Records (terms acceptance, transaction records): Retained for 7 years as required by UK law.
You can delete your account directly in the mobile app via the settings screen, or request deletion by contacting dpo@studyglen.com. We will complete deletion within 30 days, except for data we must retain for legal compliance.
Learning Data (flashcard review history and spaced-repetition schedules) and Generated Images (comic panels and flashcard illustrations): Retained while your account is active and deleted within 30 days of account deletion.
Your Privacy Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access: Request a copy of your personal data we hold.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data (subject to legal retention requirements).
Right to Restrict Processing: Request limitation of how we use your data.
Right to Data Portability: Request your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Rights Related to Automated Decision-Making: See our AI and Automated Decisions section below.
To exercise any of these rights, email dpo@studyglen.com. We will respond within 30 days (one month). This period may be extended by two months for complex requests, in which case we will inform you.
AI and Automated Decision-Making
StudyGlen uses artificial intelligence to generate quizzes, flashcards, educational comics, and images from your uploaded content. This is an automated process.
How it works: When you upload study materials (or provide a topic or YouTube link), our AI services process them to create questions, answers, explanations, flashcards, comic scripts, and images.
Accuracy disclaimer: AI-generated content, including AI-generated images, may contain errors, inaccuracies, or hallucinations. It is generated automatically and should not be relied upon as the sole source of truth for academic or professional purposes.
No significant automated decisions: We do not make automated decisions that have legal or similarly significant effects on you. Content generation is a tool to assist your learning, not an assessment of your abilities.
Human review: You can request human review of any AI-generated content or report errors through our feedback system. Contact dpo@studyglen.com for concerns about AI processing.
Lawful basis: Content generation is processed under our contract with you (to provide the service you requested). We do not use your content to train our own AI models.
Live Study Sessions
StudyGlen offers live, multiplayer quiz sessions. If you host or join a session, we process real-time data to run it.
Participant information: The display name or nickname you choose, your answers, and your score are visible to the session host and other participants on a live leaderboard.
Guests may join without an account using a room code and a nickname. We use this only to run the session and do not link it to a permanent profile.
Please do not use real names or personal information as session nicknames. Session hosts are responsible for the conduct of their sessions.
Session results are retained while the host's account is active and are deleted with that account.
Mobile Application
StudyGlen is also available as a mobile app for iOS and Android, which currently provides our flashcards feature.
Device Information: When you use the app, we collect device type, operating system and app version, and diagnostic information to operate the app and resolve problems.
Analytics: The app uses PostHog for product analytics, hosted on EU servers in Frankfurt, Germany. It records usage events, screen views, and error diagnostics linked to an identifier for your account. It does not automatically capture the contents of your screens. You can turn app analytics off at any time in the app's Data & privacy settings or from your profile page on the website; the choice syncs across your devices.
In-App Purchases: Purchases in the mobile app are processed by the Apple App Store or Google Play and managed on our behalf by RevenueCat. We receive your purchase and entitlement status; we do not receive your card details. Apple and Google process your payment under their own privacy policies.
Sign-In: You can sign in with email, Apple, or Google. If you use Sign in with Apple and choose to hide your email, Apple provides us a private relay address instead of your real one.
Notifications: The app may schedule study reminders locally on your device. These are generated on your device and are not sent to our servers.
Security
We use commercially reasonable technical and organizational measures (such as HTTPS, encryption, and access controls) to protect user data.
However, no internet service is completely secure, and we cannot guarantee absolute protection.
We use secure connections (HTTPS) for all data transmission.
Children's Privacy
StudyGlen is not intended for children under 13 years of age.
We do not knowingly collect personal information from children under 13. If you are under 13, please do not use our service or provide any personal information.
For users aged 13-17 in the UK: If you are under 18, we recommend that you review this privacy policy with a parent or guardian before using our service.
Parental Consent: If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly.
If you believe a child under 13 has provided information to us, please contact us immediately at dpo@studyglen.com.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first at dpo@studyglen.com so we can try to resolve your concerns.
You also have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom. Website: https://ico.org.uk. Helpline: 0303 123 1113
We encourage you to contact us first, but you may complain to the ICO at any time. If you are located in the EU or EEA, you also have the right to lodge a complaint with the data protection authority in your country of residence.
Changes to This Policy
We may update this privacy policy from time to time.
When we make changes, we will update the 'Last Updated' date at the top.
For significant changes, we will notify you by email or through the service.
Contact Us
If you have questions about this privacy policy or how we handle your data:
Data Protection Contact: dpo@studyglen.com
Tuncay Technologies Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Questions About This Policy?
If you have questions or comments about this privacy policy, please contact our Data Protection Officer at dpo@studyglen.com