Privacy
Studara is used by people aged 13 to 18. This page says exactly what we collect, why we have it, who else sees it, how long we keep it, and how to make us delete it. It is written to be read by a student, not only by a lawyer.
Last updated 13 August 2026
Incomplete — company details pending
The legal entity operating Studara, its registration number, registered address and ICO registration are not yet published on this page. We would rather show you this notice than print a company name we have not verified. Until it is filled in, treat this policy as a statement of practice rather than a complete legal notice, and contact us at arhancanli@icloud.com with any question it does not answer.
Who this is for, and the age rule
Studara is intended for students aged 13 and over. If you are under 13, please do not create an account. If you are under 18, we assume a parent, carer or school may want to understand what we hold about you, and this page is written so they can.
What we collect
Your account
Your email address and sign-in details, handled by Clerk. We do not store your password — Clerk does. If you sign in with Google, Apple or Microsoft, we receive your email address and name from them.
What you write and answer
This is the bulk of it, and it is the part worth reading carefully. We store:
- Your answers to questions, including free-text answers you type in your own words.
- Which questions you got right and wrong, when, and how long you took.
- Flashcards, study sets and notes you create or upload, and text extracted from files you upload.
- What our system concludes you understand and misunderstand — a model of your memory per topic, used to decide what to show you next.
- Your conversations with Ara, the tutor.
- Your subjects, exam board, target grades and exam dates.
Technical and usage data
Basic request logs, error reports, and — only if you turn them on — notification subscriptions for reminders. We do not run advertising trackers and we do not sell data to anyone, ever.
Why we are allowed to have it
Under UK GDPR our lawful basis is contract for the parts needed to give you the product you signed up for — your account, your answers, your schedule — and legitimate interests for keeping the service secure, preventing abuse, and fixing faults. Where we rely on legitimate interests you can object, and we will stop unless we have a compelling reason not to.
Who else sees it
We use other companies to run Studara. They only receive what they need, and only to do a job for us:
- Clerk — sign-in and account security.
- Neon — the database your work is stored in.
- Vercel — hosting and request logs.
- Google (Gemini) and Groq — the AI models that generate questions, explain topics, and mark written answers. Your answer text and the question are sent to them so they can respond.
- OpenAI — used for some generation and speech features.
- ElevenLabs — read-aloud voice, when you use it.
- Resend — sending you email.
- PayPal — payments, if you subscribe. We never see your card details.
Some of these process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Agreement or an adequacy decision.
Being straight about AI providers
When a written answer is marked, the question and what you wrote are sent to an AI provider. We have contractual terms with these providers covering how they may use it. We are in the process of confirming, in writing and for each provider, whether any of that content can be used to train their models — and we will state the answer here plainly once we have it for all of them, including if the answer is one we do not like.
How long we keep it
Your learning record is kept while your account is open, because it is the product — a memory model built over months is what makes the scheduling work. If you delete your account we delete your personal data within 30 days, except anything we must keep for legal or accounting reasons (payment records, typically six years).
Your rights
You can ask us to show you what we hold, correct it, delete it, hand it over in a portable format, or stop a particular use. Email arhancanli@icloud.com and we will respond within one month. You do not need a reason and it costs nothing.
If you think we have got something wrong you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, but you do not have to.
Safety
If you report content as unsafe, that report reaches a person. If something you write suggests you may be at risk of harm, we may show you support information — we are not a crisis service, and we will always point you to one that is.
Cookies
We use cookies that are necessary to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies, so there is nothing here for you to opt out of.
Changes
If we change this in a way that matters, we will say so on this page and update the date at the top rather than changing it quietly.