Privacy Policy

The short version

We collect very little, on purpose. We know the name and email you buy with, the country and postcode you bought from, whether your Common Room membership is active, and whether you have asked to hear from us. We never see your child's name, subjects, notes or anything they produce, because StudyBrain runs entirely on your own computer. If you use the AI support chat on our website, what you type there does reach us, which is why we ask you never to put personal details into it. The only tracking on our website is advert measurement, and it does not run at all unless you press Accept on the cookie banner. Say no and the site works exactly the same. We do not sell data to anyone.

1. Who we are

StudyBrain Ltd is the data controller for the personal information described in this policy. We are registered in England and Wales, company number 17385067, registered office 10 Ellesmere Road, Manchester, M30 9FH. We are registered with the Information Commissioner's Office (ICO) under registration number ZC223514.

Questions about your data: hello@studybrain.ai.

2. What we collect, and why

When you buy StudyBrain. Our checkout is run by Paddle, who act as merchant of record: they are the legal seller of the transaction and handle your payment. Your card details go to Paddle, not to us, and Paddle acts as a data controller in its own right for payment, fraud prevention and tax purposes (see Paddle's own privacy policy at paddle.com). From the sale we receive your name, email address, country, postcode and order details. We use them to deliver your kit files, provide support, honour the 14-day guarantee, and keep the records the law requires us to keep. Lawful basis: performance of a contract, and legal obligation for the tax and accounting records.

Your country and postcode. Paddle asks for your country and postcode at checkout because, as merchant of record, it needs them to charge and account for the right VAT or sales tax. That is Paddle's own purpose, under Paddle's own legal basis as a controller. Separately, we keep the postcode and the two-letter country code in our own records so we can see which parts of the country StudyBrain is selling in. We never collect or store your full address, and we only ever look at this information in aggregate. Lawful basis for our own use: legitimate interests (understanding where the product sells).

When we email you after you buy. Delivery is automated: a notification from Paddle triggers your welcome email, sent through Resend, our transactional email service, from hello@studybrain.ai. It carries your kit access and how to sign in to your account. Resend processes your email address and the contents of that email on our instructions as our processor. Lawful basis: performance of a contract.

Your account and The Common Room. Every buyer gets an account at studybrain.ai with a My Kit area, and access to The Common Room, our members' content library. There is no password: when you sign in, we email a one-time code or link to your address through Resend, a transactional email service acting as our processor, sending from hello@studybrain.ai. To run your account we hold your email address, sign-in records, and your Common Room subscription status, which Paddle sends us automatically (active, cancelled, renewal due) so we know what to show you. We do not receive your payment details, and renewal reminder emails go to the same address. Lawful basis: performance of a contract.

The suggestions form. The Common Room includes a one-way suggestions form. We keep what you send, linked to your account, and use it to improve StudyBrain. A copy of each suggestion is emailed to us through Resend so we see it promptly. Please do not include personal information about your child in a suggestion; if you do, we will delete it. Lawful basis: legitimate interests.

The AI support chat. Our website includes an automated assistant, powered by Claude, for questions about the kit. What you type is sent to Anthropic to generate the answer, and we keep chat transcripts and may review them to improve the answers. Please do not type personal information into the chat: no names, no email addresses, and nothing about your child. It does not need any of that to help you, and if personal details do appear in a transcript we delete them when we find them. Transcripts are kept for 90 days (section 7). Lawful basis: legitimate interests.

Marketing to customers. Because you bought from us, we may email you about StudyBrain updates and closely related products, under the UK "soft opt-in" rule. Every email has an unsubscribe link, and one click stops it for good. Lawful basis: legitimate interests, alongside the soft opt-in under the Privacy and Electronic Communications Regulations.

Marketing to everyone else. If you have not bought from us, we only email you if you have expressly signed up, for example through a form on our website. Lawful basis: consent, which you can withdraw at any time via the unsubscribe link.

Webinar and setup-session registrations. When you register for a live session we collect your name and email to run the session, send joining details and reminders, and follow up afterwards. Sessions are recorded, but the format protects you: attendee cameras and microphones are off, so the recording captures our screen and our voice, not you. Questions you type in the chat may be read out and answered in the recording, without your name. See our Webinar Notice for the full picture. Lawful basis: performance of a contract for the session itself, legitimate interests for the recording of our own presentation.

The waitlist. Before StudyBrain went on sale, our holding page invited people to register to hear when it opened. If you did, we hold the email address and the first name you gave us, in our own database. We will use them to tell you when StudyBrain is open, and for occasional news after that if you want it. You can ask us to remove you at any time by replying to any email from us or writing to hello@studybrain.ai. Lawful basis: consent.

When you email us. We keep support correspondence so we can help you and improve the product. Lawful basis: legitimate interests.

When you visit the website. The cookies the site cannot work without are set as soon as you arrive: they keep you signed in, keep the site secure and run the checkout. Under UK rules those essential cookies do not need your consent. Nothing beyond them runs until you tell us it can. See our Cookie Policy for the full list and what each one is for.

Advertising cookies and the Meta pixel. When we advertise StudyBrain on Facebook and Instagram we need to know which adverts actually lead to a sale. To measure that we use the Meta pixel, a small piece of Meta's code on our website. It only runs if you press Accept on the cookie banner. If you do, it tells Meta which pages of our site you looked at and whether you bought, together with your IP address and browser details, which Meta may match to a Facebook or Instagram account. It never receives anything about your child, and it is not in the kit at all, because the kit runs on your own computer and sends us nothing (section 3). If you press "No thanks", or simply ignore the banner, nothing loads from Meta and nothing is sent. The site works exactly the same either way: every page, the checkout included, with only our advert measurement affected. You can change your answer at any time using the "Cookie choices" link in the footer of our home page. Lawful basis: consent, which you can withdraw whenever you like.

3. What we never collect

StudyBrain runs on your own computer, inside your own Claude account. The kit does not phone home. We never receive:

• The student's name, age, school, subjects or exam board.
• Their notes, essays, quiz answers, marks or anything else they produce.
• Anything typed into Claude. That conversation is between your household and Anthropic, under Anthropic's own privacy policy, which we do not control.

We designed it this way deliberately. The safest place for a teenager's study data is their own family's machine, not our servers.

One thing not to confuse with the kit: the AI support chat on our website is ours, and anything typed into that does reach us (section 2). That is why the chat asks you not to put personal details into it. The kit itself sends us nothing, ever.

4. Children and students

StudyBrain is sold to adults. Our customers are the account holders, aged 18 or over, usually parents. We do not knowingly collect personal information from anyone under 18:

• Checkout and purchase are adult-only.
• Webinar registration is restricted to adults aged 18 or over.
• Attendee cameras and microphones are off in every session, so no student's image or voice is captured.
• The kit sends us no student data at all (section 3).

If we discover we hold personal information about someone under 18, for example because a student emails our support address directly, we use it only to reply, and to redirect the conversation to a parent or guardian. We delete it after that and we never add anyone under 18 to a marketing list. If you believe a child has given us their information, email hello@studybrain.ai and we will delete it.

5. Who we share information with

We use a small number of service providers, and we share only what each needs:

Each processor acts under a contract that restricts what they can do with your data. We do not sell personal information, and we do not share it with anyone else except where the law requires it, or with professional advisers under confidentiality.

6. International transfers

Some providers process data outside the UK. Where they do, the transfer is protected by a UK adequacy decision or by the UK's approved safeguards (the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses). Details of each provider's arrangements are available on request.

7. How long we keep things

• Order and delivery records: 6 years, to meet tax and accounting obligations and cover the limitation period.
• Country and postcode from your order: kept with the order record for the same 6 years. We only ever use them in aggregate to see where StudyBrain is selling.
• Account data (email, sign-in records, subscription status): for as long as your account exists. My Kit access is meant to last, so accounts are kept unless you ask us to close yours.
• Marketing list entries: until you unsubscribe, then a suppression record only, so we do not accidentally email you again.
• Support correspondence: 2 years, then deleted.
• Suggestions-form entries: 2 years, then deleted or fully anonymised.
• AI support chat transcripts: 90 days, then deleted. Anthropic's own API retention applies to its processing.
• Your cookie answer: stored in your own browser, not on our servers, until you change it or clear your browsing data.
• Advert measurement data, if you accepted advertising cookies: held by Meta under Meta's own retention rules, not ours. We hold no copy of it.
• Webinar registration lists: 12 months after the session.
• Session recordings: kept while they are useful as replays or onboarding material, reviewed annually. Recordings contain our presentation, not attendees.

8. Your rights

You have the right to ask us for a copy of your personal information, to correct it, to delete it, to restrict or object to how we use it, to take it elsewhere, and to withdraw consent where consent is the basis. Email hello@studybrain.ai and we will respond within a month. There is no charge.

For anything that happened inside the Paddle checkout, Paddle is the controller and their privacy policy tells you how to exercise your rights with them. Point them our way regardless and we will help you route it.

9. Complaints

If you are unhappy with how we have handled your data, tell us first at hello@studybrain.ai and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We will update this policy as the business changes, and the date at the top always shows the current version. If a change is significant, customers on our email list will be told directly.