1. Introduction

StudentHub is a study organiser for iPhone, iPad and Mac. This Privacy Policy explains what information the app handles, who processes it, and what rights you have.

StudentHub is designed to keep your data on your own devices. There is no user account, no login, and no StudentHub server that stores your notes, recordings, files or study material. Most of what this policy describes therefore concerns data that never reaches us at all.

The data controller for the limited processing described below is:

Kjølberg Productions, Leksvikgata 9, 7066, Norway. Organisation number: 933 342 050.
Contact: hello@contact.getstudenthub.app

2. Information We Collect

Content you create in the app. Subjects, notes, tasks, calendar entries, boards, flashcards, grades, work shifts, audio recordings, imported files and photos. This content is stored locally on your device using Apple's SwiftData framework. If you have iCloud sync enabled, it is also synchronised through your own private iCloud account. We have no access to it, and it is never transmitted to us.

Audio recordings and imported files. Recordings and files are stored on your device. You can optionally enable syncing, which stores them in your own private iCloud Drive folder so they are available on your other devices. This is off by default because of the storage involved. Whether stored locally or in iCloud, we have no access to them, and they are never transmitted to us. Transcription runs entirely on-device using Apple's speech recognition; audio is never uploaded for transcription, and the app never enables server-based recognition.

Other people in your recordings. Recordings you make may include the voices of lecturers, classmates or others. You decide what to record and how to use it, and those recordings never reach us. For recordings made with the app, Kjølberg Productions is therefore neither a controller nor a processor of personal data about the people recorded. If you record other people, you are responsible for having the permission required by law and by your institution's rules. See section 4 of our Terms of Use.

AI-generated study material. Summaries, study questions, flashcards and quiz questions are generated by Apple Foundation Models running on your device. Your source material — including notes, imported PDFs and transcripts of your recordings — is read on-device and passed to the on-device model in full. It is not sent to us, to Apple, or to any external service, and the app has no server-based fallback: if the on-device model is unavailable, generation simply fails rather than sending your material elsewhere.

Purchase information. StudentHub offers two kinds of purchase: a StudentHub Pro subscription, and one-off study action packs used to run transcription and AI generation. Both are processed by Apple. We use RevenueCat to verify entitlement and to reconcile study actions purchases so that study actions you have paid for are not lost if a purchase is interrupted. RevenueCat receives an anonymous, randomly generated app user identifier, your subscription status, and standard purchase metadata from Apple's receipt, including the identifier and quantity of any study action pack purchased. It does not receive your name, email address or payment card details, and we never see your payment details.

Your balance of study actions. The record of study actions you have purchased, earned or spent is stored on your device alongside your other app content, and includes the Apple transaction identifier for each purchase so the same purchase is never counted twice. If you have iCloud sync enabled, this record syncs through your own private iCloud account. We have no access to it.

Rewards. The app awards study actions for reaching milestones in your own use of it, such as adding a subject or completing a study session. Which rewards you have claimed is determined and stored entirely on your device. No usage data is sent to us or to anyone else in order to award them.

Anonymous usage measurement. The app sends a small number of anonymous events so we can see how StudentHub is used overall, for example how many people record a lecture, transcribe one, or create study material. An event carries its name and a few fixed labels or counts, such as which part of the app was opened, that a study action was used, that a transcription failed, or roughly how long it is since the app was installed. Events never include your notes, recordings, file names, subject names, error messages or any other content. Measurement is handled by TelemetryDeck, which is built for privacy: it receives a one-way hashed identifier derived from a device identifier, keeps no IP addresses, sets no cookies, and does not track you across apps or websites. We cannot use it to identify you or to look at an individual's use of the app.

Calendar feed addresses. If you add a timetable feed (ICS), the app fetches that address directly from the server you specify. The address and the calendar data are stored on your device. We do not operate or see these requests.

Apple Calendar. If you grant calendar access, the app reads events from Apple Calendar to display them alongside your study blocks, and can create, change and delete events in a calendar you choose, when you ask it to. All of this happens on your device, between the app and Apple Calendar. We never see it.

Our website. When you visit getstudenthub.app, our website provider Framer logs basic, aggregated statistics about the visit, such as which pages were viewed, the country the request came from, and which site you arrived from. The website sets no cookies, shows no advertising, and does not track you across other websites. We use these statistics only to see which pages people find useful.

What we do not collect. The app contains no advertising, no cross-app or cross-site tracking, and no cookies. Apart from RevenueCat and TelemetryDeck, described above, the app contains no third-party software development kit that collects data or contacts a server. It includes one third-party animation library, Lottie, which runs entirely on your device, has no network access and receives no information about you. We do not collect your IP address, advertising identifiers, location data, or the content of anything you write, record or import. We do not build profiles, and we do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.

3. How We Use Your Information

We use the limited information described above only for the following purposes:

• To verify and restore your subscription entitlement and your purchased study actions, so that paid features and study actions work on all your devices.

• To respond to you if you contact our support address.

• To comply with legal obligations, including accounting and tax requirements relating to purchases.

• To understand how the app is used in general, so we can improve it. This uses anonymous, aggregated events only, and never the content you create.

Content you create in the app is processed solely on your device and in your own iCloud account, for the purpose of providing the app's functionality to you.

4. Legal Bases for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Performance of a contract (Article 6(1)(b)) — verifying subscription status so we can provide the paid features you purchased, and responding to support requests about your use of the app.

• Legitimate interests (Article 6(1)(f)) — maintaining the security and integrity of the app, preventing fraudulent or abusive use of subscriptions, and understanding in aggregate how the app is used so we can improve it. We have assessed that these interests do not override your rights and freedoms, particularly as the data involved is anonymous or pseudonymous, is not used to identify you, and is not shared for advertising.

• Legal obligation (Article 6(1)(c)) — retaining transaction records where required by law.

We do not process special categories of personal data. We do not rely on consent for any processing described in this policy, because the app does not carry out any optional processing that would require it.

5. Sharing Your Information

We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising purposes.

We share data only with the following recipients, acting as processors or independent controllers as indicated:

RevenueCat processes data on our behalf under a data processing agreement. Apple's handling of your Apple Account, payments and iCloud is governed by Apple's own privacy policy, over which we have no control. TelemetryDeck processes data on our behalf under a data processing agreement, and stores it on servers in the European Union.

We will also disclose information if required to do so by law, court order, or a valid request from a public authority, or where necessary to establish, exercise or defend legal claims.

6. International Transfers

RevenueCat is located in the United States. Transfers of personal data outside the European Economic Area are made on the basis of the European Commission's Standard Contractual Clauses, together with supplementary measures where appropriate. Given that the data transferred is limited to an anonymous identifier and subscription status, the risk to your rights is low.

You may request a copy of the relevant transfer safeguards by contacting us.

TelemetryDeck stores its data in the European Union, so no transfer outside the European Economic Area takes place for usage measurement.

7. Data Security

We apply appropriate technical and organisational measures to protect personal data. Content created in the app is stored using the operating system's file protection and, where iCloud sync is enabled, is transmitted and stored under Apple's encryption. Communication with RevenueCat is encrypted in transit using TLS.

No method of electronic storage or transmission is completely secure. While we work to protect your data, we cannot guarantee absolute security.

Because there is no StudentHub account system and no server holding your content, the most significant protection for your data is the security of your own device and Apple Account. We recommend using a device passcode and two-factor authentication on your Apple Account.

8. Data Retention

Content in the app is retained until you delete it. Deleting an item in the app removes it from your device and, if sync is enabled, from your iCloud account. Deleting the app removes its local data; content synchronised to iCloud is removed when you delete the app's data from iCloud in your device settings. Backups you have exported to iCloud Drive remain until you delete them.

Subscription and study action purchase records are retained by RevenueCat for as long as your subscription is active, and for a reasonable period afterwards to support restoration of purchases, and by us where required for accounting purposes — under Norwegian law, generally five years. The record of your own study action balance lives on your device and in your iCloud account, and is removed when you delete the app's data.

Support correspondence is retained for up to 24 months after the matter is resolved.

Anonymous usage events are retained by TelemetryDeck for as long as they are useful for comparison over time, and cannot be linked back to you or deleted individually, because they contain nothing that identifies you.

9. Your Rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access the personal data we hold about you.

• Rectify inaccurate or incomplete data.

• Erase your data ("right to be forgotten").

• Restrict processing in certain circumstances.

• Data portability — receive your data in a structured, commonly used, machine-readable format.

• Object to processing based on legitimate interests.

• Withdraw consent at any time, where processing is based on consent.

• Lodge a complaint with a supervisory authority. In Norway this is Datatilsynet (datatilsynet.no). If you are elsewhere in the EEA, you may complain to your local authority.

To exercise these rights, contact hello@contact.getstudenthub.app. We will respond within one month, and will not charge a fee unless your request is manifestly unfounded or excessive.

Please note that because we do not hold your app content, most of these rights are exercised directly in the app itself: Settings → Export data provides portability, and Settings → Delete all data provides erasure. For your iCloud data, you can also manage and delete it from your Apple Account settings.

If you believe you appear in a recording made by a StudentHub user, please contact that person directly. We have no access to recordings made with the app and cannot view, retrieve or delete them.

10. Additional Regional Rights

StudentHub is available in 172 countries and regions. In addition to the rights described above:

United States (California — CCPA/CPRA) — you have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use sensitive personal information to infer characteristics. You will not be discriminated against for exercising your rights. Residents of other US states with comparable privacy laws have equivalent rights.

Republic of Korea (PIPA) — you have the right to be informed of, access, correct, delete and suspend the processing of your personal information, and to be notified of any breach. You may also file a dispute with the Personal Information Dispute Mediation Committee.

Vietnam (Decree 13/2023/ND-CP) — you have the right to be informed, to consent and withdraw consent, to access, correct, delete and request restriction of your personal data, and to complain to the Ministry of Public Security.

Brazil (LGPD) — you have the right to confirmation of processing, access, correction, anonymisation or deletion, portability, information about data sharing, and to complain to the ANPD.

Japan (APPI), Australia (Privacy Act), Canada (PIPEDA), Switzerland (FADP), United Kingdom (UK GDPR) — you have equivalent rights of access, correction and deletion under your local law.

Because we hold no content and no identifying information about you, these rights are in practice exercised within the app itself, using Settings → Export data and Settings → Delete all data, and through your Apple Account for anything synchronised to iCloud.

11. Children's Privacy

StudentHub is rated 4+ and is available to users of all ages. It is designed so that this is safe by default: the app has no user account, no chat or messaging, no social features, no user-to-user contact, no advertising, and no tracking across other apps or websites. Nothing a user writes, records or imports is transmitted to us.

We do not knowingly collect personal information from children. Two anonymous identifiers exist: one used solely to verify entitlement to StudentHub Pro, to restore purchases and to reconcile purchased study actions, and one, hashed and created on the device, used to count anonymous usage events so we can see how the app is used overall. Under the United States Children's Online Privacy Protection Act (COPPA), both constitute use of a persistent identifier for support for the internal operations of the service, for which parental consent is not required. Neither is used to contact anyone, to build a profile, or for advertising.

Purchases — both the subscription and one-off study action packs — are made through the Apple Account that owns the device. Parents and guardians can restrict or disable in-app purchases using Screen Time on the device. Study actions can also be earned inside the app without any purchase.

The app contains links that open outside StudentHub — our social media profiles, our support email, and our legal pages. Parents and guardians who wish to prevent this can restrict outbound links and app installation through Screen Time.

In the Republic of Korea, where the user is under 14, processing requires the consent of a legal guardian. Because we do not collect personal information from users of the app, no such consent is required for ordinary use; where a subscription is purchased, that transaction is made through the Apple Account of the account holder.

If you are a parent or guardian and believe a child has provided us with personal information, contact hello@contact.getstudenthub.app and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are significant, we will notify you in the app or by another reasonable means before they take effect. The date at the top of this policy indicates when it was last revised, and the current version is always available at getstudenthub.app.

13. Contact Us

For any question about this policy or your data:

Email: hello@contact.getstudenthub.app
Postal: Kjølberg Productions, Leksvikgata 9, 7066, Norway