Privacy Policy

Last Updated: January 20, 2026

1. Information We Collect

When you use StudyCore, we collect:

• Google Account Information: Your name, email address, and profile picture from your Google account
• Study Data: Topics you create and your review schedules (stored internally in StudyCore)
• Usage Data: Topics you create schedules for and your review intervals

2. How We Use Your Information

We use your information solely to:

• Authenticate your identity via Google Sign-In
• Schedule and track your study reviews within StudyCore
• Display your schedules in your dashboard

3. Data Storage and Security

Your data is stored securely on Render.com's infrastructure. We use industry-standard encryption and security practices to protect your information.

4. Data Protection Mechanisms for Sensitive Data

How we protect your sensitive information:

4.1 Google OAuth Data Protection

We use Google OAuth solely for secure authentication. We protect your data through:

• Encryption in Transit: All data transmitted between your browser, our servers, and Google's servers uses HTTPS/TLS 1.3 encryption
• Encryption at Rest: OAuth tokens are stored encrypted in our PostgreSQL database using AES-256 encryption
• Access Controls: Only authenticated users can access their own data
• Token Security: OAuth tokens are stored securely and never exposed in logs
• Minimal Data Collection: We only collect your email and name for authentication

4.2 Personal Information Protection

We protect your email address and profile information through:

• Database Security: PostgreSQL database with row-level security and encrypted connections
• Session Management: HTTPOnly cookies prevent JavaScript access to session tokens
• Secure Authentication: JWT tokens with 24-hour expiration and secure key rotation
• No Third-Party Sharing: We never share your personal information with advertisers or data brokers

4.3 Data Minimization

We follow the principle of data minimization:

• We only request basic profile information (email, name) for authentication
• We do not access your Google Calendar, Drive, or any other Google services
• We do not collect browsing history, device information, or location data
• We do not use tracking pixels or third-party analytics

4.4 Data Deletion and Retention

You have complete control over your data:

• Account Deletion: You can delete your account at any time from the dashboard
• Immediate Removal: Upon account deletion, all your data is permanently removed within 24 hours
• OAuth Revocation: You can revoke Google access at any time via your Google Account settings
• Automatic Cleanup: Inactive accounts (12+ months) are automatically flagged for deletion

4.5 Incident Response

In the unlikely event of a data breach:

• We will notify affected users within 72 hours
• We will detail what data was affected and what actions we're taking
• We maintain logs to investigate and prevent future incidents
• All security incidents are reported to relevant authorities as required by law

4.6 Third-Party Service Security

We use trusted third-party services with strong security practices:

• Render.com (Hosting): SOC 2 Type II certified, GDPR compliant
• Google APIs: Industry-leading security and OAuth 2.0 standards
• PostgreSQL: Open-source database with enterprise-grade security features

5. Google Authentication

We use Google OAuth solely for secure authentication. This means:

• We only access your email and name to create your account
• We do NOT access your Google Calendar, Gmail, Drive, or any other Google services
• You can revoke access at any time via your Google Account settings

Scopes we request: email, profile (basic authentication only)

6. Google API Services

This app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Your Rights

You can:

• Revoke access at any time via your Google Account permissions
• Request deletion of your account data by contacting us

8. Contact

Questions about this privacy policy? Contact us at: goodnewsokpubigho22@gmail.com