Privacy Policy

1. Who we are

Studuet Ltd ("Studuet", "we", "us", "our") operates the Studuet learning platform at studuet.com. We are committed to protecting your personal data and complying with the UK GDPR and the Data Protection Act 2018.

Data Controller: Studuet Ltd. For any privacy queries, contact us at privacy@studuet.com.

2. What data we collect

We collect the following categories of personal data:

• Account data: name, email address, password (hashed), role (student/tutor)
• Cognitive Learning Profile (CLP): answers to our assessment questionnaire, derived learning dimension scores
• Session data: booked and completed tutoring sessions, attendance, notes
• Study activity: flashcard reviews, mock exam results, XP points, streaks
• Payment data: billing plans, transaction references (we do not store full card numbers)
• Technical data: IP address, browser type, device type, access timestamps

3. How we use your data

• To provide and personalise the Studuet platform (CLP matching, ILE adaptation)
• To match students with tutors based on learning profile compatibility
• To process bookings and payments
• To send transactional emails (booking confirmations, session reminders)
• To improve platform features through aggregate, anonymised analytics
• To comply with legal obligations

4. Cognitive Learning Profile (CLP) data

Your CLP data is particularly sensitive as it reflects your cognitive patterns. We treat it with the highest level of protection:

• CLP scores are never sold or shared with third parties for marketing purposes
• Tutors only see a compatibility percentage — never your raw dimension scores
• You may delete your CLP data at any time from your account settings
• CLP data is processed on our servers in the UK only

5. Cookies

We use the following cookies:

• Strictly necessary: session authentication token (JWT stored in localStorage)
• Functional: user preferences (theme, sidebar state)
• Analytics: aggregate, anonymised usage statistics — no third-party tracking cookies

You can disable non-essential cookies at any time. Disabling strictly necessary cookies will prevent you from staying logged in.

6. Data sharing

We do not sell your personal data. We may share data with:

• Payment processors (Stripe, PayPal) — only what is necessary to process your transaction
• Email service providers — to deliver transactional emails on our behalf
• Law enforcement — if required by law

7. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will erase your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (up to 7 years for transaction records).

8. Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability (receive your data in a structured format)
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email privacy@studuet.com.

9. Security

We implement appropriate technical and organisational measures to protect your data, including bcrypt password hashing, JWT authentication, HTTPS enforcement, rate limiting, and regular security reviews.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of Studuet after changes constitutes acceptance.

11. Contact

Studuet Ltd
Email: privacy@studuet.com