Privacy Policy
Study Tracker — web and iOS
Last updated 27 July 2026
Study Tracker records how long you study and lets you compare that with friends you choose. This policy describes exactly what is stored, why, and how to get rid of it.
Who is responsible
Study Tracker is run by an individual developer, not a company. For any privacy question, or to exercise any right described below, email roko.duvnjak@gmail.com.
What is collected
Everything below is either given by you or generated by your own use of the app.
| Data | Why |
|---|---|
| Email address and password | To create and secure your account. The password is stored only as a salted hash and is never visible to us. |
| Username, display name, language, accent colour, daily goal, visibility setting | Your profile, and how the app looks and behaves for you. |
| Study sessions — start time, duration, subject, optional note | The core purpose of the app. Shown to you, and to friends according to your visibility setting. |
| Daily totals and subject breakdowns | Charts, streaks and competition scoring. |
| Whether a timer is running right now | The "studying now" indicator your friends see. Cleared when the timer stops. |
| Friendships, competitions, and comments you write | The social features. Comments are visible to the people in that session or competition. |
| Blocks and reports you submit | Safety. A report includes a copy of the reported content so it can still be reviewed if the original is deleted. |
| Notification tokens | An Apple push token (iOS) or browser subscription (web), only if you switch notifications on. Removed when you switch them off or sign out. |
What is not collected
- No advertising identifiers, and no advertising of any kind.
- No analytics or behavioural tracking SDKs.
- No location, contacts, camera, microphone, photos, or health data.
- No tracking of you across other apps or websites.
Who else sees it
Your data is not sold, rented, or shared for marketing. It is processed by these providers purely to make the app work:
- Supabase — database, sign-in, and server functions. All app data is stored here.
- Apple Push Notification service — delivers iOS notifications. Receives the notification text and your device token, only when a notification is sent to you.
- Netlify — serves the website.
- Your browser vendor's push service (Apple, Google or Mozilla) — only if you enable web notifications.
Data may also be disclosed where the law requires it, or where it is necessary to investigate abuse reported through the in-app reporting feature.
What other users see
This is controlled by the Who can see your progress setting in your profile:
- Private — nobody but you.
- Friends — only people whose friend request you accepted.
- Public — any signed-in user who searches for your username.
Your username is always searchable so that people can send you a friend request. Your email address is never shown to other users. Blocking someone hides you from each other in both directions.
How long it is kept
Your data is kept until you delete it. Deleting a study session removes it immediately. Deleting your account — Profile → Delete account — removes your account and everything attached to it: sessions, totals, comments, friendships, competitions, blocks, and notification tokens. This is immediate and cannot be undone. Reports you have submitted about other people are retained without your identity attached, so that safety reports cannot be erased by deleting an account.
Your rights
- Access and correction — your data is visible and editable in the app.
- Deletion — Profile → Delete account, or email us.
- A copy of your data — email us and we will send an export.
- Objection or restriction — email us.
If you are in the UK, EU, or EEA, our legal basis for processing is the performance of our agreement with you (running the app you signed up for) and, for notifications, your consent — which you can withdraw at any time by turning notifications off. You also have the right to complain to your local data protection authority.
Security
All traffic is encrypted in transit with HTTPS. Passwords are stored as salted hashes. Access to your rows is enforced at the database level by row-level security policies, so one account cannot read another's data even if a client is modified. No system is perfectly secure, and we cannot guarantee absolute security.
Children
Study Tracker is not directed at children under 13, and accounts may not be created by anyone under 13. If you believe a child under 13 has created an account, email us and it will be deleted.
International transfers
Our providers may store and process data on servers outside your country, including in the United States. Where required, transfers rely on the European Commission's Standard Contractual Clauses.
Changes
If this policy changes materially, the date at the top will change and the new version will be published here before it takes effect.